
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9abd5d9-667b-329d-b569-2827070ce72d.roa
File: f9abd5d9-667b-329d-b569-2827070ce72d.roa (raw, json)
Hash identifier: Ej9kII6YRvTw3XnE3obznAGE6rN4XKBM7uXkBrNpc2o=
Subject key identifier: 84:41:AA:41:26:DF:54:A4:F1:92:34:81:09:6E:91:B3:9B:F7:BD:1A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EDC91F73B4459897682624A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9abd5d9-667b-329d-b569-2827070ce72d.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 397209
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:f7:3b:44:59:89:76:82:62:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=965457be-2acc-4388-a1c7-524ddcba20d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:22:a9:66:80:df:db:9e:8d:10:96:2f:0d:
39:b2:d2:0b:d0:c1:cf:20:bd:f9:d9:0b:4f:d4:cb:
38:e7:69:6f:35:6b:50:2d:f2:0b:d5:b3:5d:26:a3:
2f:95:a4:9e:32:d4:54:45:04:94:93:83:8f:86:cd:
50:c7:91:7b:86:6a:bc:df:ce:1a:76:cb:d1:8f:43:
0c:62:cd:09:99:e9:2f:37:6d:ce:38:6d:4f:18:40:
e3:c4:18:dd:06:0a:43:37:f0:b5:8b:ac:a1:58:47:
14:a1:b8:74:cf:90:2b:ba:92:d3:c2:8b:56:23:41:
31:79:d6:92:51:75:1f:f4:56:f4:f8:34:45:7e:e1:
7f:9a:46:7b:e3:7c:c8:73:d6:ab:76:b8:25:4b:8b:
a2:f2:78:f4:27:50:ae:a8:ca:35:83:44:c2:72:90:
5a:97:bd:50:15:4a:f4:18:a8:54:f7:ce:b3:41:0d:
39:8a:96:4d:05:d7:cf:eb:d1:65:67:32:8a:9c:22:
00:5f:d6:9d:3d:e0:31:be:07:00:11:37:90:df:93:
80:84:07:3a:47:39:38:6f:1e:15:bd:7d:85:e2:84:
03:62:24:fa:ac:d5:ed:eb:c3:53:0c:6a:a0:72:47:
39:52:61:2c:ba:fa:9a:62:51:a4:13:31:73:82:9f:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:AA:41:26:DF:54:A4:F1:92:34:81:09:6E:91:B3:9B:F7:BD:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9abd5d9-667b-329d-b569-2827070ce72d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:22:bd:1d:ac:04:7e:12:4c:ad:4c:31:a2:ac:7f:72:62:0e:
e8:ed:de:7a:6a:a1:b4:7b:97:fb:6c:87:b7:f1:71:32:a2:da:
99:b4:1d:31:f1:17:63:7f:5d:55:34:c7:3f:cb:c4:f7:7e:07:
5d:b1:62:1b:43:3f:85:9a:d5:38:95:16:db:f1:49:b6:88:bb:
46:65:d5:64:43:11:57:25:f4:5c:24:d9:57:fc:06:c6:b6:21:
d5:15:d1:10:99:1c:3e:fb:41:f3:fc:f1:b6:eb:2f:de:f4:d8:
31:ea:bf:aa:fe:b9:9c:15:75:4a:ba:92:1a:34:05:c9:d7:e6:
a0:e9:e6:e2:ee:bb:13:fa:91:45:e8:33:af:5d:37:b7:39:42:
65:f9:c3:d7:80:10:96:91:04:c9:55:58:35:56:d2:9e:5e:d9:
ce:24:3b:74:2c:67:8f:01:75:1b:1a:f6:31:57:48:78:f3:97:
60:d3:f8:5f:69:c4:db:d3:75:8a:0a:db:c4:97:48:74:03:75:
18:e4:35:8b:58:f4:22:f5:18:30:7e:89:3e:db:87:f2:80:8a:
4e:09:7c:1c:a0:a5:0a:0f:70:57:74:d2:c3:96:a4:d7:35:76:
4b:52:46:e5:3a:25:77:7a:ec:70:93:79:a9:3b:91:a7:ad:16:
85:6f:bd:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckfc7RFmJdoJiSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
OTY1NDU3YmUtMmFjYy00Mzg4LWExYzctNTI0ZGRjYmEyMGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmQiqWaA39uejRCWLw05stIL0MHPIL352QtP
1Ms452lvNWtQLfIL1bNdJqMvlaSeMtRURQSUk4OPhs1Qx5F7hmq8384adsvRj0MM
Ys0JmekvN23OOG1PGEDjxBjdBgpDN/C1i6yhWEcUobh0z5ArupLTwotWI0ExedaS
UXUf9Fb0+DRFfuF/mkZ743zIc9ardrglS4ui8nj0J1CuqMo1g0TCcpBal71QFUr0
GKhU986zQQ05ipZNBdfP69FlZzKKnCIAX9adPeAxvgcAETeQ35OAhAc6Rzk4bx4V
vX2F4oQDYiT6rNXt68NTDGqgckc5UmEsuvqaYlGkEzFzgp80aQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIRBqkEm31Sk8ZI0gQlukbOb970aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjlhYmQ1ZDktNjY3Yi0z
MjlkLWI1NjktMjgyNzA3MGNlNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGgivR2sBH4STK1MMaKsf3JiDujt3npqobR7l/tsh7fxcTKi2pm0
HTHxF2N/XVU0xz/LxPd+B12xYhtDP4Wa1TiVFtvxSbaIu0Zl1WRDEVcl9Fwk2Vf8
Bsa2IdUV0RCZHD77QfP88bbrL9702DHqv6r+uZwVdUq6kho0BcnX5qDp5uLuuxP6
kUXoM69dN7c5QmX5w9eAEJaRBMlVWDVW0p5e2c4kO3QsZ48BdRsa9jFXSHjzl2DT
+F9pxNvTdYoK28SXSHQDdRjkNYtY9CL1GDB+iT7bh/KAik4JfBygpQoPcFd00sOW
pNc1dktSRuU6JXd67HCTeak7kaetFoVvvY8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:31:08 2026 by rpki-client