
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d1cd05-5383-39fb-9c57-b0c2f69cad3c.roa
File: b9d1cd05-5383-39fb-9c57-b0c2f69cad3c.roa (raw, json)
Hash identifier: CJxNFJL0ct1lsQxQvuZOhPkqKHmdbdPBNs/4as5ns5c=
Subject key identifier: 3D:54:EA:A9:99:74:68:A3:C5:E1:96:8C:33:CB:3E:61:34:20:B1:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0AA22BD80B108A961A0EF100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d1cd05-5383-39fb-9c57-b0c2f69cad3c.roa
Signing time: Wed 02 Sep 2026 13:00:12 +0000
ROA not before: Wed 02 Sep 2026 13:00:12 +0000
ROA not after: Tue 01 Dec 2026 14:00:12 +0000
asID: 19836
IP address blocks: 2001:502:8cc::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0a:a2:2b:d8:0b:10:8a:96:1a:0e:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 2 13:00:12 2026 GMT
Not After : Dec 1 14:00:12 2026 GMT
Subject: CN=cfd231fb-6a77-4c22-8446-bcd0da3d6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:1f:69:47:94:38:e8:22:62:bd:b0:70:f6:
60:d6:81:aa:3e:e0:6c:fa:5f:bd:e8:c5:80:6c:19:
96:3a:36:1a:6a:90:8c:08:fe:20:ed:58:b8:6d:be:
32:48:33:b5:38:95:98:33:95:de:02:b6:8f:f3:11:
1b:ac:86:03:54:f2:1d:cb:bd:df:3a:ac:87:34:09:
5b:1b:99:df:b8:52:16:5c:10:45:f3:63:1f:d2:30:
98:3b:3d:b4:e8:be:47:65:e7:cc:bb:e3:31:7c:0d:
aa:0f:b2:e0:3c:e3:77:3f:a4:59:63:dd:a8:80:bd:
62:fd:95:3e:74:78:17:ac:06:de:c2:81:4a:55:79:
4a:21:52:c1:ff:40:58:fd:10:35:52:eb:fb:7e:dc:
60:25:4f:78:c0:e4:03:f5:6b:f8:6a:9e:2a:a5:cb:
63:1c:1e:50:3a:35:f2:dd:e8:3c:1e:a7:f8:f1:4d:
8e:36:d3:8a:eb:20:56:a9:c7:22:0d:ae:b8:b3:40:
b4:5c:04:25:3f:38:c9:01:9a:66:15:7f:19:32:56:
d8:46:1d:51:bb:dc:7e:21:09:d7:8b:64:2c:29:7b:
ce:e0:39:b8:37:9d:33:1d:02:83:0a:02:3a:24:93:
12:58:d5:66:a5:a0:1c:cf:c6:2e:83:be:b0:27:07:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:EA:A9:99:74:68:A3:C5:E1:96:8C:33:CB:3E:61:34:20:B1:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d1cd05-5383-39fb-9c57-b0c2f69cad3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ff:8a:f7:b8:f0:b2:15:20:b1:36:41:ae:0b:ca:88:9c:4b:
ec:bb:a3:ab:c0:a6:0f:29:5c:3f:a7:9d:fb:05:67:5f:31:e4:
62:ab:37:1e:2d:ac:39:26:a9:56:b1:f3:e0:27:22:3b:c5:3f:
ee:1c:b2:8c:d2:24:0e:5c:83:9c:a7:ce:4f:24:52:06:aa:63:
52:d8:fe:16:d7:a3:fc:d4:55:ba:8f:55:04:ab:62:5b:7c:8e:
ab:78:2b:0d:fd:19:0b:9d:9a:94:66:25:5d:18:d3:cf:0c:d8:
aa:48:ee:c4:67:6f:a6:07:75:07:8b:f8:1f:5f:33:57:28:54:
44:59:11:ce:8d:b2:4f:84:30:d9:17:3d:4e:35:e9:50:98:7c:
55:36:8a:1c:7a:56:bb:ab:32:c4:a6:3b:4a:58:3a:24:22:8c:
13:ed:c9:f9:7a:5a:dd:93:ea:fa:a8:0a:03:d7:cc:da:da:9c:
7c:a5:56:25:e2:24:2f:2c:2b:98:7d:83:ba:e3:89:be:f6:22:
5f:ba:11:f9:52:39:d5:9a:71:de:02:19:11:6b:0e:d2:cd:68:
aa:72:5e:fd:ca:c4:5e:dc:39:40:fe:4d:67:d6:e2:23:7c:05:
24:26:af:59:37:5a:35:a9:72:75:4f:bf:7d:50:1e:38:6c:c4:
dc:a2:8d:fa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8KoivYCxCKlhoO8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk
Y2ZkMjMxZmItNmE3Ny00YzIyLTg0NDYtYmNkMGRhM2Q2MDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYfaUeUOOgiYr2wcPZg1oGqPuBs+l+96MWA
bBmWOjYaapCMCP4g7Vi4bb4ySDO1OJWYM5XeAraP8xEbrIYDVPIdy73fOqyHNAlb
G5nfuFIWXBBF82Mf0jCYOz206L5HZefMu+MxfA2qD7LgPON3P6RZY92ogL1i/ZU+
dHgXrAbewoFKVXlKIVLB/0BY/RA1Uuv7ftxgJU94wOQD9Wv4ap4qpctjHB5QOjXy
3eg8Hqf48U2ONtOK6yBWqcciDa64s0C0XAQlPzjJAZpmFX8ZMlbYRh1Ru9x+IQnX
i2QsKXvO4Dm4N50zHQKDCgI6JJMSWNVmpaAcz8Yug76wJwcdDQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD1U6qmZdGijxeGWjDPLPmE0ILE0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlkMWNkMDUtNTM4My0z
OWZiLTljNTctYjBjMmY2OWNhZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBS/4r3uPCyFSCxNkGuC8qInEvsu6OrwKYPKVw/
p537BWdfMeRiqzceLaw5JqlWsfPgJyI7xT/uHLKM0iQOXIOcp85PJFIGqmNS2P4W
16P81FW6j1UEq2JbfI6reCsN/RkLnZqUZiVdGNPPDNiqSO7EZ2+mB3UHi/gfXzNX
KFREWRHOjbJPhDDZFz1ONelQmHxVNoocela7qzLEpjtKWDokIowT7cn5elrdk+r6
qAoD18za2px8pVYl4iQvLCuYfYO644m+9iJfuhH5UjnVmnHeAhkRaw7SzWiqcl79
ysRe3DlA/k1n1uIjfAUkJq9ZN1o1qXJ1T799UB44bMTcoo36
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:07:12 2026 by rpki-client