
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa
File: 4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa (raw, json)
Hash identifier: lr2ZJxpM3+BXzI63zBMIKOR3y8yJQ2uHb5mC4XVXkkQ=
Subject key identifier: 52:CB:2E:D2:11:71:2F:A9:03:D5:2C:21:88:CA:0B:91:F0:D9:21:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549DAB2A8CE9D9563AE67BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 396549
IP address blocks: 2001:503:d2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:ab:2a:8c:e9:d9:56:3a:e6:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=21006dc1-0273-46d1-8ce0-8d1258703cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:50:35:16:40:0a:48:31:78:bf:f9:4b:64:
63:c2:d3:10:85:9c:c1:11:85:65:39:32:65:5c:37:
69:1d:69:41:4a:3f:40:10:c4:58:42:63:b2:f5:e7:
0b:61:78:dd:62:c2:b3:48:82:bd:31:5d:0e:ef:6e:
88:05:cd:60:fa:15:31:36:bf:27:ac:1d:d5:ca:3a:
c6:75:3c:86:46:30:05:db:3c:a8:05:00:6a:66:54:
fb:12:a6:c1:e9:10:fe:aa:d9:1e:9b:15:f8:f7:82:
2e:df:e7:4b:0e:8b:72:a1:a4:df:44:11:e9:f8:52:
f1:98:bc:f8:3c:51:ba:0d:84:08:f2:ad:1a:85:7a:
a7:c2:a4:43:e8:3b:12:dd:de:1f:b9:17:6a:ed:8a:
d1:d3:ff:25:5a:09:1f:15:45:d6:7d:20:61:3d:f6:
00:82:d7:fd:8c:a8:b4:04:fe:5e:df:f3:1c:12:66:
71:58:f5:f8:70:0d:b1:70:50:d3:45:5e:cb:5a:fa:
25:ef:ab:9f:96:26:fb:24:1a:18:7b:d6:25:40:f8:
09:a8:d2:0d:5a:3a:fc:67:ca:18:0a:d8:af:f4:00:
75:aa:e2:03:e0:44:28:5e:30:78:de:91:7a:30:3e:
25:f0:86:62:6e:55:dd:70:13:dc:94:b5:19:a6:d4:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:2E:D2:11:71:2F:A9:03:D5:2C:21:88:CA:0B:91:F0:D9:21:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1dd16f-0652-3e3f-b9c9-0b79f00b6e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3d:74:1f:1b:88:db:2f:ff:fa:f5:05:51:53:6e:00:6a:3b:
03:67:da:b8:66:f5:ee:7d:9e:c5:d5:bf:56:68:d2:0f:8c:18:
03:28:47:bc:f6:e4:dd:09:d7:95:c5:d5:c5:2a:96:8f:78:cc:
16:9e:58:03:52:95:1f:62:ba:29:93:51:3f:ca:b2:5f:ff:b1:
f1:3c:8b:8f:97:8b:c5:94:b9:3e:b3:df:cc:1f:54:51:76:7f:
6c:32:f6:0c:61:bc:0b:f6:f3:95:2b:ae:fc:22:d8:ba:cb:55:
24:26:fb:6f:3c:72:b7:55:fd:11:95:19:01:a0:58:63:54:b5:
65:79:55:fe:b9:68:ad:0f:be:5e:07:36:94:02:23:81:4d:a9:
ff:7b:ac:ce:0f:db:2e:c8:0c:c4:02:97:ac:92:31:fe:29:88:
8f:60:01:fb:37:d8:3c:86:2a:58:a1:5a:a6:71:8b:a3:25:fb:
24:26:e2:47:0c:91:3e:37:c9:8b:f9:7c:bf:0f:40:97:a5:7c:
c1:0b:b2:10:5b:95:37:2c:ad:50:32:e8:79:d4:0a:10:da:42:
eb:b3:5b:9a:79:01:0a:c9:32:72:bc:69:cc:79:c7:a1:23:3c:
b5:82:a3:e9:a2:9e:75:87:9e:09:ad:5f:2b:4f:27:a7:ff:df:
14:43:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:07:18 2026 by rpki-client