
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
File: 2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa (raw, json)
Hash identifier: tAHPfB8zqw84iBoKx5YgOdl4Qwirg8FTbfWpFg6jpfw=
Subject key identifier: 6D:6F:62:D2:BB:7D:E3:D2:5A:23:30:FA:70:61:BE:48:CD:52:29:FF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E5A4A188795D2F8EB9AA7F5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 396553
IP address blocks: 2001:500:123::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:18:87:95:d2:f8:eb:9a:a7:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=ae23761c-7835-4701-962a-2f42196da52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:09:7c:51:90:39:01:04:09:1d:77:52:e4:
5d:60:df:a6:24:58:a9:51:d4:10:85:ba:f7:db:53:
28:50:93:f6:40:bd:28:17:e7:d1:43:e9:7f:8a:ae:
3d:1c:f5:33:44:7f:24:88:42:97:f2:61:6b:91:01:
0c:58:44:26:c2:03:99:36:bc:ae:57:89:f0:41:0b:
5d:6a:e5:b7:e4:0b:0a:c0:5f:8e:f0:e7:55:26:5b:
e7:3c:71:1d:de:5e:d7:a7:9d:c8:dd:ce:99:03:4f:
16:e1:42:66:90:fc:cc:b1:3f:a8:05:18:e6:47:7b:
fb:b6:45:8c:45:e7:e7:dd:77:dd:8a:e0:b5:77:43:
1d:cf:19:1d:50:4f:9a:bb:95:43:82:86:0d:22:dd:
90:5b:db:b0:57:94:95:f3:f2:37:9c:ef:3b:64:7b:
df:0f:45:aa:0d:a1:9b:e1:0e:44:d2:7b:ce:37:a1:
22:55:59:7d:04:a0:a6:97:51:38:a3:ed:6d:1d:67:
a8:22:2b:06:d0:56:37:99:aa:b3:9e:ca:c7:8a:43:
50:f4:73:8f:24:b5:df:78:4e:dc:8e:fd:56:ae:19:
aa:15:ca:d5:bd:cd:1c:e1:e7:1f:84:c6:04:3a:ce:
9e:f3:77:0d:eb:32:72:73:dd:3d:97:c8:f8:24:1e:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:62:D2:BB:7D:E3:D2:5A:23:30:FA:70:61:BE:48:CD:52:29:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:ef:d7:e2:a7:5e:7b:a0:63:bd:19:ed:ae:29:94:17:5a:b2:
d5:5b:06:c0:27:f5:ee:fe:e0:79:70:3c:19:4c:07:82:6a:90:
5f:ce:6d:34:18:03:57:ba:d2:07:32:f8:45:51:fd:93:af:9c:
e6:4f:6b:4f:2c:26:62:f1:f0:59:64:44:0a:a9:81:87:70:37:
80:82:84:c7:ae:61:2b:14:18:5f:6a:43:e6:9b:c8:de:7e:cf:
1d:0f:10:7e:2c:9c:3d:e7:db:28:d8:df:e6:97:6e:e7:94:87:
6c:1d:db:91:93:63:13:d8:70:68:6d:e0:dc:76:28:7a:af:25:
b1:94:7b:a2:06:89:16:76:b5:17:c5:f5:3b:7e:d6:bc:10:bc:
68:1d:cf:2e:90:67:dd:87:81:d6:77:db:7a:85:ea:ab:fd:58:
68:a6:6c:82:cc:fe:8f:04:f3:9c:a8:0e:11:61:c5:b6:30:f5:
cc:6a:86:f5:f6:21:92:73:db:a8:54:31:6a:24:01:7f:4d:d8:
e8:93:6e:65:0a:3b:30:32:be:94:d0:ad:90:7e:99:d3:9f:c5:
c0:6b:ce:b8:16:b5:87:1c:2c:9e:95:c6:74:3c:ac:f5:eb:e4:
3c:8b:c3:6e:93:d6:10:34:d6:f1:75:5f:d0:79:03:39:a5:bb:
b9:6a:ed:25
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5aShiHldL465qn9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
YWUyMzc2MWMtNzgzNS00NzAxLTk2MmEtMmY0MjE5NmRhNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2IJfFGQOQEECR13UuRdYN+mJFipUdQQhbr3
21MoUJP2QL0oF+fRQ+l/iq49HPUzRH8kiEKX8mFrkQEMWEQmwgOZNryuV4nwQQtd
auW35AsKwF+O8OdVJlvnPHEd3l7Xp53I3c6ZA08W4UJmkPzMsT+oBRjmR3v7tkWM
Refn3XfdiuC1d0MdzxkdUE+au5VDgoYNIt2QW9uwV5SV8/I3nO87ZHvfD0WqDaGb
4Q5E0nvON6EiVVl9BKCml1E4o+1tHWeoIisG0FY3maqznsrHikNQ9HOPJLXfeE7c
jv1WrhmqFcrVvc0c4ecfhMYEOs6e83cN6zJyc909l8j4JB4+LwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFG1vYtK7fePSWiMw+nBhvkjNUin/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE4NWU1YWYtNzI2ZS0z
ZmM0LWE3ZGQtZWU5NGE4MjhhOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC579fip157oGO9Ge2uKZQXWrLVWwbAJ/Xu/uB5
cDwZTAeCapBfzm00GANXutIHMvhFUf2Tr5zmT2tPLCZi8fBZZEQKqYGHcDeAgoTH
rmErFBhfakPmm8jefs8dDxB+LJw959so2N/ml27nlIdsHduRk2MT2HBobeDcdih6
ryWxlHuiBokWdrUXxfU7fta8ELxoHc8ukGfdh4HWd9t6heqr/VhopmyCzP6PBPOc
qA4RYcW2MPXMaob19iGSc9uoVDFqJAF/Tdjok25lCjswMr6U0K2QfpnTn8XAa864
FrWHHCyelcZ0PKz16+Q8i8Nuk9YQNNbxdV/QeQM5pbu5au0l
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:50 2026 by rpki-client