
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa2cad4-09a9-3421-9836-eafe1b313ca7.roa
File: 7aa2cad4-09a9-3421-9836-eafe1b313ca7.roa (raw, json)
Hash identifier: hnKLO0bTzdIbCxfnRx+F2G2fPCo/XOm7VHYTsQFjJuI=
Subject key identifier: 1C:FD:04:36:D8:C4:2D:3B:80:7E:1D:C6:1D:FF:B2:7B:12:25:8E:8D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F067287DC6CEF8F0A0EA79640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa2cad4-09a9-3421-9836-eafe1b313ca7.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396591
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:87:dc:6c:ef:8f:0a:0e:a7:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=588c1a24-770e-4dd7-a69b-a7e62d6ffcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:da:57:29:85:3a:16:99:be:a2:a9:b4:54:
5a:43:d0:92:f7:5f:f4:e4:29:56:db:b1:ea:0e:5b:
2d:5e:d7:b1:f4:6e:65:6b:6b:7f:84:55:6d:1a:f4:
3c:79:f8:6f:78:64:f3:6e:63:13:1c:06:79:07:57:
43:af:cb:f5:f8:ac:ee:eb:c3:20:37:0e:5c:38:85:
99:20:0b:7d:34:f7:9f:b9:53:6c:dc:1d:5c:3c:e5:
ea:bb:21:f3:58:9f:41:28:e2:32:89:49:7b:7e:5e:
b3:1d:62:0f:d8:3f:a5:e5:0f:29:07:2a:0a:5c:7d:
7b:ec:d7:46:8a:6c:c1:51:0c:d9:8f:3a:cd:90:75:
22:b3:c3:4e:e6:3d:05:63:40:7a:e9:9d:5a:fc:41:
29:a0:4e:be:27:b8:1d:eb:b9:46:a1:51:e1:33:b0:
0d:3d:0d:13:70:ef:73:45:0a:d8:92:4e:00:c2:aa:
e1:79:63:ac:32:71:97:4b:05:f6:b8:37:98:d2:49:
df:4c:e1:78:58:6f:fb:27:89:00:11:2c:a9:7e:75:
ca:f2:12:8d:e8:73:3e:64:95:64:e6:9f:52:94:23:
fa:9b:68:f2:ec:c8:37:e9:dd:b3:af:89:5e:9f:01:
31:72:27:29:54:5a:49:77:df:d0:da:de:30:b6:7a:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:04:36:D8:C4:2D:3B:80:7E:1D:C6:1D:FF:B2:7B:12:25:8E:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa2cad4-09a9-3421-9836-eafe1b313ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:6f:42:e4:dc:34:bc:47:b7:5b:4c:8a:7a:b3:28:f7:70:0f:
04:c5:84:e6:69:02:4f:90:ac:56:2f:9e:e5:45:71:f3:f5:7f:
ab:10:4e:cd:86:a6:11:ed:51:c7:dc:b3:ab:16:1b:e8:b0:35:
4e:f4:1d:2b:b1:9c:38:bd:15:d0:a0:4d:84:34:52:9e:1b:0f:
46:9d:54:02:b7:90:95:af:40:7c:d8:c6:eb:f6:d0:eb:26:f6:
7a:92:23:93:96:e3:94:19:17:4f:0c:c6:26:6d:5f:0a:e5:f0:
d0:04:32:f0:6a:d3:75:4f:23:93:de:58:a4:38:20:0c:83:64:
9d:ed:eb:42:40:9e:e1:02:7d:41:03:bc:97:00:95:90:cc:9f:
59:b2:a9:02:f7:2e:f0:9a:38:55:0a:aa:aa:c5:28:92:8d:d9:
98:d5:97:64:7e:f4:79:23:1f:50:91:7f:99:ec:56:80:11:7b:
45:33:5b:09:c5:7c:b9:d6:31:07:6f:27:90:b6:04:93:42:e2:
57:29:23:ac:67:cf:b5:a3:26:51:04:0f:7d:65:05:17:4a:67:
ae:53:b5:07:06:4c:1d:be:8e:e3:9a:cf:62:e7:4c:fb:e0:c4:
62:84:4d:c6:4b:51:78:63:39:ca:95:ef:fb:0c:85:b9:79:d4:
fb:43:97:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcofcbO+PCg6nlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NTg4YzFhMjQtNzcwZS00ZGQ3LWE2OWItYTdlNjJkNmZmY2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVnaVymFOhaZvqKptFRaQ9CS91/05ClW27Hq
DlstXtex9G5la2t/hFVtGvQ8efhveGTzbmMTHAZ5B1dDr8v1+Kzu68MgNw5cOIWZ
IAt9NPefuVNs3B1cPOXquyHzWJ9BKOIyiUl7fl6zHWIP2D+l5Q8pByoKXH177NdG
imzBUQzZjzrNkHUis8NO5j0FY0B66Z1a/EEpoE6+J7gd67lGoVHhM7ANPQ0TcO9z
RQrYkk4AwqrheWOsMnGXSwX2uDeY0knfTOF4WG/7J4kAESypfnXK8hKN6HM+ZJVk
5p9SlCP6m2jy7Mg36d2zr4lenwExcicpVFpJd9/Q2t4wtnqBkwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBz9BDbYxC07gH4dxh3/snsSJY6NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2FhMmNhZDQtMDlhOS0z
NDIxLTk4MzYtZWFmZTFiMzEzY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBhb0Lk3DS8R7dbTIp6syj3cA8ExYTmaQJPkKxW
L57lRXHz9X+rEE7NhqYR7VHH3LOrFhvosDVO9B0rsZw4vRXQoE2ENFKeGw9GnVQC
t5CVr0B82Mbr9tDrJvZ6kiOTluOUGRdPDMYmbV8K5fDQBDLwatN1TyOT3likOCAM
g2Sd7etCQJ7hAn1BA7yXAJWQzJ9ZsqkC9y7wmjhVCqqqxSiSjdmY1ZdkfvR5Ix9Q
kX+Z7FaAEXtFM1sJxXy51jEHbyeQtgSTQuJXKSOsZ8+1oyZRBA99ZQUXSmeuU7UH
Bkwdvo7jms9i50z74MRihE3GS1F4YznKle/7DIW5edT7Q5fk
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:20:13 2026 by rpki-client