
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa
File: 3f88418f-0cbf-3f8a-83bc-29643139b994.roa (raw, json)
Hash identifier: RVtWwFFEFlVOHnPihQ3ANFlmC2GG54U9ENGL1XStErQ=
Subject key identifier: AD:4F:79:4F:3B:54:AD:8E:1D:61:D5:61:7A:08:DC:51:53:63:70:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F2D87B52C8CFDE1D1B9A1C984
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 396599
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:b5:2c:8c:fd:e1:d1:b9:a1:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=fd355ebf-6877-4ff8-a3fe-46466424ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:32:ae:1a:59:6f:80:9b:16:1f:63:50:63:ab:
65:f1:26:03:54:ea:70:fc:75:19:25:40:17:d7:9e:
a4:d3:f0:79:a8:08:01:c3:32:79:a9:6d:40:9c:f4:
d9:54:33:09:b1:13:f9:aa:50:e3:1b:23:21:10:b7:
7b:b8:65:31:01:1d:aa:14:7a:87:46:39:76:ba:83:
1e:c7:fe:d0:a4:1f:eb:ce:30:55:a6:f3:2d:b6:46:
13:f3:e7:b3:dc:07:bf:8f:cc:06:e0:d3:c1:da:b7:
9d:a3:4e:ad:94:4c:ce:f9:cc:cf:9d:11:72:b1:31:
de:d7:c2:cd:77:6d:fb:34:93:07:4f:bc:72:28:9d:
5e:88:5b:47:08:e9:f4:fc:a6:e5:81:ea:32:e6:6d:
87:21:fc:a5:f4:68:d3:6e:4d:0a:51:d8:26:ad:73:
d6:84:3f:87:ae:cd:10:e6:99:f4:96:9c:ba:04:bb:
a1:f0:5a:bc:3e:8a:8b:ea:40:e5:e3:3f:0b:47:59:
7e:a4:e0:5e:be:2f:20:ab:71:5d:02:a1:da:f4:1b:
9f:ca:88:b8:04:0f:e1:b0:79:09:27:0b:7b:e9:22:
0d:24:8d:66:8c:15:bd:ee:d8:58:67:fe:f6:ad:74:
6e:ab:4e:a5:0e:cd:c1:d7:de:ee:2e:55:96:82:a8:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:79:4F:3B:54:AD:8E:1D:61:D5:61:7A:08:DC:51:53:63:70:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:8b:2e:14:3d:f4:f6:2a:c2:f9:64:85:bb:14:41:40:c0:e0:
be:1d:dd:5a:8a:3e:70:19:e6:69:bc:30:c9:1d:0a:46:8d:7d:
e9:6b:cb:f6:a0:9e:59:c0:93:be:2f:13:d2:4d:39:8c:93:56:
33:79:22:a5:ef:f8:de:91:d7:48:c2:b2:3f:a4:8c:09:d2:71:
f8:bf:2c:f9:c1:d3:86:80:17:3d:60:f0:08:a2:5e:a2:a3:01:
10:b2:3d:af:b5:d8:be:26:b3:00:6c:f1:30:90:42:fa:cb:97:
a6:e6:0c:9d:02:7a:27:d9:97:96:1b:4e:71:42:c4:5d:93:88:
b4:e4:b6:45:cd:a1:09:39:bb:fa:94:68:5e:50:95:32:8a:34:
dd:79:62:31:88:d0:16:29:3b:cb:c2:1c:0d:6b:bb:f9:c1:3c:
15:a4:f8:57:42:4d:68:fe:52:50:02:8f:a9:aa:ed:86:e8:42:
df:fa:3e:d8:ea:5c:23:e5:2b:08:b2:ac:7c:c5:58:b0:b5:e4:
38:8b:a5:29:dc:21:1f:32:46:34:31:d6:de:70:52:6f:92:d8:
75:cb:1c:55:c8:9c:8c:32:f4:7b:b3:27:c0:51:60:d0:71:bc:
d5:84:44:f8:ac:4e:9a:2e:7e:76:ac:27:fc:a0:9b:fc:35:8c:
c7:30:55:5e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th7UsjP3h0bmhyYQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmQzNTVlYmYtNjg3Ny00ZmY4LWEzZmUtNDY0NjY0MjRlZjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDKuGllvgJsWH2NQY6tl8SYDVOpw/HUZJUAX
156k0/B5qAgBwzJ5qW1AnPTZVDMJsRP5qlDjGyMhELd7uGUxAR2qFHqHRjl2uoMe
x/7QpB/rzjBVpvMttkYT8+ez3Ae/j8wG4NPB2redo06tlEzO+czPnRFysTHe18LN
d237NJMHT7xyKJ1eiFtHCOn0/Kblgeoy5m2HIfyl9GjTbk0KUdgmrXPWhD+Hrs0Q
5pn0lpy6BLuh8Fq8PoqL6kDl4z8LR1l+pOBevi8gq3FdAqHa9Bufyoi4BA/hsHkJ
Jwt76SINJI1mjBW97thYZ/72rXRuq06lDs3B197uLlWWgqj37QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK1PeU87VK2OHWHVYXoI3FFTY3BYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y4ODQxOGYtMGNiZi0z
ZjhhLTgzYmMtMjk2NDMxMzliOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAICLLhQ99PYqwvlkhbsUQUDA4L4d3VqKPnAZ5mm8MMkdCkaNfelr
y/agnlnAk74vE9JNOYyTVjN5IqXv+N6R10jCsj+kjAnScfi/LPnB04aAFz1g8Aii
XqKjARCyPa+12L4mswBs8TCQQvrLl6bmDJ0CeifZl5YbTnFCxF2TiLTktkXNoQk5
u/qUaF5QlTKKNN15YjGI0BYpO8vCHA1ru/nBPBWk+FdCTWj+UlACj6mq7YboQt/6
PtjqXCPlKwiyrHzFWLC15DiLpSncIR8yRjQx1t5wUm+S2HXLHFXInIwy9HuzJ8BR
YNBxvNWERPisTpoufnasJ/ygm/w1jMcwVV4=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:42:45 2026 by rpki-client