
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b28ba8b-031a-34f9-a85c-b2ce1c4d7d9f.roa
File: 2b28ba8b-031a-34f9-a85c-b2ce1c4d7d9f.roa (raw, json)
Hash identifier: /gqvdRECe3M389aiTK8gN2kdVHx3QoQwVPlutr+bQU0=
Subject key identifier: 79:19:3E:D8:7C:D7:B0:14:5A:A6:4C:8D:83:0E:6D:D6:D2:09:35:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4C3D41B4AA0292372CC4A240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b28ba8b-031a-34f9-a85c-b2ce1c4d7d9f.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 36625
IP address blocks: 2001:500:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:41:b4:aa:02:92:37:2c:c4:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=2eb44cb9-1986-479a-b892-99b537996a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:6a:3b:2e:63:f1:07:e4:65:5b:15:50:b4:
b0:4e:b9:e6:81:10:78:48:e6:21:82:a2:10:f2:d8:
4f:17:15:67:93:9a:05:78:26:83:0c:e9:aa:ba:a3:
ef:e0:5f:f9:d9:9b:a6:b4:99:a3:3f:06:4f:5c:9f:
b5:24:a3:58:71:0d:6d:f0:6e:e0:4a:2f:5b:39:d2:
bb:b7:78:b4:d7:06:5a:24:11:ff:ee:9a:58:51:00:
f8:8e:56:5b:d0:e2:13:c2:ac:e9:d2:bc:94:17:84:
72:22:b5:3f:bc:52:7e:c4:78:8b:58:0a:b2:97:79:
73:8a:34:3e:11:4d:f2:a0:92:11:12:8f:5c:02:30:
22:0f:98:c7:32:ba:a8:6b:e9:b6:f2:e6:df:f4:16:
88:1e:76:54:21:ad:fb:dd:ef:43:b9:5c:92:5d:4b:
1d:ee:21:5f:1e:6a:42:70:c0:84:66:0b:a2:92:52:
91:21:d1:4e:1f:a9:d8:15:6b:e1:a1:c8:fa:d8:7e:
bc:bb:f5:b8:39:f2:f4:27:f1:5f:07:97:d4:ad:b3:
7d:5d:db:3b:1b:f5:9b:8f:57:16:eb:82:c5:63:27:
69:dc:0d:f3:8a:22:f4:ad:fd:12:27:26:36:dc:69:
40:3a:a5:a1:16:88:30:25:e5:d1:41:f6:51:2a:6b:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:3E:D8:7C:D7:B0:14:5A:A6:4C:8D:83:0E:6D:D6:D2:09:35:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b28ba8b-031a-34f9-a85c-b2ce1c4d7d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:66:6d:c2:83:e0:b3:2b:ef:d6:a0:e3:b8:1b:10:20:5b:b7:
d1:ed:2b:9c:99:ce:d5:4a:46:cc:30:88:fa:c4:3b:8a:3b:60:
a2:b1:04:d7:3d:f2:3c:60:44:bd:20:69:4a:74:5b:c8:54:a3:
83:76:17:8c:53:6d:74:91:16:c2:54:fc:03:67:40:83:61:13:
ff:ec:ce:02:dd:a0:64:8e:23:ed:d1:45:9f:96:40:7b:e8:51:
6f:52:cd:24:77:0d:aa:0d:ec:7e:ba:37:d8:10:ca:ea:99:97:
c5:c4:39:06:a4:7d:d0:5c:56:c3:79:c6:e7:8d:69:f1:9d:e0:
4f:92:e7:55:1b:e2:67:f8:f6:be:0e:5e:c4:81:a4:89:18:da:
eb:5a:95:b1:21:16:d8:6f:41:14:90:f8:58:1a:f6:2b:78:40:
b7:b4:61:9d:05:fd:cb:43:00:83:9e:8f:11:51:b2:ff:aa:38:
51:42:c7:48:a0:2b:46:7a:01:9e:02:29:a8:71:da:d8:b4:3a:
d2:e9:52:a1:3a:60:4c:51:99:24:e3:76:93:bc:e8:24:09:a2:
b0:27:21:70:80:57:67:c6:05:c2:3d:21:da:33:93:ea:bf:b2:
ad:35:dc:7f:89:21:8a:0a:57:2a:7e:d4:15:61:e1:88:ea:e3:
3a:e6:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:44:54 2026 by rpki-client