
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fed4a05-2308-3b71-b3cc-a01a5695ea8a.roa
File: 5fed4a05-2308-3b71-b3cc-a01a5695ea8a.roa (raw, json)
Hash identifier: bhDR5RY8QUkJgi3nhPl7Dnl+tBI9qzE4p/rislws1Jk=
Subject key identifier: BA:F3:59:89:08:6F:D5:C2:E1:C9:2C:85:99:A1:71:52:6A:CD:B6:8B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4C3D593826FB2D3681F00740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fed4a05-2308-3b71-b3cc-a01a5695ea8a.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 397198
IP address blocks: 2001:500:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:59:38:26:fb:2d:36:81:f0:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=24f95d86-b6d4-4ea9-b38f-3b49c5b147b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:b2:ea:a2:4e:4b:02:50:36:fb:67:9c:02:
a3:ec:fd:87:de:56:12:36:2e:ac:25:99:eb:de:6a:
5b:5b:6e:19:96:c7:74:b1:b2:18:cb:f0:b3:b0:27:
c0:52:1a:47:9f:39:86:87:ae:cb:36:42:ad:d5:5d:
11:ab:16:f0:9b:13:68:43:a5:69:eb:36:21:21:03:
d3:2c:b7:3d:7a:19:46:51:10:5a:fd:a3:dd:67:af:
55:fa:f0:5b:eb:34:bb:af:43:69:5f:1a:48:29:a8:
95:3d:1a:05:04:30:49:94:be:eb:bc:57:56:4b:7f:
e4:5b:af:2f:9c:76:19:bd:6d:81:b0:b1:4a:35:e6:
73:97:8e:2a:47:b7:03:d6:bb:6d:06:a1:2d:85:b2:
1f:5f:5e:bd:9d:54:96:78:e9:c4:54:ef:54:35:a9:
11:14:bb:6d:bc:19:46:bc:a5:b6:a1:4b:3f:d0:5c:
a3:fc:7c:ee:5a:0e:19:31:5b:b5:d8:5c:01:2f:37:
e6:2e:6d:28:9f:43:b7:cb:a3:b4:09:bd:aa:93:72:
bb:67:d4:e2:7e:4a:d6:f1:57:9d:f4:8e:80:44:c1:
4a:43:4f:0c:42:0a:e8:68:5b:56:14:9f:79:b7:e3:
71:df:3b:e5:2e:67:57:b0:a0:6c:49:6b:31:f0:58:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:59:89:08:6F:D5:C2:E1:C9:2C:85:99:A1:71:52:6A:CD:B6:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fed4a05-2308-3b71-b3cc-a01a5695ea8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:135::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:5f:39:b2:ee:52:59:63:8c:cc:e9:5e:90:ad:28:fa:b1:64:
24:31:12:4c:03:1f:6b:6d:ff:07:1c:36:d4:dc:75:7b:38:a5:
a3:a4:3c:f6:42:ef:e2:67:84:23:91:bf:f8:9c:71:67:05:72:
42:fb:da:62:e6:e8:8b:f7:e9:49:9b:83:f5:14:d1:21:77:9b:
88:c5:66:c3:40:a5:6c:ed:65:4b:a3:59:e7:60:c1:5b:44:dc:
ca:dc:97:d3:67:57:a9:16:86:1a:6e:2e:46:e8:3b:6b:2e:6b:
c9:a0:b6:58:c6:3c:4b:11:89:1a:62:02:61:d6:1a:f2:66:bf:
fb:c0:b6:ce:c3:9b:64:40:44:3d:62:1d:54:77:b0:93:11:3d:
b4:65:df:bc:81:6e:6a:b8:6d:99:c9:26:3f:02:01:50:ea:9b:
0f:b9:95:31:d4:0f:c6:8b:96:a1:6f:e3:ca:65:40:2a:2e:17:
00:05:57:fd:6b:86:cd:78:7a:72:04:e2:4d:e1:34:1e:3b:f9:
9a:f4:0c:43:ec:31:de:57:ff:90:c5:aa:10:a4:3f:1e:75:6b:
19:a0:cb:17:64:15:b3:0c:12:c7:96:ce:bf:4e:f9:99:e9:6f:
45:cf:3c:14:d0:73:1d:27:49:ef:61:84:1b:72:30:69:39:1e:
2a:4f:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:07:35 2026 by rpki-client