
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
File: b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa (raw, json)
Hash identifier: Uw5taKk2nT2YKQRdnmPBj5YmYdBXeWY1/atbMjUl8r8=
Subject key identifier: FC:F5:E9:21:06:B5:E7:D2:D9:D5:45:83:6A:BA:17:A7:02:95:AC:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1CC7B989068AB76D2E721200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 396603
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:b9:89:06:8a:b7:6d:2e:72:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=4f4f70eb-6128-4249-af89-17e79219bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:2b:ff:76:93:70:f9:f2:65:e1:7b:b3:1f:
64:0f:37:e0:0d:9c:cb:ca:bf:3c:90:8a:3b:f6:6e:
e4:c6:35:76:cf:b2:54:a2:fc:fb:ff:72:53:b8:c3:
bc:7a:4c:0e:63:5e:81:bb:5a:08:40:6f:9d:be:b6:
1d:8b:33:ae:d4:0f:5b:03:76:43:87:f3:3b:31:ec:
c5:88:9f:f5:9c:50:5d:75:50:a0:b8:3f:ab:02:da:
de:38:ae:58:94:4d:d7:11:4b:82:71:81:bb:8b:eb:
27:ec:05:36:3f:4b:92:02:e5:e9:92:97:0b:fe:9f:
e9:2d:33:be:46:ee:67:08:cf:b7:b3:54:fa:1f:b6:
ba:21:09:f5:c7:9d:2e:53:73:40:3b:c6:64:45:67:
7d:ce:81:21:74:93:3e:34:40:3d:46:7e:22:fa:d0:
0a:9c:ba:bd:ae:72:ab:27:b0:29:b2:5b:7d:86:8a:
bf:25:e2:c7:6f:8c:0a:83:15:ee:7a:0b:e6:e5:08:
12:f9:da:94:21:0c:a5:92:96:8e:56:c6:9f:3c:da:
60:61:20:31:5c:42:83:ac:8f:c1:88:3e:47:3b:24:
eb:8d:eb:1a:f8:36:55:73:63:e6:36:aa:7c:2d:d1:
9e:0a:12:f7:1c:49:ef:48:82:9a:eb:e2:b8:0c:4e:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:E9:21:06:B5:E7:D2:D9:D5:45:83:6A:BA:17:A7:02:95:AC:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ff6c7f-80c2-37d6-8818-cbe5804045ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:9d:6b:97:32:3f:bb:dd:57:81:e5:0a:e5:6e:57:c0:b1:a1:
5e:51:31:19:d0:d6:d9:62:1b:45:dd:f4:da:e5:2d:1e:96:22:
d2:1d:8d:c3:74:00:8d:99:99:27:8f:42:e5:a4:8f:05:d9:27:
9d:62:00:6b:f7:3d:03:56:26:66:37:68:ab:b7:7b:d1:08:b1:
5f:85:0e:54:b7:78:5f:48:c8:e7:62:72:87:88:8d:aa:0b:d9:
c6:c6:3e:a6:e6:96:e8:f9:a0:94:f2:c1:03:20:c4:36:fb:26:
57:a9:75:7b:69:21:d3:95:2b:5f:4d:98:09:6f:1b:e1:38:b3:
21:f0:16:92:13:82:e4:57:58:fb:bf:eb:2f:db:5c:39:05:2d:
0f:18:8d:9e:5d:8c:d3:23:8f:ac:68:0f:cf:bf:ba:97:5b:38:
3c:87:de:93:ad:89:87:6f:58:8d:43:9e:0a:16:a8:18:05:3b:
5c:ea:c5:8e:5e:85:c3:c4:a9:77:cf:df:e7:f0:f1:5c:44:ac:
ef:92:39:00:e4:e1:87:90:2d:9d:d7:8a:a2:cd:14:ea:8b:a0:
6a:3e:1d:a1:fa:27:8c:16:31:e5:84:b4:d7:7d:ef:cd:fc:4a:
2b:cb:fd:e5:ba:3e:5a:72:0a:e1:9c:87:76:27:b1:fe:1f:da:
d5:97:f9:82
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8cx7mJBoq3bS5yEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
NGY0ZjcwZWItNjEyOC00MjQ5LWFmODktMTdlNzkyMTliZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikwr/3aTcPnyZeF7sx9kDzfgDZzLyr88kIo7
9m7kxjV2z7JUovz7/3JTuMO8ekwOY16Bu1oIQG+dvrYdizOu1A9bA3ZDh/M7MezF
iJ/1nFBddVCguD+rAtreOK5YlE3XEUuCcYG7i+sn7AU2P0uSAuXpkpcL/p/pLTO+
Ru5nCM+3s1T6H7a6IQn1x50uU3NAO8ZkRWd9zoEhdJM+NEA9Rn4i+tAKnLq9rnKr
J7Apslt9hoq/JeLHb4wKgxXuegvm5QgS+dqUIQylkpaOVsafPNpgYSAxXEKDrI/B
iD5HOyTrjesa+DZVc2PmNqp8LdGeChL3HEnvSIKa6+K4DE6iGwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPz16SEGtefS2dVFg2q6F6cClayAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjBmZjZjN2YtODBjMi0z
N2Q2LTg4MTgtY2JlNTgwNDA0NWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAhnWuXMj+73VeB5QrlblfAsaFeUTEZ0NbZYhtF
3fTa5S0eliLSHY3DdACNmZknj0LlpI8F2SedYgBr9z0DViZmN2irt3vRCLFfhQ5U
t3hfSMjnYnKHiI2qC9nGxj6m5pbo+aCU8sEDIMQ2+yZXqXV7aSHTlStfTZgJbxvh
OLMh8BaSE4LkV1j7v+sv21w5BS0PGI2eXYzTI4+saA/Pv7qXWzg8h96TrYmHb1iN
Q54KFqgYBTtc6sWOXoXDxKl3z9/n8PFcRKzvkjkA5OGHkC2d14qizRTqi6BqPh2h
+ieMFjHlhLTXfe/N/Eory/3luj5acgrhnId2J7H+H9rVl/mC
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:08:16 2026 by rpki-client