
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7d816ea-5db2-34df-ae24-6a8a16f7eef3.roa
File: f7d816ea-5db2-34df-ae24-6a8a16f7eef3.roa (raw, json)
Hash identifier: /IZHmZbhUnwie1V1i1qyfNDoINc20wJseidatcMtnO4=
Subject key identifier: 5C:C7:B9:0B:4C:B5:1D:F2:42:29:3D:82:C1:5B:41:46:41:CE:50:A3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F093CFD8B69225E92416DA260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7d816ea-5db2-34df-ae24-6a8a16f7eef3.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 40717
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:fd:8b:69:22:5e:92:41:6d:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=2b2df172-336d-4982-bedf-c310b707db1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:29:ee:db:72:e0:6b:b8:95:96:75:ac:37:
3c:ef:9c:b3:ce:a0:85:00:59:dd:17:ef:a9:55:b4:
5b:61:5f:c5:83:c6:86:71:58:33:77:9b:36:18:aa:
40:7c:df:80:db:17:ac:01:36:c3:57:75:fe:03:c8:
14:55:f4:5a:e3:c2:df:a1:6a:73:f7:7c:d1:35:7d:
0c:b5:58:7e:33:8e:d5:d4:fa:af:59:c3:50:50:b8:
71:3f:30:23:f3:2b:0c:bd:e1:ce:08:62:7d:dc:0a:
85:a1:c0:53:8a:93:57:3a:23:26:34:1a:f4:6b:0e:
05:ca:05:0c:02:e2:cb:40:df:aa:36:95:69:62:cc:
ba:04:38:1c:ed:82:58:79:60:1b:c0:0d:0c:90:0d:
e0:3b:29:1f:e7:2e:0b:04:fc:78:a2:82:0a:1a:37:
d1:78:9b:4d:99:fd:51:02:d1:b8:fb:8b:4f:eb:98:
31:9d:b9:4f:a4:0b:66:c0:31:0c:a2:a0:b5:29:c1:
e6:4c:5a:9c:d0:bd:35:a5:32:42:de:c8:09:d3:3c:
6a:04:28:18:14:9b:37:3c:9a:34:a1:12:64:0a:b3:
b2:e9:1a:76:b1:1d:ee:ea:ac:2b:ef:76:58:53:86:
c3:4a:d4:42:c6:9d:ca:cd:2b:35:55:57:c2:63:44:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:B9:0B:4C:B5:1D:F2:42:29:3D:82:C1:5B:41:46:41:CE:50:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7d816ea-5db2-34df-ae24-6a8a16f7eef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:0e:c4:cc:8c:04:de:ae:14:f0:9d:0d:52:9e:7a:96:d1:04:
52:9f:27:9a:c0:4a:94:7b:8e:dc:3d:2f:78:8e:fc:c2:19:4e:
73:63:05:86:ee:67:f1:78:44:4b:00:f5:e0:1d:8c:a1:96:43:
55:7c:ce:00:65:07:d8:da:a5:0f:69:51:7c:fe:8c:10:f5:6b:
3f:76:64:14:0f:7f:25:3e:42:e4:21:8d:8f:d1:68:02:ba:bd:
a0:4b:26:2b:1d:85:be:c6:8e:e2:05:7a:40:03:4e:c5:c9:f1:
7a:28:2c:f9:3d:7d:da:0c:91:b8:9a:d3:78:b3:2f:91:af:e9:
e0:7e:c8:ab:63:54:c4:8b:e7:06:db:d3:f8:7a:d8:44:ec:82:
e9:de:e6:bd:5f:ed:60:be:b7:a2:6b:85:53:54:b3:c3:c6:76:
6b:5f:42:94:ab:b9:67:77:be:6c:25:23:d7:48:cf:70:75:8b:
b6:b9:13:e9:8a:2c:fb:ae:7f:6d:54:eb:9c:cc:d7:1c:33:27:
4f:c7:06:32:9f:c6:d5:47:d5:03:90:43:a5:6f:6d:28:2e:4e:
da:58:cb:3e:e4:27:a0:73:8f:9c:d2:61:c8:3d:28:9a:20:81:
c1:40:40:6f:ee:d5:f7:4d:fc:09:b6:ff:70:59:d1:ca:14:19:
34:1e:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:27 2026 by rpki-client