
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa
File: 7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa (raw, json)
Hash identifier: D7JEugYNGveBGNuW6GSIS7Am5uHRM8rSFQ6/pzenFpA=
Subject key identifier: CC:B6:3C:33:55:6D:05:AF:65:C2:8C:65:B5:94:3A:0A:B2:4D:9A:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1CC7BBF418E249AF6DC8D780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 20172
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:bb:f4:18:e2:49:af:6d:c8:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=cf63e48d-cb09-45de-bd4f-1a8c2e5bd3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:9b:9c:5e:f4:bd:cd:90:04:c3:45:0a:4e:
d0:20:d3:5b:3c:a4:d9:4c:c7:b2:53:c2:65:2a:22:
f3:2a:aa:19:98:c6:8a:6d:1c:5c:22:77:bd:e0:49:
02:3b:82:9e:2b:72:c8:7b:8a:0f:99:73:99:0d:38:
b9:35:38:07:ed:31:43:40:b1:99:5b:a4:8e:46:14:
f1:88:a2:fb:68:21:fd:70:56:17:d8:c6:e3:57:bd:
6d:0d:44:b0:2c:dc:28:fd:69:3a:4f:37:9b:bb:9d:
4a:d2:31:d6:cd:6c:0d:48:c3:05:8d:47:17:84:8c:
f4:11:33:7d:ab:f3:18:cc:cb:28:1a:d8:06:44:e9:
24:1b:bc:51:43:d9:8f:5c:ce:17:d5:97:87:8f:30:
3c:5c:fc:78:0d:fd:ac:9b:5e:44:be:b3:5e:9e:5d:
81:18:e7:12:54:7f:0d:ab:99:f0:8c:3d:3e:0e:1c:
75:1b:43:1e:ed:84:97:f3:09:29:f2:38:ad:6e:2a:
f3:8b:8d:b5:b0:63:a6:42:54:a5:e9:84:b8:2e:81:
bb:a3:6c:dc:9a:b7:ec:78:b1:cc:50:29:94:b5:64:
f9:25:ab:d2:01:8a:1c:9c:8e:e8:2e:34:cc:19:b2:
ce:6b:ea:2f:44:97:51:74:c7:b5:d1:ea:75:b6:b8:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:3C:33:55:6D:05:AF:65:C2:8C:65:B5:94:3A:0A:B2:4D:9A:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:59:d9:8d:b0:00:be:74:72:00:1f:94:45:4a:1c:00:6e:8c:
d8:1c:66:5c:35:0d:e9:3c:64:e3:63:1a:ab:7c:25:db:52:ff:
d2:a2:3d:e3:b4:41:f7:c4:5b:dc:5a:45:ce:4e:3f:06:5c:c6:
bf:58:c6:ae:5f:c3:5e:71:09:4e:b5:2c:65:5e:09:81:90:67:
b6:ba:24:0a:43:73:68:53:63:34:7c:9a:12:7a:3f:e0:2f:e2:
cf:70:ed:3c:59:d1:0a:0c:df:f8:4b:2c:03:69:ad:76:57:5b:
5f:9a:42:33:58:39:2a:52:b6:d7:da:3e:85:f0:ac:db:7c:7e:
b9:41:c8:cc:e8:58:78:ee:6c:de:58:b9:cc:cb:1c:4e:19:e8:
cd:24:bc:81:d1:ec:2a:73:d6:21:24:ca:2f:00:0f:af:e8:73:
76:dc:24:66:da:fb:6b:02:35:c7:65:f2:f7:dc:14:b2:6e:9f:
18:7a:b2:22:3c:59:41:49:42:cf:1e:38:ab:43:71:18:00:f9:
d1:37:5e:d7:f7:86:86:50:b3:15:76:77:4a:5e:1f:52:61:c0:
5e:92:4f:78:c0:3c:63:99:08:ed:f8:d5:02:94:e2:be:ce:7e:
49:9e:01:9d:c9:0f:c3:ce:17:72:af:e5:6b:bb:da:21:25:fb:
1e:ab:37:00
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8cx7v0GOJJr23I14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
Y2Y2M2U0OGQtY2IwOS00NWRlLWJkNGYtMWE4YzJlNWJkM2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gqbnF70vc2QBMNFCk7QINNbPKTZTMeyU8Jl
KiLzKqoZmMaKbRxcIne94EkCO4KeK3LIe4oPmXOZDTi5NTgH7TFDQLGZW6SORhTx
iKL7aCH9cFYX2MbjV71tDUSwLNwo/Wk6Tzebu51K0jHWzWwNSMMFjUcXhIz0ETN9
q/MYzMsoGtgGROkkG7xRQ9mPXM4X1ZeHjzA8XPx4Df2sm15EvrNenl2BGOcSVH8N
q5nwjD0+Dhx1G0Me7YSX8wkp8jitbirzi421sGOmQlSl6YS4LoG7o2zcmrfseLHM
UCmUtWT5JavSAYocnI7oLjTMGbLOa+ovRJdRdMe10ep1trhOQQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMy2PDNVbQWvZcKMZbWUOgqyTZqrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2EzYWFmZjEtM2JiOS0z
MjNlLTk2YzYtMjdlMWEzNDBkNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCAWdmNsAC+dHIAH5RFShwAbozYHGZcNQ3pPGTj
YxqrfCXbUv/Soj3jtEH3xFvcWkXOTj8GXMa/WMauX8NecQlOtSxlXgmBkGe2uiQK
Q3NoU2M0fJoSej/gL+LPcO08WdEKDN/4SywDaa12V1tfmkIzWDkqUrbX2j6F8Kzb
fH65QcjM6Fh47mzeWLnMyxxOGejNJLyB0ewqc9YhJMovAA+v6HN23CRm2vtrAjXH
ZfL33BSybp8YerIiPFlBSULPHjirQ3EYAPnRN17X94aGULMVdndKXh9SYcBekk94
wDxjmQjt+NUClOK+zn5JngGdyQ/Dzhdyr+Vru9ohJfseqzcA
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:25:59 2026 by rpki-client