
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/431a6239-1d90-351d-8a73-43b6858de4c5.roa
File: 431a6239-1d90-351d-8a73-43b6858de4c5.roa (raw, json)
Hash identifier: xOCX7zlfiUSwkH6GP8wqRxNYX1i7lB0/Hcs2XZfFAxE=
Subject key identifier: 54:D1:12:B2:54:31:D4:B7:9C:68:33:4A:D5:E9:46:DD:B1:F6:7A:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F57680F331E478B848A987580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/431a6239-1d90-351d-8a73-43b6858de4c5.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 396564
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:0f:33:1e:47:8b:84:8a:98:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=a2ab7270-0f0d-4c2c-a542-df09a04c3a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:a9:08:75:7f:0a:01:84:7a:76:5b:f7:2c:
0f:ac:ec:84:e0:d2:f5:41:f1:8b:35:d1:5b:8e:6c:
7c:37:c4:96:b2:28:c0:d4:60:4d:72:1b:5c:e1:7b:
0b:e5:d4:1b:68:32:c7:91:f4:fc:62:29:24:0b:63:
f0:7e:24:9d:fd:ee:e6:f7:a3:da:aa:f4:94:20:e2:
71:22:d6:67:9f:3a:ef:f9:4c:d2:a3:23:b8:01:b1:
80:39:80:87:8a:ec:e9:85:0b:39:bf:13:15:3b:61:
b9:db:bb:59:79:52:39:1e:ee:6f:c0:ef:45:53:ab:
db:97:33:33:35:19:ee:bf:e5:22:f6:d8:0d:7a:cc:
ff:5a:d4:43:8d:5d:57:35:15:25:0a:dc:d9:fc:e1:
86:d8:7a:bc:c9:75:2d:6d:b4:c5:a3:db:37:cd:6d:
98:e7:d0:d1:ea:3f:5c:25:d3:86:59:ce:07:99:3f:
94:8f:36:38:85:02:20:d5:70:93:8e:80:30:60:0c:
4c:54:0b:b2:15:b6:97:ce:88:a1:f6:ee:41:ad:22:
83:91:02:f4:18:9f:23:43:66:98:cd:f9:8c:10:ac:
83:85:19:e8:8f:3b:f0:57:06:32:76:df:e1:9f:1a:
63:48:7a:33:64:9e:6a:bc:c3:54:ab:1c:11:9a:13:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:12:B2:54:31:D4:B7:9C:68:33:4A:D5:E9:46:DD:B1:F6:7A:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/431a6239-1d90-351d-8a73-43b6858de4c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ad:21:ca:c4:3f:24:0d:0d:8d:ff:d1:72:db:ec:e8:3c:84:
72:8b:a4:d4:69:25:b6:d6:cd:04:7a:8d:f7:d2:da:7a:97:3d:
48:c5:67:fc:95:37:ef:26:80:03:f8:b5:f9:ac:b2:73:b6:5f:
c7:aa:ad:29:a9:1b:31:2e:fe:e4:b4:f5:b0:ad:63:96:37:fe:
bd:ef:7a:c5:cd:40:66:48:84:96:f1:cf:0a:3a:c3:7d:45:c6:
8f:a5:e4:4b:70:73:06:77:c2:e9:29:33:e1:c7:a7:e9:ba:7d:
10:9b:45:12:1a:10:d3:b2:28:8c:41:fe:ab:ae:90:18:cd:28:
7f:06:da:b8:dd:80:d3:28:c0:b3:90:c5:4d:a0:45:c5:ad:db:
83:8f:f4:eb:e8:ff:e6:32:b7:f5:e3:15:9d:26:43:8e:f0:c4:
88:78:e3:87:90:fd:d4:72:10:5e:eb:9b:df:eb:09:12:92:6d:
50:03:d9:48:21:c5:6b:54:fc:b1:40:b0:0f:7e:24:cb:e5:99:
06:07:68:41:1a:33:36:95:f0:26:b5:f3:cc:99:22:de:e2:58:
f6:28:b7:4d:fc:4f:3c:ef:86:00:5e:23:fd:d3:b9:93:2a:c1:
03:41:0d:7e:6d:cb:58:92:40:61:41:4a:04:96:99:f0:fa:f4:
83:8f:62:cb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9XaA8zHkeLhIqYdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
YTJhYjcyNzAtMGYwZC00YzJjLWE1NDItZGYwOWEwNGMzYTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7GpCHV/CgGEenZb9ywPrOyE4NL1QfGLNdFb
jmx8N8SWsijA1GBNchtc4XsL5dQbaDLHkfT8YikkC2PwfiSd/e7m96PaqvSUIOJx
ItZnnzrv+UzSoyO4AbGAOYCHiuzphQs5vxMVO2G527tZeVI5Hu5vwO9FU6vblzMz
NRnuv+Ui9tgNesz/WtRDjV1XNRUlCtzZ/OGG2Hq8yXUtbbTFo9s3zW2Y59DR6j9c
JdOGWc4HmT+UjzY4hQIg1XCTjoAwYAxMVAuyFbaXzoih9u5BrSKDkQL0GJ8jQ2aY
zfmMEKyDhRnojzvwVwYydt/hnxpjSHozZJ5qvMNUqxwRmhOiNQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFTRErJUMdS3nGgzStXpRt2x9nraMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDMxYTYyMzktMWQ5MC0z
NTFkLThhNzMtNDNiNjg1OGRlNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCBrSHKxD8kDQ2N/9Fy2+zoPIRyi6TUaSW21s0E
eo330tp6lz1IxWf8lTfvJoAD+LX5rLJztl/Hqq0pqRsxLv7ktPWwrWOWN/6973rF
zUBmSISW8c8KOsN9RcaPpeRLcHMGd8LpKTPhx6fpun0Qm0USGhDTsiiMQf6rrpAY
zSh/Btq43YDTKMCzkMVNoEXFrduDj/Tr6P/mMrf14xWdJkOO8MSIeOOHkP3UchBe
65vf6wkSkm1QA9lIIcVrVPyxQLAPfiTL5ZkGB2hBGjM2lfAmtfPMmSLe4lj2KLdN
/E8874YAXiP907mTKsEDQQ1+bctYkkBhQUoElpnw+vSDj2LL
-----END CERTIFICATE-----
Generated at Wed Sep 30 16:15:32 2026 by rpki-client