
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fa9d9a8-413d-3ecf-abec-0036861460cc.roa
File: 1fa9d9a8-413d-3ecf-abec-0036861460cc.roa (raw, json)
Hash identifier: Zq2ckNEIQ0I/u3J7fBiG6JUVzGZPjTnt9lT8HJCbNrQ=
Subject key identifier: 02:EA:DF:CA:CE:0C:21:71:D8:FD:AA:79:3A:8D:03:3C:0B:B6:68:9B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49735827CCC70811839E7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fa9d9a8-413d-3ecf-abec-0036861460cc.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396608
IP address blocks: 2001:501:8a29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:58:27:cc:c7:08:11:83:9e:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=463b74fc-db28-44fe-8350-47af5683166d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:87:a6:18:39:66:83:8c:03:de:39:4e:73:
cd:dc:a0:13:59:c9:6c:27:ee:7f:74:11:6f:1d:b9:
91:81:08:73:32:2b:bf:1a:00:96:ea:61:96:b9:18:
9e:5c:19:1a:ed:04:2b:fa:99:fd:af:40:d2:aa:6f:
a8:d4:cd:57:23:1a:91:b8:73:8f:d4:8e:6b:9c:42:
ce:ef:fc:73:5b:43:64:f7:c0:50:87:4e:ea:12:3f:
2e:6d:39:b2:c9:e6:09:86:8f:67:dc:5d:5c:3e:6c:
4e:94:c4:f4:da:af:84:06:4c:e1:29:ef:a2:bc:84:
b4:c4:8e:52:1c:1f:1d:2e:68:e5:ca:6c:4b:26:31:
92:d6:cd:06:da:7d:03:6e:d3:14:0d:7d:f7:99:5d:
f9:65:9d:2f:55:d9:1e:4b:5f:8e:6e:db:71:d9:b8:
9d:b8:64:0b:4a:08:1f:bb:84:56:44:79:09:92:5d:
2d:6b:43:38:3d:a7:2d:4e:b2:cd:fc:22:53:44:8a:
16:52:5e:b7:89:65:94:77:3b:09:82:da:6c:77:d1:
55:ae:d9:f4:5d:b6:d3:d9:73:ed:87:bf:a4:aa:23:
7b:49:4e:67:4c:f6:c2:94:0d:72:27:64:9e:8f:20:
a0:13:98:d5:95:c2:0b:39:f6:dd:14:72:e6:72:e3:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:DF:CA:CE:0C:21:71:D8:FD:AA:79:3A:8D:03:3C:0B:B6:68:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fa9d9a8-413d-3ecf-abec-0036861460cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:1f:83:06:8f:07:91:e2:a1:fe:b9:c0:b5:8f:26:f8:4f:76:
8b:da:ea:9e:78:d1:eb:92:72:fe:6a:3a:e2:7a:3b:a6:96:bc:
71:a5:b5:97:4f:ba:0a:aa:c5:57:85:bc:db:cd:96:b3:a2:5e:
93:62:d0:79:6f:31:58:ff:95:ba:24:b1:67:55:75:bf:5c:4b:
00:1f:1a:47:b6:95:e1:69:73:53:a7:07:66:fc:dc:15:3a:86:
c2:07:2f:39:a5:f2:bb:14:a9:b4:c7:a4:b9:82:44:f6:4d:d7:
86:03:00:2a:b4:36:1f:9a:4d:f0:15:e4:94:41:1d:57:ec:f2:
48:57:dd:94:9c:35:4c:03:07:6f:cc:63:cf:36:f3:42:a1:86:
60:b8:cf:66:9f:0b:77:5e:07:16:81:09:2a:46:a3:64:1c:60:
33:62:66:1f:de:55:44:78:06:ff:49:82:b8:4b:56:f0:61:93:
b6:7e:6e:59:4c:06:e0:5f:3b:72:8f:7f:f5:6a:7b:67:20:ca:
0c:13:b6:99:a7:8d:59:9d:2f:d2:00:4e:14:34:f5:84:d5:e2:
10:13:4e:e1:75:05:98:b0:7f:4e:8e:26:23:0e:bb:d7:4b:d6:
15:77:1c:4d:1a:af:f2:bd:94:fd:b2:e0:0f:98:85:59:80:c0:
41:a8:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:11:53 2026 by rpki-client