
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889003fe-64bf-3281-8fd1-cd1925648618.roa
File: 889003fe-64bf-3281-8fd1-cd1925648618.roa (raw, json)
Hash identifier: B90Hgv8YYE/oLeQRHDACLcEM8Dp7TPti1YBoLuHbtKU=
Subject key identifier: 26:DE:AB:6D:77:50:DE:C2:8C:BB:E9:D6:77:B2:0A:2A:2D:71:42:A4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0ED23CE1DBB1CDC2804E76E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889003fe-64bf-3281-8fd1-cd1925648618.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 396567
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:3c:e1:db:b1:cd:c2:80:4e:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=25e00d55-2146-4a53-826a-c7a18f2c1bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:c5:0a:79:73:31:5a:2e:47:a6:67:ec:b7:
df:46:4c:7f:cf:75:39:74:6c:b9:0c:e9:8e:a9:64:
68:20:54:98:2b:fe:17:42:32:52:f4:41:13:32:7a:
76:74:14:d7:2b:2d:44:ef:e5:13:00:d0:a7:27:33:
9f:79:04:81:3a:c3:6d:bb:77:62:e9:41:5c:05:42:
bb:ce:eb:dd:be:82:9e:db:43:97:20:f2:d4:a6:e0:
8c:2c:f1:67:3d:78:0e:63:ac:31:bb:49:dc:6b:38:
56:c7:20:b9:87:e1:2a:6d:23:96:74:8c:d4:6c:47:
e3:11:dd:bf:0c:5a:3e:3b:f9:e2:ec:5b:26:f5:0f:
cd:8f:28:25:6c:4a:85:0f:ae:f1:f6:b6:24:fa:d8:
17:de:5c:a2:57:23:81:1a:91:ea:1b:3f:81:24:69:
bd:dd:fe:ea:00:dc:16:71:59:ac:5b:3c:df:4a:2b:
45:2b:34:34:47:59:0b:16:2e:be:ce:df:a3:09:90:
dd:a2:45:6a:9d:70:c5:90:78:25:17:aa:c8:70:27:
53:7c:f1:86:4b:02:c0:f2:8c:8f:00:9a:e1:02:30:
20:f6:fa:8c:56:43:c1:97:f2:68:f7:ee:20:dc:33:
96:ee:f2:f4:3a:bb:90:cd:be:ab:ab:fc:c0:47:40:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:AB:6D:77:50:DE:C2:8C:BB:E9:D6:77:B2:0A:2A:2D:71:42:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889003fe-64bf-3281-8fd1-cd1925648618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c7:59:e5:82:54:19:8b:3b:4f:e5:f4:53:d9:b2:6e:d3:bc:
fb:ae:89:28:89:4e:cb:9d:10:eb:3c:71:0a:95:40:a0:16:ed:
76:81:64:98:aa:99:6e:da:6d:61:e0:2c:8c:e4:a5:87:04:28:
0b:f1:4e:e1:69:6d:84:72:65:87:e3:e4:5f:e8:d2:b0:76:79:
15:91:ab:f4:a3:92:84:f5:4d:4d:df:e8:d0:2d:1c:bc:ef:4c:
1c:8e:82:1d:ca:23:bf:e2:eb:b3:30:d6:f5:93:bb:5f:5e:57:
bf:0e:78:31:9f:c4:ba:8c:c7:6b:6e:b1:d5:55:95:17:58:15:
e2:6b:47:e0:f1:4d:9b:f1:ad:d6:37:bc:f6:0c:4d:9c:e2:88:
7b:8f:12:53:26:8c:14:bc:d5:dc:60:7d:e7:cd:ba:ed:c6:5b:
07:b6:c9:ea:85:d4:cd:d2:c5:57:45:42:60:76:e8:e8:f4:a5:
1c:f8:a4:d2:47:b2:d0:06:f7:26:30:86:6d:17:78:1f:e3:45:
a8:09:9a:34:9c:8c:4c:71:d4:e0:14:13:5b:26:63:cd:fc:e2:
ae:d4:d7:e4:28:3b:bc:ec:51:e3:f6:70:a4:a1:27:33:04:1d:
45:5a:92:f3:3d:22:3e:40:ba:94:3f:40:af:01:ae:b8:1c:ab:
97:6c:4c:a8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jzh27HNwoBOduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk
MjVlMDBkNTUtMjE0Ni00YTUzLTgyNmEtYzdhMThmMmMxYmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl/FCnlzMVouR6Zn7LffRkx/z3U5dGy5DOmO
qWRoIFSYK/4XQjJS9EETMnp2dBTXKy1E7+UTANCnJzOfeQSBOsNtu3di6UFcBUK7
zuvdvoKe20OXIPLUpuCMLPFnPXgOY6wxu0ncazhWxyC5h+EqbSOWdIzUbEfjEd2/
DFo+O/ni7Fsm9Q/NjyglbEqFD67x9rYk+tgX3lyiVyOBGpHqGz+BJGm93f7qANwW
cVmsWzzfSitFKzQ0R1kLFi6+zt+jCZDdokVqnXDFkHglF6rIcCdTfPGGSwLA8oyP
AJrhAjAg9vqMVkPBl/Jo9+4g3DOW7vL0OruQzb6rq/zAR0CGZwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCbeq213UN7CjLvp1neyCiotcUKkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg5MDAzZmUtNjRiZi0z
MjgxLThmZDEtY2QxOTI1NjQ4NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBIx1nlglQZiztP5fRT2bJu07z7rokoiU7LnRDr
PHEKlUCgFu12gWSYqplu2m1h4CyM5KWHBCgL8U7haW2EcmWH4+Rf6NKwdnkVkav0
o5KE9U1N3+jQLRy870wcjoIdyiO/4uuzMNb1k7tfXle/Dngxn8S6jMdrbrHVVZUX
WBXia0fg8U2b8a3WN7z2DE2c4oh7jxJTJowUvNXcYH3nzbrtxlsHtsnqhdTN0sVX
RUJgdujo9KUc+KTSR7LQBvcmMIZtF3gf40WoCZo0nIxMcdTgFBNbJmPN/OKu1Nfk
KDu87FHj9nCkoSczBB1FWpLzPSI+QLqUP0CvAa64HKuXbEyo
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:54 2026 by rpki-client