
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d66012d8-9572-3e66-9d04-285da056490a.roa
File: d66012d8-9572-3e66-9d04-285da056490a.roa (raw, json)
Hash identifier: ddrw1gJsqqg+1VVJXxcLWFca6LUUwMW0g0pmjw4/tls=
Subject key identifier: DA:19:35:44:5C:24:99:3F:20:F9:7E:B4:FA:2C:B8:06:88:6B:05:B2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06728C43747F38F1F6BB82A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d66012d8-9572-3e66-9d04-285da056490a.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396609
IP address blocks: 2001:500:127::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:8c:43:74:7f:38:f1:f6:bb:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=5a68b4e1-d5cd-4170-b6f1-d87593a5fae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:24:5f:19:f7:f1:c5:01:99:a5:a5:98:a1:
a0:29:03:9c:62:73:1a:64:b3:3c:b3:20:9f:2d:10:
12:6e:d9:b1:eb:19:22:ad:04:68:fd:ef:31:fe:ab:
7b:bb:5b:d6:58:34:84:79:91:26:fa:91:99:43:25:
61:60:df:5f:45:38:d6:29:87:3d:c2:14:21:c1:89:
f4:e9:6f:45:1b:98:d8:64:07:46:ae:3e:e5:0f:b2:
94:f1:f0:3b:b0:a2:6a:35:22:8a:73:f3:58:d0:ab:
4b:33:e5:5f:c6:a6:c4:04:f2:cc:06:e0:e6:6d:a8:
1a:2b:9d:9e:23:01:10:61:31:46:c5:a6:05:05:54:
2b:4f:bd:9d:d7:53:0a:a5:f0:6c:12:d0:6a:ac:29:
ce:9f:9e:bc:2f:3a:e1:60:c3:37:67:0f:19:9c:30:
c2:75:58:9d:42:65:29:b7:d4:e6:e5:99:fe:c2:c5:
29:83:b3:64:13:08:08:e2:22:bb:5f:54:71:87:f2:
f1:8a:aa:03:3b:c5:e0:4e:93:26:b4:bf:49:3a:85:
c6:f0:a8:5b:62:5f:d8:9f:c7:4f:4b:b8:57:75:9f:
51:1c:59:24:b7:97:36:26:c3:0d:5f:32:e1:3f:d7:
44:3a:ca:f2:ef:80:f4:78:ff:b6:56:48:a8:85:88:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:35:44:5C:24:99:3F:20:F9:7E:B4:FA:2C:B8:06:88:6B:05:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d66012d8-9572-3e66-9d04-285da056490a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:91:0c:f6:1d:37:b8:04:45:0c:77:c0:ae:fd:aa:f5:94:69:
ed:e3:34:a7:1f:4e:02:05:83:81:21:e2:21:b6:49:26:ba:5d:
39:67:6a:9d:6b:60:59:89:72:5b:be:1c:2c:68:74:1b:b4:26:
1b:a1:d8:52:f6:9c:96:50:6a:db:ae:0b:33:71:8b:45:f2:97:
6a:fd:02:a2:37:a2:21:d7:c7:da:8b:58:1e:00:7d:a6:f9:82:
16:35:d6:fe:1d:1a:f0:80:81:42:b8:55:42:6e:73:d1:d3:20:
d0:52:4c:a7:aa:f0:24:cb:a3:a6:ca:f7:43:f4:5c:e6:42:77:
4b:42:c4:59:74:ff:ac:d8:b9:8b:23:02:d1:d7:e8:0c:3a:a5:
d0:91:70:b9:27:83:fe:ae:21:5a:04:2a:32:c9:3d:3b:d7:bd:
0d:9a:29:99:31:dd:0b:a6:8a:37:20:5e:db:ec:28:5e:96:56:
57:0e:6e:f1:c6:67:a0:31:3e:b9:62:12:12:ba:c8:09:87:b2:
6e:b5:c1:e6:12:46:eb:7d:76:06:c5:bb:2e:7d:23:96:98:3a:
77:fb:98:aa:00:5d:f3:77:55:eb:fe:00:06:b3:7b:f9:dd:88:
fa:f6:b8:f3:dd:5d:2a:af:d3:fa:bd:b1:41:6c:11:43:50:46:
5d:43:7f:49
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoxDdH848fa7gqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NWE2OGI0ZTEtZDVjZC00MTcwLWI2ZjEtZDg3NTkzYTVmYWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6skXxn38cUBmaWlmKGgKQOcYnMaZLM8syCf
LRASbtmx6xkirQRo/e8x/qt7u1vWWDSEeZEm+pGZQyVhYN9fRTjWKYc9whQhwYn0
6W9FG5jYZAdGrj7lD7KU8fA7sKJqNSKKc/NY0KtLM+VfxqbEBPLMBuDmbagaK52e
IwEQYTFGxaYFBVQrT72d11MKpfBsEtBqrCnOn568LzrhYMM3Zw8ZnDDCdVidQmUp
t9Tm5Zn+wsUpg7NkEwgI4iK7X1Rxh/LxiqoDO8XgTpMmtL9JOoXG8KhbYl/Yn8dP
S7hXdZ9RHFkkt5c2JsMNXzLhP9dEOsry74D0eP+2VkiohYiHlQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNoZNURcJJk/IPl+tPosuAaIawWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDY2MDEyZDgtOTU3Mi0z
ZTY2LTlkMDQtMjg1ZGEwNTY0OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAXkQz2HTe4BEUMd8Cu/ar1lGnt4zSnH04CBYOB
IeIhtkkmul05Z2qda2BZiXJbvhwsaHQbtCYbodhS9pyWUGrbrgszcYtF8pdq/QKi
N6Ih18fai1geAH2m+YIWNdb+HRrwgIFCuFVCbnPR0yDQUkynqvAky6OmyvdD9Fzm
QndLQsRZdP+s2LmLIwLR1+gMOqXQkXC5J4P+riFaBCoyyT07170NmimZMd0Lpoo3
IF7b7ChellZXDm7xxmegMT65YhISusgJh7JutcHmEkbrfXYGxbsufSOWmDp3+5iq
AF3zd1Xr/gAGs3v53Yj69rjz3V0qr9P6vbFBbBFDUEZdQ39J
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:34:59 2026 by rpki-client