
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9e5b7d9-0b0e-3702-82f0-0d216c0de8d0.roa
File: d9e5b7d9-0b0e-3702-82f0-0d216c0de8d0.roa (raw, json)
Hash identifier: NqL20WDAQlz0IA9wRHpluZ8z9/t5t8nTf1E307tmeCE=
Subject key identifier: 76:9F:F4:C0:63:01:2A:7B:52:42:7F:24:03:87:B6:B3:B8:3E:40:57
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1037A355619E5A3E7AC8F680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9e5b7d9-0b0e-3702-82f0-0d216c0de8d0.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 396616
IP address blocks: 2001:502:7094::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:a3:55:61:9e:5a:3e:7a:c8:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=bd9a5535-7c6a-4d7c-b66a-754229ccad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:43:b4:82:d0:c6:6b:5c:87:28:71:d1:9e:
6d:6b:c8:97:c4:a1:55:40:fe:56:28:8c:a4:db:b9:
ad:b0:c5:3c:41:41:2a:f2:72:cf:45:4c:3b:a5:dc:
ae:5f:2a:6a:31:ac:e6:2a:39:e3:25:8d:5e:aa:0e:
81:26:29:71:f2:7f:34:fc:62:51:06:30:6b:6b:a3:
32:c9:8e:48:8e:2b:f6:97:92:b7:f2:48:76:61:6f:
7c:3c:d4:2b:71:d3:d0:66:9e:13:2b:8e:66:68:e6:
85:53:5a:8e:9c:e3:b2:1d:8a:b5:16:8c:eb:15:e3:
fd:01:34:0a:3d:c0:98:af:eb:80:6d:26:45:91:c9:
c4:6b:32:1e:0f:1c:71:0a:cc:62:70:ed:c1:7d:d5:
aa:dc:a8:40:91:fd:60:b1:11:c7:6b:7f:b1:44:07:
b3:c9:ed:a0:74:9e:e9:68:40:5a:01:c8:10:d9:8e:
f8:14:b8:0a:aa:bb:78:0e:6c:fd:55:87:6f:87:b1:
57:b5:f2:24:34:06:cd:be:2a:e5:1e:f2:1a:26:bb:
88:05:df:b9:52:96:75:64:2f:9b:61:cc:10:32:83:
d0:07:d4:b4:71:bb:d2:6f:99:92:cd:c4:ab:03:97:
f9:f7:c8:62:77:77:4d:f7:05:e4:46:b8:c5:91:c1:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:F4:C0:63:01:2A:7B:52:42:7F:24:03:87:B6:B3:B8:3E:40:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9e5b7d9-0b0e-3702-82f0-0d216c0de8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:7094:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5f:d2:60:e3:ad:aa:1a:37:56:e3:f5:9c:05:48:5a:1b:e4:
89:13:57:3f:79:9e:3e:38:71:e3:bd:8d:a7:c8:2e:82:62:97:
86:d5:f8:fb:26:66:0f:14:b5:a4:d1:2a:ca:57:23:5e:a4:37:
6a:88:4a:7e:de:2a:75:d5:ab:03:9a:82:d2:e7:cd:38:27:01:
68:66:33:a5:e3:2e:92:6f:45:ef:65:2f:51:b4:2a:01:85:6f:
a9:eb:bf:40:14:5e:af:d8:32:c1:dc:43:54:c6:e3:b4:d6:f2:
11:49:44:af:88:ff:78:9a:2b:9a:67:13:6e:a0:b2:25:07:bf:
31:48:8a:87:6f:dd:89:97:f1:1e:fb:3c:68:df:e4:ce:72:08:
b8:e4:c4:5f:88:a2:30:aa:41:63:df:52:cf:e1:59:2b:71:6a:
ae:68:ed:2b:c7:84:a5:32:1c:58:40:55:92:f3:70:e2:59:a9:
8e:b8:a6:83:98:d4:31:09:88:05:d9:ea:6a:9e:cc:8d:fa:f0:
34:eb:ef:e6:52:ef:d5:ac:67:24:4b:16:d8:47:96:ff:26:19:
a3:5f:6b:f5:25:a5:75:bf:50:0a:00:7d:5a:13:c3:a5:15:ff:
5d:12:c4:87:8d:c6:95:bd:3a:5f:34:52:74:b5:84:ea:45:b2:
68:44:c6:ec
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8QN6NVYZ5aPnrI9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
YmQ5YTU1MzUtN2M2YS00ZDdjLWI2NmEtNzU0MjI5Y2NhZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJZDtILQxmtchyhx0Z5ta8iXxKFVQP5WKIyk
27mtsMU8QUEq8nLPRUw7pdyuXypqMazmKjnjJY1eqg6BJilx8n80/GJRBjBra6My
yY5Ijiv2l5K38kh2YW98PNQrcdPQZp4TK45maOaFU1qOnOOyHYq1FozrFeP9ATQK
PcCYr+uAbSZFkcnEazIeDxxxCsxicO3BfdWq3KhAkf1gsRHHa3+xRAezye2gdJ7p
aEBaAcgQ2Y74FLgKqrt4Dmz9VYdvh7FXtfIkNAbNvirlHvIaJruIBd+5UpZ1ZC+b
YcwQMoPQB9S0cbvSb5mSzcSrA5f598hid3dN9wXkRrjFkcH2KwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHaf9MBjASp7UkJ/JAOHtrO4PkBXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDllNWI3ZDktMGIwZS0z
NzAyLTgyZjAtMGQyMTZjMGRlOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAuX9Jg462qGjdW4/WcBUhaG+SJE1c/eZ4+OHHj
vY2nyC6CYpeG1fj7JmYPFLWk0SrKVyNepDdqiEp+3ip11asDmoLS5804JwFoZjOl
4y6Sb0XvZS9RtCoBhW+p679AFF6v2DLB3ENUxuO01vIRSUSviP94miuaZxNuoLIl
B78xSIqHb92Jl/Ee+zxo3+TOcgi45MRfiKIwqkFj31LP4VkrcWquaO0rx4SlMhxY
QFWS83DiWamOuKaDmNQxCYgF2epqnsyN+vA06+/mUu/VrGckSxbYR5b/JhmjX2v1
JaV1v1AKAH1aE8OlFf9dEsSHjcaVvTpfNFJ0tYTqRbJoRMbs
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:05:12 2026 by rpki-client