
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa
File: f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa (raw, json)
Hash identifier: Qm8WNWngU6JvKjbEuT72G9pFKIE+Af+DufPy+fidi14=
Subject key identifier: 8C:C6:C9:0C:3B:1C:5D:E7:15:C6:66:60:76:68:71:5C:06:7D:26:11
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4C3D59FD7CE68E9DDEFA1440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 397210
IP address blocks: 2001:500:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:59:fd:7c:e6:8e:9d:de:fa:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=54e5264a-739a-4647-963f-8c1f25c4e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:e4:65:80:c2:a5:91:1b:70:b4:76:3a:48:
4b:5f:b4:17:5f:08:a7:9c:31:6e:1a:47:eb:3b:e9:
9d:70:bb:a0:37:06:31:35:b1:e7:d0:92:a9:86:71:
a7:dc:f6:dc:13:29:b7:32:4e:57:b9:a0:67:7a:ac:
d9:6e:fe:62:c5:17:c1:b6:d5:9b:52:cb:f7:69:99:
75:e7:00:60:da:05:a5:ca:67:9b:6d:e7:e5:73:5f:
f1:d3:e9:3c:15:c4:15:7b:f2:fb:5e:a2:f4:3c:5c:
51:19:69:12:65:a8:be:b7:c1:cc:61:21:2a:ce:98:
3a:b8:ae:ac:ae:23:c5:66:05:5b:4a:64:f6:35:63:
ef:0c:ff:f5:2a:d3:d6:6e:fd:0e:eb:e9:77:75:31:
7b:81:f1:2b:01:b3:d9:d7:55:d1:39:0e:11:c3:6a:
5d:48:12:ff:d0:7c:cc:dd:41:9e:39:0f:02:21:20:
a0:00:e5:0e:05:3b:a9:72:ef:cc:e9:8e:1b:0d:a2:
31:0b:b8:1c:8f:ce:c9:96:65:f5:26:08:e6:62:98:
9d:2f:6b:b0:75:8f:39:b6:50:14:55:46:22:ad:54:
b5:7c:2c:c0:76:2b:55:14:f1:21:07:16:e0:9b:29:
d6:d6:59:07:94:68:5d:e7:ae:d8:40:e0:3a:cd:e0:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:C9:0C:3B:1C:5D:E7:15:C6:66:60:76:68:71:5C:06:7D:26:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3dbe3f0-66b1-3cf0-8718-bb84db164230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e4:ad:73:a4:83:7a:47:12:e3:c6:6e:c5:23:85:e1:6e:48:
81:ff:ca:a7:fa:a4:03:ae:7d:aa:dc:00:97:d1:b3:ae:bd:1c:
4b:56:44:72:27:b9:5f:31:33:eb:9b:36:dd:47:5d:3c:4e:f7:
75:99:1e:b7:4e:d2:92:dc:67:fb:0f:d7:6f:69:7c:29:49:d5:
e1:21:5b:37:97:cb:d2:dd:ea:b7:4a:8b:4d:54:7e:f8:ba:c0:
06:7f:f5:5c:46:86:2d:04:cc:a0:03:8c:ae:95:4b:fc:16:ff:
b7:7e:a1:4b:90:db:d3:d9:3c:01:d5:be:e3:53:14:78:43:30:
68:f9:d0:d2:dd:4e:74:7e:cb:67:20:ab:22:85:c5:5b:bf:d1:
5d:7b:a0:f3:91:60:a9:1b:f4:4d:87:c2:05:75:18:cb:7e:3b:
26:ec:f7:b8:cf:10:80:6f:0f:b0:10:c7:0e:0a:e6:1f:1a:10:
b7:1e:0e:14:59:f0:ca:14:ce:00:98:44:2e:72:91:28:d4:6e:
37:94:73:8d:ed:4c:05:fe:30:e4:52:0c:28:d7:ae:d7:b6:53:
5c:da:f0:f7:25:f2:fe:67:cd:45:10:a8:6d:6b:3a:2f:06:13:
d0:51:86:70:61:20:6a:44:2d:e4:cb:45:21:78:0c:48:c3:f7:
28:f0:ee:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVn9fOaOnd76FEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NTRlNTI2NGEtNzM5YS00NjQ3LTk2M2YtOGMxZjI1YzRlMDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7HkZYDCpZEbcLR2OkhLX7QXXwinnDFuGkfr
O+mdcLugNwYxNbHn0JKphnGn3PbcEym3Mk5XuaBneqzZbv5ixRfBttWbUsv3aZl1
5wBg2gWlymebbeflc1/x0+k8FcQVe/L7XqL0PFxRGWkSZai+t8HMYSEqzpg6uK6s
riPFZgVbSmT2NWPvDP/1KtPWbv0O6+l3dTF7gfErAbPZ11XROQ4Rw2pdSBL/0HzM
3UGeOQ8CISCgAOUOBTupcu/M6Y4bDaIxC7gcj87JlmX1JgjmYpidL2uwdY85tlAU
VUYirVS1fCzAditVFPEhBxbgmynW1lkHlGhd567YQOA6zeC1iQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIzGyQw7HF3nFcZmYHZocVwGfSYRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjNkYmUzZjAtNjZiMS0z
Y2YwLTg3MTgtYmI4NGRiMTY0MjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAfkrXOkg3pHEuPGbsUjheFuSIH/yqf6pAOufarcAJfRs669HEtW
RHInuV8xM+ubNt1HXTxO93WZHrdO0pLcZ/sP129pfClJ1eEhWzeXy9Ld6rdKi01U
fvi6wAZ/9VxGhi0EzKADjK6VS/wW/7d+oUuQ29PZPAHVvuNTFHhDMGj50NLdTnR+
y2cgqyKFxVu/0V17oPORYKkb9E2HwgV1GMt+Oybs97jPEIBvD7AQxw4K5h8aELce
DhRZ8MoUzgCYRC5ykSjUbjeUc43tTAX+MORSDCjXrte2U1za8Pcl8v5nzUUQqG1r
Oi8GE9BRhnBhIGpELeTLRSF4DEjD9yjw7gU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:41:02 2026 by rpki-client