
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/673f5baa-87ce-342c-85eb-97fae24eded2.roa
File: 673f5baa-87ce-342c-85eb-97fae24eded2.roa (raw, json)
Hash identifier: C17YVc7TKUgmLBXh6GRKXvY/VRiba503LTmag4LYgDw=
Subject key identifier: 34:06:0C:BB:35:3C:3F:45:68:CE:68:30:F7:50:5B:80:00:B0:3B:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F3CE2B53BE6BFA33A1F0E1A30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/673f5baa-87ce-342c-85eb-97fae24eded2.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 396617
IP address blocks: 2001:501:b1f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:b5:3b:e6:bf:a3:3a:1f:0e:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=344f6f89-31ec-4d3f-b7f6-6da4768561a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:cd:7e:6b:33:58:ae:9a:f3:5a:79:3f:28:
e3:fe:5d:67:e2:55:cf:b2:ca:ee:dc:80:54:fe:e1:
1a:1f:37:a8:92:ac:7c:5a:ba:72:00:86:1f:48:44:
ac:f2:3e:bd:d8:79:ad:8a:e5:d2:db:41:72:b4:46:
ca:45:12:95:57:07:4d:5a:13:e5:c8:5b:6a:01:5a:
f9:58:0e:55:dd:44:66:c1:da:6b:f3:0b:14:79:7d:
b0:f4:30:17:e4:ae:f4:4c:a1:69:8c:aa:14:3f:18:
f7:46:09:92:f7:31:54:2b:bd:4e:2e:90:b8:fa:e4:
23:fb:dc:8e:91:c8:2f:86:33:b4:e4:66:08:67:af:
06:63:8d:d7:fb:a8:be:5e:88:8c:6c:8d:65:13:0f:
41:29:9b:45:c0:06:76:65:0e:f3:fb:ea:cb:26:6e:
e6:f4:1c:04:0c:43:35:d5:ac:37:11:b4:3e:0a:aa:
48:49:79:a0:93:f9:91:28:1b:d4:ee:6c:08:00:5f:
46:27:2d:16:6c:18:ff:d9:82:6d:c2:9f:b4:3f:9c:
73:8b:9e:43:4b:ee:d6:aa:5b:d8:75:ba:dc:10:d8:
ce:b0:cd:b1:c8:71:2b:cb:e0:7f:65:54:fe:99:75:
89:40:e9:bd:02:ac:fd:e2:a6:1f:1a:e5:a3:f9:9c:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:0C:BB:35:3C:3F:45:68:CE:68:30:F7:50:5B:80:00:B0:3B:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/673f5baa-87ce-342c-85eb-97fae24eded2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:a1:6d:43:ab:2f:7d:71:ea:bf:5e:04:20:0c:85:24:31:c0:
bb:4c:83:96:41:81:39:a1:85:3e:77:0c:e3:b7:08:41:9f:56:
76:33:5e:e3:b4:c0:a3:24:de:7d:b3:f1:d8:5b:ad:32:85:8c:
2f:1c:96:38:68:3f:14:f1:99:ff:c3:09:54:89:90:d2:19:88:
cd:65:14:e3:d3:9b:6f:b3:78:43:2b:12:b7:74:2e:ca:0e:f5:
94:d8:02:a0:a7:3c:59:86:04:ab:30:c6:52:83:1c:ac:00:ce:
e7:ac:06:41:0a:34:db:d8:4a:00:6d:45:df:96:00:67:58:09:
62:31:69:8a:b2:28:0f:71:d2:c9:22:34:88:4f:4e:69:5f:27:
0e:4f:5a:c8:bd:21:ff:4b:ad:43:37:91:02:f3:b2:af:dd:09:
a3:ec:07:f4:ea:ac:b4:25:7d:cc:75:fd:5a:c3:b3:cf:4a:91:
9b:31:1a:9f:b3:18:08:95:ba:68:4b:4c:59:e2:b8:f0:04:fa:
d1:4c:fb:55:7c:9f:bd:1f:56:37:8c:81:ac:b9:1f:ac:b1:6d:
ad:99:17:4f:52:77:12:aa:d2:65:8a:85:64:b1:97:07:a6:94:
60:31:59:86:7a:c9:d2:0d:20:fb:ec:e7:4a:de:65:00:b1:40:
68:da:b1:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884rU75r+jOh8OGjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MzQ0ZjZmODktMzFlYy00ZDNmLWI3ZjYtNmRhNDc2ODU2MWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6LNfmszWK6a81p5Pyjj/l1n4lXPssru3IBU
/uEaHzeokqx8WrpyAIYfSESs8j692HmtiuXS20FytEbKRRKVVwdNWhPlyFtqAVr5
WA5V3URmwdpr8wsUeX2w9DAX5K70TKFpjKoUPxj3RgmS9zFUK71OLpC4+uQj+9yO
kcgvhjO05GYIZ68GY43X+6i+XoiMbI1lEw9BKZtFwAZ2ZQ7z++rLJm7m9BwEDEM1
1aw3EbQ+CqpISXmgk/mRKBvU7mwIAF9GJy0WbBj/2YJtwp+0P5xzi55DS+7WqlvY
dbrcENjOsM2xyHEry+B/ZVT+mXWJQOm9Aqz94qYfGuWj+ZzWIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDQGDLs1PD9FaM5oMPdQW4AAsDsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjczZjViYWEtODdjZS0z
NDJjLTg1ZWItOTdmYWUyNGVkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHKhbUOrL31x6r9eBCAMhSQxwLtMg5ZBgTmhhT53DOO3CEGfVnYz
XuO0wKMk3n2z8dhbrTKFjC8cljhoPxTxmf/DCVSJkNIZiM1lFOPTm2+zeEMrErd0
LsoO9ZTYAqCnPFmGBKswxlKDHKwAzuesBkEKNNvYSgBtRd+WAGdYCWIxaYqyKA9x
0skiNIhPTmlfJw5PWsi9If9LrUM3kQLzsq/dCaPsB/TqrLQlfcx1/VrDs89KkZsx
Gp+zGAiVumhLTFniuPAE+tFM+1V8n70fVjeMgay5H6yxba2ZF09SdxKq0mWKhWSx
lwemlGAxWYZ6ydINIPvs50reZQCxQGjasdU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:51:01 2026 by rpki-client