
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/859f5662-c6b4-3bb4-8518-cc67dcc56af1.roa
File: 859f5662-c6b4-3bb4-8518-cc67dcc56af1.roa (raw, json)
Hash identifier: 2HFJyEEDOPnqsCr7MtS0/aiecu5U7YGL+0PLUAb0mqo=
Subject key identifier: 5E:E1:DD:1E:51:58:CD:58:EE:E0:26:3A:11:91:51:6D:EF:F3:FC:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF5B206ECAB7D9B74C78D8E50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/859f5662-c6b4-3bb4-8518-cc67dcc56af1.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 20172
IP address blocks: 2001:503:d2d::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:06:ec:ab:7d:9b:74:c7:8d:8e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=146d99c3-f00e-4c61-b83c-bd547b57da8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:0b:54:16:52:01:08:b1:7d:46:ae:2c:51:
9c:54:39:9f:67:1a:42:af:10:b4:5b:36:16:41:40:
0d:92:23:9b:87:a1:58:74:51:11:99:41:cb:2c:49:
e9:f3:b5:e0:a1:d9:46:bc:d8:16:fb:1d:d9:88:57:
64:01:fc:07:e9:91:3a:ab:57:9d:4b:fc:bd:cc:20:
48:b7:92:ac:6f:09:a1:7b:5e:b5:0a:13:7e:5a:c3:
0a:96:eb:cc:01:52:56:20:ff:8b:f5:0b:b0:68:61:
c2:ef:ff:45:da:82:21:c5:c5:21:e4:d6:d2:9d:db:
02:8a:6f:1d:5d:7c:55:ec:87:c8:98:22:a8:88:38:
7a:2f:a6:36:d7:19:81:90:0b:39:0d:f9:b3:cc:a3:
9c:72:7b:7b:09:94:06:c8:54:5d:fc:3f:9b:2b:1d:
81:f5:39:ff:1d:da:50:b0:db:12:f3:e2:ed:11:75:
46:54:07:0f:79:cb:8f:6e:26:f1:91:49:20:56:d6:
bc:20:dc:b3:6b:bd:38:40:5c:6d:0f:e1:5c:a1:c7:
38:75:d0:ab:ed:c3:8d:30:bc:a1:24:be:3a:6e:c1:
fc:98:c3:ef:7c:45:31:e8:8f:81:19:75:49:1f:a4:
40:a6:af:37:a9:4e:68:3b:73:8e:28:b5:63:82:b5:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E1:DD:1E:51:58:CD:58:EE:E0:26:3A:11:91:51:6D:EF:F3:FC:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/859f5662-c6b4-3bb4-8518-cc67dcc56af1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:37:0e:a0:f9:b7:d0:77:06:ec:41:a7:cb:46:bd:3e:70:1a:
6a:a2:d0:8b:e7:02:dc:d6:11:c5:6a:3e:7f:e5:20:68:53:51:
3a:51:02:9e:ac:1c:f3:7f:66:c5:3f:1b:82:f8:d6:42:6a:5d:
d1:ee:5f:77:6a:5c:79:1d:c9:80:f4:66:9c:b4:d4:55:a9:c1:
09:52:8e:b1:b4:39:46:86:ff:7d:32:0a:8a:f9:7f:38:5b:75:
2a:f5:36:80:65:06:5a:c6:66:ec:cc:13:21:53:68:18:f6:e5:
64:56:9d:e1:99:29:9e:14:92:12:ff:c7:05:26:f8:6b:0d:a3:
5f:8e:d9:7c:00:af:cf:d0:e9:11:85:ec:c2:7f:a4:04:97:9e:
17:ff:ed:5c:d5:0e:30:5f:ce:de:55:d7:1b:d2:e6:98:d0:27:
30:4e:de:95:09:c3:e1:29:a9:3c:4d:2e:39:d0:2d:39:b5:9b:
01:a9:cc:a9:38:e4:20:92:fe:5d:8b:6c:9a:94:7f:2b:6f:35:
7b:41:4f:54:06:3e:7d:2a:96:71:96:b7:75:7d:e5:f5:83:e1:
a7:e2:44:54:02:dd:4f:63:10:9b:48:06:bf:cc:15:ee:4e:20:
44:f0:94:43:f2:e6:cd:30:29:24:a9:c7:54:06:f0:68:76:94:
00:bd:42:53
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71sgbsq32bdMeNjlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTQ2ZDk5YzMtZjAwZS00YzYxLWI4M2MtYmQ1NDdiNTdkYThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvToLVBZSAQixfUauLFGcVDmfZxpCrxC0WzYW
QUANkiObh6FYdFERmUHLLEnp87XgodlGvNgW+x3ZiFdkAfwH6ZE6q1edS/y9zCBI
t5Ksbwmhe161ChN+WsMKluvMAVJWIP+L9QuwaGHC7/9F2oIhxcUh5NbSndsCim8d
XXxV7IfImCKoiDh6L6Y21xmBkAs5DfmzzKOccnt7CZQGyFRd/D+bKx2B9Tn/HdpQ
sNsS8+LtEXVGVAcPecuPbibxkUkgVta8INyza704QFxtD+Fcocc4ddCr7cONMLyh
JL46bsH8mMPvfEUx6I+BGXVJH6RApq83qU5oO3OOKLVjgrVp3QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFF7h3R5RWM1Y7uAmOhGRUW3v8/xmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU5ZjU2NjItYzZiNC0z
YmI0LTg1MTgtY2M2N2RjYzU2YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC3Nw6g+bfQdwbsQafLRr0+cBpqotCL5wLc1hHF
aj5/5SBoU1E6UQKerBzzf2bFPxuC+NZCal3R7l93alx5HcmA9GactNRVqcEJUo6x
tDlGhv99MgqK+X84W3Uq9TaAZQZaxmbszBMhU2gY9uVkVp3hmSmeFJIS/8cFJvhr
DaNfjtl8AK/P0OkRhezCf6QEl54X/+1c1Q4wX87eVdcb0uaY0CcwTt6VCcPhKak8
TS450C05tZsBqcypOOQgkv5di2yalH8rbzV7QU9UBj59KpZxlrd1feX1g+Gn4kRU
At1PYxCbSAa/zBXuTiBE8JRD8ubNMCkkqcdUBvBodpQAvUJT
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:47:20 2026 by rpki-client