
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa
File: ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa (raw, json)
Hash identifier: HxhparYs6JI4wsBt1eSbS9N2URDRrq8uLvC6A89lVPs=
Subject key identifier: EA:78:37:6F:EF:1B:01:BE:63:DD:FC:A1:47:F8:01:5D:BE:5F:C7:F8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E3A2F7510EFEBBC4B6F47DF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa
Signing time: Fri 19 Jun 2026 21:00:12 +0000
ROA not before: Fri 19 Jun 2026 21:00:12 +0000
ROA not after: Thu 17 Sep 2026 21:00:12 +0000
asID: 396551
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:2f:75:10:ef:eb:bc:4b:6f:47:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 19 21:00:12 2026 GMT
Not After : Sep 17 21:00:12 2026 GMT
Subject: CN=08319c5c-c532-4374-8b49-336640a31fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:2d:da:fc:01:86:65:2e:46:c8:a6:5f:2d:
d6:b2:f4:13:f2:ee:4d:85:48:8c:75:17:fb:c6:f3:
8b:ee:c1:9a:94:58:3a:73:79:ee:b2:6b:52:08:f3:
97:72:69:0a:1a:f5:2d:c6:53:23:b6:61:d4:6d:74:
e4:93:ec:b7:54:6e:ab:24:a8:a9:58:df:19:35:64:
6f:17:15:eb:4d:f5:5a:10:26:22:02:c4:57:09:98:
35:fd:ea:ff:e0:d5:28:d6:b5:96:dc:11:19:f9:b2:
2a:7d:b2:02:c3:2f:66:1d:f6:33:6d:a5:0c:0c:d3:
c5:73:27:63:d7:39:ec:c2:f7:39:3c:bb:c0:a5:97:
2b:67:a4:ce:b4:b6:df:42:40:60:78:67:b1:5c:08:
4f:db:a1:1d:89:d2:03:61:47:96:2d:bc:f4:d7:2e:
29:e2:c6:97:5f:b9:cb:dc:02:c5:63:29:d7:58:ed:
a4:2a:50:92:60:5c:00:73:5a:f8:61:5a:70:be:01:
9b:71:b8:2d:78:ea:64:b1:c9:8b:29:e1:b1:ad:36:
00:59:c4:da:ee:b8:31:0e:6c:92:86:99:97:ae:c5:
80:45:00:ed:43:00:6d:c0:15:71:7c:ec:32:7e:03:
53:4d:65:16:c5:45:bc:45:0b:8f:15:dc:69:4a:80:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:37:6F:EF:1B:01:BE:63:DD:FC:A1:47:F8:01:5D:BE:5F:C7:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:12:6a:78:9d:2e:e0:74:c1:2d:a0:dc:f8:98:38:14:af:55:
36:5b:e2:5c:3c:46:77:f1:a2:aa:81:7c:ba:62:29:0b:64:dd:
a8:90:51:72:af:f5:74:22:55:4b:ff:d7:35:af:85:d0:48:c9:
7e:05:89:be:d0:0b:58:b5:5e:88:ed:13:80:c1:93:39:f4:cd:
d4:ce:bc:b3:71:08:ee:83:e9:4d:e7:43:24:e2:da:c5:64:0b:
e1:42:6d:a3:81:50:32:dc:b3:e2:d6:ff:31:c1:22:c4:3c:96:
2c:28:3a:ac:f4:77:f9:bc:f2:b0:5b:95:2c:1d:4d:8d:3e:14:
89:26:29:9b:c9:4e:8b:16:c6:06:3a:e4:74:45:52:a5:be:db:
92:b2:72:9b:2d:8a:ab:0f:6a:71:fd:9c:da:ad:41:e9:ef:7b:
74:70:72:28:c9:1b:f2:3b:a2:f6:a1:f6:83:66:85:8a:92:74:
93:a7:4a:82:a6:1b:1a:a2:e5:e1:11:4f:43:c4:c4:2e:eb:f4:
41:32:87:ea:d2:ea:60:3a:17:90:53:fe:c2:3a:39:3c:14:80:
ff:3b:4b:85:b7:da:04:e8:94:33:24:0e:2b:70:21:e9:87:ce:
9c:41:d1:a4:12:7c:9c:75:c6:cd:40:cc:e5:5a:30:b0:49:64:
5c:b2:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:39:50 2026 by rpki-client