
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351ff685-d672-32e0-ad2a-f3936a7f47f4.roa
File: 351ff685-d672-32e0-ad2a-f3936a7f47f4.roa (raw, json)
Hash identifier: l8tvqpzg8WMrczBmhWKfMfkP5hBEQA1vqHqqBBXXOE8=
Subject key identifier: 04:3E:F2:F8:BC:20:89:1F:E0:20:ED:8B:20:12:00:0D:21:19:83:4D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EE0C22178A98ED30442464E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351ff685-d672-32e0-ad2a-f3936a7f47f4.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 396543
IP address blocks: 2001:500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c2:21:78:a9:8e:d3:04:42:46:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=bf4812ea-7631-4cd1-9965-874e3bac12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:e7:d7:e0:fa:3c:54:59:5a:e0:9f:0f:fd:
49:f7:02:d9:4f:d6:dc:b5:67:bc:28:48:f1:02:45:
d8:93:bc:97:ad:23:9b:a4:09:b9:3a:76:2f:e7:37:
b8:05:92:93:16:e3:1e:f9:3d:cb:7b:7c:45:05:0d:
2b:c3:97:56:0f:b2:63:05:9d:98:aa:4c:24:f2:44:
6a:de:e4:99:fa:79:3d:69:d1:55:5b:d2:b7:2f:d3:
43:59:9b:a5:a5:db:d4:8a:2e:eb:5c:ac:7a:22:14:
94:4c:65:3e:a9:a9:78:5b:7a:1e:29:45:30:4b:47:
f3:0b:aa:e9:51:64:01:58:9a:75:c0:f7:63:13:fe:
f0:3a:ba:a2:a4:34:68:87:38:40:46:42:47:41:6a:
c4:f0:4c:07:82:ea:db:df:d7:e7:a9:7b:84:f5:ec:
93:97:f4:8d:6e:da:88:c9:d2:69:6a:16:34:f4:fb:
df:7b:13:ad:e8:c4:e1:f7:8c:3f:b1:fa:39:5a:3a:
07:5d:0d:60:75:80:b4:20:67:c4:30:d8:d7:9d:bc:
81:fd:64:c3:7e:67:16:86:50:0c:6b:f2:d9:22:8a:
77:45:f5:37:95:0c:48:4b:ec:f0:8e:b0:73:e7:01:
b1:e8:ad:fe:c3:84:75:fb:30:74:39:c3:68:4e:15:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:F2:F8:BC:20:89:1F:E0:20:ED:8B:20:12:00:0D:21:19:83:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351ff685-d672-32e0-ad2a-f3936a7f47f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:10:49:a9:c6:11:8c:1b:05:9f:7b:e8:35:8d:98:7a:c5:f0:
46:02:c6:a3:4c:da:54:d9:c9:57:c9:bc:9e:f5:af:4a:12:ed:
e0:5d:96:a2:8d:df:e9:b8:39:a4:85:94:1e:e5:91:dd:16:a0:
54:ce:75:56:a5:43:85:10:6e:00:fd:47:77:05:59:91:eb:f9:
22:f8:d9:c9:48:c7:d7:8b:20:25:26:be:81:9f:7f:42:2d:3b:
2a:d5:b3:2c:bc:ea:a3:1f:d1:b4:1f:97:d4:0f:7b:ab:fa:b8:
0d:53:62:cc:a9:17:fc:ba:04:1d:7a:d3:8f:35:76:fc:73:c5:
e8:4a:d6:90:30:1c:f8:52:ea:5f:68:f9:76:2d:cd:a5:0f:78:
5e:f4:09:25:01:28:9d:61:96:df:a8:4e:de:87:be:ec:46:1e:
a9:fd:ef:b4:c2:48:32:30:c3:14:13:c3:ed:89:66:19:9f:81:
2b:71:94:6b:06:13:77:82:05:39:d4:9d:3e:98:4a:71:49:30:
37:e1:d0:d8:73:d2:f9:1c:be:b4:9a:06:5e:c7:03:a2:72:f5:
d0:5a:68:c8:68:e9:9e:56:ee:8b:38:03:94:eb:8a:f2:ae:2b:
46:6a:b4:a5:b0:86:8f:c8:57:3e:58:29:08:35:47:4c:e9:40:
42:c0:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:47 2026 by rpki-client