
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6be6be6e-1d5a-39dd-8191-4da0aa8fffce.roa
File: 6be6be6e-1d5a-39dd-8191-4da0aa8fffce.roa (raw, json)
Hash identifier: Q2g7vsfvpuuQVC4O0ezRF1uvYnUzcZa0TBby6qaK4+Y=
Subject key identifier: 9E:93:58:42:A0:95:0C:D9:5A:E9:5C:C1:EF:85:8F:F2:36:D3:D2:56
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF5B210CD9A34D0D125171C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6be6be6e-1d5a-39dd-8191-4da0aa8fffce.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 36632
IP address blocks: 2001:503:d2d::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:10:cd:9a:34:d0:d1:25:17:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=a62c92ac-1b6c-4807-a257-f9a1e48c8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:ec:fb:9b:e0:b6:be:47:06:04:25:63:38:
cb:73:ce:a7:8b:41:11:b5:4c:a9:f2:ff:63:42:eb:
7c:25:32:ad:54:c7:21:03:59:4c:4d:e9:8e:04:99:
5d:56:5e:90:b9:d1:7c:3b:35:44:5e:44:22:0b:ce:
86:97:4b:45:57:a6:e2:2b:49:6a:f1:97:7c:2e:35:
d5:26:1c:6a:ec:94:71:f3:a8:ba:6b:5a:de:7f:bc:
89:89:2e:94:bd:13:63:c8:15:66:7b:33:f2:2d:34:
2a:0d:5b:21:8e:84:bb:ee:02:71:2c:be:05:21:7d:
0c:41:05:29:e6:6b:67:90:ce:19:f6:f5:14:9f:86:
cb:e4:2f:ac:ca:65:a2:d7:30:4e:20:ec:84:4b:67:
96:39:f5:5c:a1:d3:6b:3e:90:6e:0d:c5:3d:be:e7:
a6:0e:02:e0:f2:10:48:ba:de:6a:87:fb:df:80:f2:
f8:6a:a0:04:9c:0e:c1:4a:13:3e:4b:ea:20:3e:fd:
96:85:a9:41:85:db:26:9d:79:9c:29:46:e6:01:ef:
b8:03:0e:b7:84:26:be:f9:5b:63:a4:63:b3:e4:fd:
8c:6d:43:3f:35:e3:da:b7:a7:16:7e:5b:d5:42:d1:
e4:5a:f9:65:18:bf:d1:cc:f7:2c:d7:05:71:3f:0e:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:58:42:A0:95:0C:D9:5A:E9:5C:C1:EF:85:8F:F2:36:D3:D2:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6be6be6e-1d5a-39dd-8191-4da0aa8fffce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:b3:7e:fe:bd:f6:dd:28:6c:48:2d:ba:c2:51:34:3d:03:6b:
c6:44:f7:52:73:f3:c8:e9:66:bc:09:a7:62:80:15:f2:61:55:
d9:4f:c2:a7:7a:f0:26:ba:0f:8b:11:55:3e:b5:d7:32:0c:13:
3c:ff:6b:0d:0e:dc:ca:88:25:85:77:a2:1e:c7:94:7f:ae:46:
1a:dd:5b:bd:80:4a:07:94:85:d3:6c:f0:13:99:d0:54:94:27:
66:be:85:50:17:5e:89:41:f4:3a:79:43:b4:60:b3:62:7b:32:
3f:fb:43:6a:0c:86:2b:28:58:04:9c:16:f4:31:5e:2e:ce:31:
af:44:56:ad:28:3b:ad:59:bd:91:50:22:f3:5e:70:82:71:e0:
1c:ba:3f:98:0d:48:ec:b5:ca:89:bc:bf:9a:7d:cf:eb:05:fa:
c6:fa:b9:25:be:3a:c4:50:da:1c:57:0a:05:21:ad:1f:08:d0:
78:6a:3c:3f:7b:c5:c4:6f:ec:71:95:4f:86:7a:75:8d:77:27:
05:1b:92:93:a5:d2:bc:96:93:6d:c0:6d:bd:28:77:dd:db:72:
39:d5:91:cc:2c:78:1d:1f:79:34:44:73:d9:9b:7a:33:3d:6c:
4b:72:41:f9:1b:d2:47:ef:9e:6d:ac:7a:6f:a5:7e:8c:db:59:
5a:75:00:24
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71shDNmjTQ0SUXHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTYyYzkyYWMtMWI2Yy00ODA3LWEyNTctZjlhMWU0OGM4NjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gzs+5vgtr5HBgQlYzjLc86ni0ERtUyp8v9j
Qut8JTKtVMchA1lMTemOBJldVl6QudF8OzVEXkQiC86Gl0tFV6biK0lq8Zd8LjXV
Jhxq7JRx86i6a1ref7yJiS6UvRNjyBVmezPyLTQqDVshjoS77gJxLL4FIX0MQQUp
5mtnkM4Z9vUUn4bL5C+symWi1zBOIOyES2eWOfVcodNrPpBuDcU9vuemDgLg8hBI
ut5qh/vfgPL4aqAEnA7BShM+S+ogPv2WhalBhdsmnXmcKUbmAe+4Aw63hCa++Vtj
pGOz5P2MbUM/NePat6cWflvVQtHkWvllGL/RzPcs1wVxPw4mTwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ6TWEKglQzZWulcwe+Fj/I209JWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmJlNmJlNmUtMWQ1YS0z
OWRkLTgxOTEtNGRhMGFhOGZmZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA5s37+vfbdKGxILbrCUTQ9A2vGRPdSc/PI6Wa8
CadigBXyYVXZT8KnevAmug+LEVU+tdcyDBM8/2sNDtzKiCWFd6Iex5R/rkYa3Vu9
gEoHlIXTbPATmdBUlCdmvoVQF16JQfQ6eUO0YLNiezI/+0NqDIYrKFgEnBb0MV4u
zjGvRFatKDutWb2RUCLzXnCCceAcuj+YDUjstcqJvL+afc/rBfrG+rklvjrEUNoc
VwoFIa0fCNB4ajw/e8XEb+xxlU+GenWNdycFG5KTpdK8lpNtwG29KHfd23I51ZHM
LHgdH3k0RHPZm3ozPWxLckH5G9JH755trHpvpX6M21ladQAk
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:55 2026 by rpki-client