
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0352415a-8285-3759-bf8e-cc29ea806247.roa
File: 0352415a-8285-3759-bf8e-cc29ea806247.roa (raw, json)
Hash identifier: YiXeVaBz2WusdG/LJz/ZKA0XYaNyguBpfAj+ii5NjvE=
Subject key identifier: A0:AA:F8:36:3A:20:B3:96:9B:71:6B:A7:F6:87:45:1B:BE:19:D8:A7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EFCACE44D54C5FCDACB00DE38
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0352415a-8285-3759-bf8e-cc29ea806247.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 396606
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:e4:4d:54:c5:fc:da:cb:00:de:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=e7cfdfa9-642d-49e1-8730-66ca52545839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:6f:fa:92:bf:7c:94:f4:22:75:e2:9b:1d:
65:d0:09:49:83:b4:59:20:d7:29:e6:d5:78:f2:cd:
40:e7:aa:85:c2:17:97:2c:5b:46:11:5f:d4:7b:1b:
3e:e5:6b:f8:3d:2a:aa:ca:4f:b3:b8:3f:a0:74:5e:
e2:c6:39:1d:2c:55:34:f4:1c:a0:2c:4f:97:04:ba:
ca:92:3e:f6:a1:0c:26:8d:38:d4:85:17:eb:60:40:
b9:c9:4d:6c:fa:fa:5d:2f:55:38:3c:3d:1b:2c:bc:
43:5b:f7:4c:be:78:10:98:45:f1:f6:0b:93:b8:47:
1f:84:92:32:1b:d0:62:57:8c:e6:e3:7a:da:ab:91:
af:1b:c5:6c:ba:c0:29:c5:8a:a9:26:60:39:e3:3c:
d2:76:f4:a6:11:ea:af:42:5e:82:ae:9d:f1:65:4d:
62:52:bc:3e:66:28:a2:b1:bc:2d:4a:86:0f:39:6e:
c1:93:1b:03:84:09:7e:78:30:72:25:0c:bf:23:42:
2c:68:b8:4f:7f:e1:00:c5:f9:31:95:94:2e:1a:6e:
b9:57:e6:11:e2:23:65:0e:3b:90:a4:a7:09:8a:f9:
5f:06:64:02:d8:bb:79:9b:16:ed:e8:5f:fb:28:39:
08:cf:db:3d:8d:5f:65:d3:c2:1e:4e:3c:73:7a:70:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:F8:36:3A:20:B3:96:9B:71:6B:A7:F6:87:45:1B:BE:19:D8:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0352415a-8285-3759-bf8e-cc29ea806247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:01:42:d8:0d:0f:be:79:78:42:8d:fc:c4:95:01:17:33:95:
4d:8f:39:a2:85:d3:fc:98:10:c8:1b:68:89:08:ef:b0:f4:84:
ca:9d:0e:04:1f:32:ba:c6:f0:46:4a:ab:a7:34:0f:9c:89:73:
d5:9c:3c:06:39:30:05:7a:10:7c:aa:2a:f5:c3:e5:f9:7b:cf:
9c:33:9f:c6:07:84:5b:53:7a:53:ff:a0:94:67:2f:40:b7:2e:
b2:64:d4:30:4a:69:59:0f:9a:15:05:bc:0f:d8:83:df:bc:0d:
f5:20:2a:7a:e2:31:2c:09:4b:80:d2:74:70:a3:64:bb:a9:7d:
81:d3:b3:ad:f7:73:19:b8:34:97:b4:2a:81:f4:d7:e5:a3:3d:
50:cd:3f:dc:0f:0e:6c:63:d8:83:d3:e1:f2:87:99:bc:87:28:
8e:94:80:ed:61:51:a0:e8:26:fb:0b:39:5d:d7:6b:29:61:af:
75:ba:f5:64:76:e5:b0:e6:2d:f3:21:8d:09:c3:ef:db:fb:2b:
7e:3f:5f:cf:81:36:04:dc:e0:2a:8c:56:53:13:23:e4:f0:c4:
e0:3c:93:ba:15:22:87:e6:7c:72:ed:49:1e:b3:02:b0:64:22:
7f:ab:c1:73:cf:5d:af:48:6f:ba:28:ae:ce:d5:65:80:cb:0e:
13:95:8c:e6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rORNVMX82ssA3jgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZTdjZmRmYTktNjQyZC00OWUxLTg3MzAtNjZjYTUyNTQ1ODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRlv+pK/fJT0InXimx1l0AlJg7RZINcp5tV4
8s1A56qFwheXLFtGEV/Uexs+5Wv4PSqqyk+zuD+gdF7ixjkdLFU09BygLE+XBLrK
kj72oQwmjTjUhRfrYEC5yU1s+vpdL1U4PD0bLLxDW/dMvngQmEXx9guTuEcfhJIy
G9BiV4zm43raq5GvG8VsusApxYqpJmA54zzSdvSmEeqvQl6Crp3xZU1iUrw+Ziii
sbwtSoYPOW7BkxsDhAl+eDByJQy/I0IsaLhPf+EAxfkxlZQuGm65V+YR4iNlDjuQ
pKcJivlfBmQC2Lt5mxbt6F/7KDkIz9s9jV9l08IeTjxzenD43wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKCq+DY6ILOWm3Frp/aHRRu+GdinMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDM1MjQxNWEtODI4NS0z
NzU5LWJmOGUtY2MyOWVhODA2MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCLAULYDQ++eXhCjfzElQEXM5VNjzmihdP8mBDI
G2iJCO+w9ITKnQ4EHzK6xvBGSqunNA+ciXPVnDwGOTAFehB8qir1w+X5e8+cM5/G
B4RbU3pT/6CUZy9Aty6yZNQwSmlZD5oVBbwP2IPfvA31ICp64jEsCUuA0nRwo2S7
qX2B07Ot93MZuDSXtCqB9Nfloz1QzT/cDw5sY9iD0+Hyh5m8hyiOlIDtYVGg6Cb7
Czld12spYa91uvVkduWw5i3zIY0Jw+/b+yt+P1/PgTYE3OAqjFZTEyPk8MTgPJO6
FSKH5nxy7UkeswKwZCJ/q8Fzz12vSG+6KK7O1WWAyw4TlYzm
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:31:21 2026 by rpki-client