
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f3b747b-728e-3729-8743-715d123f078f.roa
File: 5f3b747b-728e-3729-8743-715d123f078f.roa (raw, json)
Hash identifier: nNNb454czB6KxHuXqzIovfZ3paLpE4wDYvFc2n09bXQ=
Subject key identifier: AD:31:F1:A3:9E:9D:F0:C1:D6:62:7B:17:A0:FC:00:9E:E2:5B:EF:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498BE8A4F817417BFAAEEE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f3b747b-728e-3729-8743-715d123f078f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396604
IP address blocks: 2001:500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:e8:a4:f8:17:41:7b:fa:ae:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5fef19ba-3e85-4b05-a93f-4a4c7d60090c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:dc:fb:a9:55:0a:e6:53:cf:1e:95:b3:97:
49:6f:31:d7:95:c9:c5:18:61:ae:c1:0c:ee:30:76:
30:f4:6c:43:b2:c5:9e:89:b1:f0:d1:03:02:04:fe:
df:79:8c:76:2d:99:78:e3:6d:d3:ef:ec:60:b4:5b:
38:79:9b:cf:ee:02:56:77:8e:22:e6:a6:9d:68:ea:
17:14:9b:21:1f:c3:fc:f7:d3:fd:af:54:8c:99:7d:
ad:fb:20:86:d4:7c:64:35:39:fe:7f:6c:71:c4:9e:
fc:92:75:c8:71:4b:cd:12:39:aa:04:6f:23:d6:7e:
79:43:ba:8a:79:ae:35:27:d7:f2:35:6a:14:e1:10:
f0:b4:6e:35:0e:92:e7:af:9e:f8:35:33:09:df:d5:
83:c7:4f:8d:0f:2d:d1:5a:f0:c2:4c:ed:37:d2:09:
f0:49:0a:5c:f2:ea:f2:05:6c:da:58:df:9b:a0:07:
9a:f8:90:d3:68:a7:c8:3c:b4:92:e8:85:68:93:4f:
27:d8:fe:06:94:82:fc:4d:87:4f:e8:1c:8d:ca:0d:
d8:9c:b5:49:cc:2c:b6:77:1e:a2:79:c8:73:07:27:
99:53:21:de:ee:7c:18:b5:9c:8b:fe:ac:f1:84:d5:
be:a7:14:0a:79:16:2e:a0:f2:6e:4b:8c:e4:d2:56:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:31:F1:A3:9E:9D:F0:C1:D6:62:7B:17:A0:FC:00:9E:E2:5B:EF:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f3b747b-728e-3729-8743-715d123f078f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:62:98:24:3d:50:2f:f0:ef:87:cc:b2:be:4f:c0:65:b7:37:
7e:8f:a9:19:38:09:a7:8a:b1:20:1a:f5:4e:bb:53:46:74:10:
8a:4e:20:48:dc:eb:52:6d:e2:f4:ec:1f:45:d2:cb:61:71:bb:
1b:92:af:8f:9a:82:d5:e4:f5:0d:4f:8f:4d:a2:e5:ab:b6:d7:
fe:36:d2:7b:be:a3:cc:35:22:60:f8:ed:b6:8a:5d:22:21:fe:
f7:a6:7f:31:d0:ec:83:50:54:5c:c7:d5:9c:f8:11:df:2c:20:
f7:91:e0:4b:90:1a:df:24:09:35:94:b0:af:da:c7:b5:af:83:
cc:00:9c:b1:2e:0f:32:e3:3c:bd:94:39:7f:53:d6:7b:36:39:
d5:75:0a:e4:12:25:7f:28:b2:ab:bc:fb:b4:fc:59:21:a1:b6:
63:d9:67:28:b6:e0:cb:fc:c9:c2:3b:1c:a8:d2:ec:7d:ab:2c:
8e:8e:02:34:dc:bc:ad:5b:2b:c2:fa:94:87:4f:a9:89:0c:71:
e7:98:4b:eb:ef:d6:20:eb:9c:fe:fb:2d:7b:27:64:b2:39:4c:
5e:40:22:3a:46:6a:c0:e5:68:2a:8d:49:5d:d4:9b:e4:51:9e:
27:1a:dd:df:ce:68:26:c6:da:55:af:8d:26:e3:9b:79:05:a5:
04:4c:4c:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji+ik+BdBe/qu7kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWZlZjE5YmEtM2U4NS00YjA1LWE5M2YtNGE0YzdkNjAwOTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokfc+6lVCuZTzx6Vs5dJbzHXlcnFGGGuwQzu
MHYw9GxDssWeibHw0QMCBP7feYx2LZl4423T7+xgtFs4eZvP7gJWd44i5qadaOoX
FJshH8P899P9r1SMmX2t+yCG1HxkNTn+f2xxxJ78knXIcUvNEjmqBG8j1n55Q7qK
ea41J9fyNWoU4RDwtG41DpLnr574NTMJ39WDx0+NDy3RWvDCTO030gnwSQpc8ury
BWzaWN+boAea+JDTaKfIPLSS6IVok08n2P4GlIL8TYdP6ByNyg3YnLVJzCy2dx6i
echzByeZUyHe7nwYtZyL/qzxhNW+pxQKeRYuoPJuS4zk0lZ/CwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK0x8aOenfDB1mJ7F6D8AJ7iW++/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWYzYjc0N2ItNzI4ZS0z
NzI5LTg3NDMtNzE1ZDEyM2YwNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtimCQ9UC/w74fMsr5PwGW3N36PqRk4CaeKsSAa9U67U0Z0EIpO
IEjc61Jt4vTsH0XSy2FxuxuSr4+agtXk9Q1Pj02i5au21/420nu+o8w1ImD47baK
XSIh/vemfzHQ7INQVFzH1Zz4Ed8sIPeR4EuQGt8kCTWUsK/ax7Wvg8wAnLEuDzLj
PL2UOX9T1ns2OdV1CuQSJX8osqu8+7T8WSGhtmPZZyi24Mv8ycI7HKjS7H2rLI6O
AjTcvK1bK8L6lIdPqYkMceeYS+vv1iDrnP77LXsnZLI5TF5AIjpGasDlaCqNSV3U
m+RRnica3d/OaCbG2lWvjSbjm3kFpQRMTFk=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:27:39 2026 by rpki-client