
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
File: 9d0b6b72-0245-3b5d-b7db-598515453663.roa (raw, json)
Hash identifier: yHAReaP1diM7csyoUVcLCLZS3LnIGv7oyW5QpeG7mCI=
Subject key identifier: 3E:33:79:68:6C:32:B1:67:8E:4D:46:60:BD:64:2F:C1:B4:40:B4:B4
Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial: 010D0C9F4328584F49757C1582360D94E3E91500
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 237
IP address blocks: 2001:48a8:7800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:7c:15:82:36:0d:94:e3:e9:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0678987a-d3ab-47e2-8bc4-ca5389cb558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:2d:3d:65:f0:6e:fd:d0:d5:2a:84:1f:86:
00:d7:8d:cd:9c:e4:ad:bd:a8:9c:ec:c2:d7:d4:38:
38:9a:8e:53:f7:b2:4c:7f:07:69:fc:a7:87:4e:44:
7a:7e:a0:b3:64:c0:89:ff:75:57:ce:b4:e1:2a:db:
b2:84:6c:14:6a:50:bb:75:cf:06:92:77:f5:57:d4:
27:70:fd:09:4c:33:bc:0a:7c:08:b7:81:5a:aa:36:
44:e6:6f:cf:3e:1a:ec:57:7d:ca:19:a4:63:c6:5f:
21:d0:1c:54:f3:e3:0a:ee:6e:e0:7d:c9:1c:49:b0:
df:5a:db:5c:eb:6f:31:42:ea:ed:15:82:11:7f:9b:
73:63:1b:7f:d7:e3:35:56:ee:fe:90:32:d9:22:29:
3c:92:bd:f3:f3:5d:01:a4:ec:b2:b9:b7:1b:dd:75:
a2:ab:5b:36:49:44:16:99:dd:28:e2:a9:8a:e3:25:
8d:70:18:25:79:81:f9:b5:4c:68:f4:b7:f5:ee:4d:
16:05:3d:b0:54:84:6c:79:f7:a2:fe:b3:5c:b6:63:
0e:70:ad:f8:24:aa:53:42:2a:89:c9:a2:ea:e0:28:
ad:21:78:e4:78:17:4c:01:1d:8d:8f:01:a2:a6:b4:
11:c4:cf:80:88:7d:b5:e2:69:b4:39:26:b9:b9:b9:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:79:68:6C:32:B1:67:8E:4D:46:60:BD:64:2F:C1:B4:40:B4:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
X509v3 Authority Key Identifier:
keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:48a8:7800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:b6:c7:f3:bf:e6:19:35:70:8e:44:22:6c:d9:c1:fc:7b:66:
06:af:6c:cf:1c:21:b0:24:97:30:ec:c3:c7:5d:a2:84:ce:88:
23:82:39:60:c9:75:4b:ca:24:71:28:69:1b:28:08:cb:58:94:
7b:d8:87:5c:2f:27:0e:1c:bf:c8:71:f9:ee:5e:51:ef:24:aa:
dd:e7:d8:77:e0:f2:73:85:03:62:84:77:31:97:cb:6f:15:7b:
a9:47:cf:64:ca:7a:a8:9b:43:a5:b5:a0:83:ae:b6:8d:df:02:
d0:f9:31:7d:81:a4:61:08:4f:d6:88:98:46:d1:c8:c7:c5:27:
4a:e3:37:63:55:29:97:e8:7c:a2:6c:80:df:c1:75:7f:21:9e:
c3:89:36:1c:cf:2c:1d:f9:3f:c8:d8:2c:d1:ed:ec:16:e1:01:
c8:ee:39:35:d8:2d:47:3a:fb:70:fc:3b:ec:01:ed:cd:88:e5:
5f:08:19:b1:d1:96:53:39:f0:99:d1:da:7a:9c:0d:64:0a:b9:
14:39:94:58:ed:a8:d8:d5:35:17:4f:e4:14:63:c9:04:1c:a6:
6a:ad:15:ff:a8:ed:e5:94:52:db:ec:70:32:53:5f:33:b7:26:
ca:08:36:3b:b1:d2:b1:fc:5c:22:4a:ed:cb:ed:8d:0f:d8:24:
a2:13:4c:a6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdXwVgjYNlOPpFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj
NTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDY3ODk4N2EtZDNhYi00N2UyLThiYzQtY2E1Mzg5Y2I1NThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rMtPWXwbv3Q1SqEH4YA143NnOStvaic7MLX
1Dg4mo5T97JMfwdp/KeHTkR6fqCzZMCJ/3VXzrThKtuyhGwUalC7dc8Gknf1V9Qn
cP0JTDO8CnwIt4FaqjZE5m/PPhrsV33KGaRjxl8h0BxU8+MK7m7gfckcSbDfWttc
628xQurtFYIRf5tzYxt/1+M1Vu7+kDLZIik8kr3z810BpOyyubcb3XWiq1s2SUQW
md0o4qmK4yWNcBgleYH5tUxo9Lf17k0WBT2wVIRsefei/rNctmMOcK34JKpTQiqJ
yaLq4CitIXjkeBdMAR2NjwGiprQRxM+AiH214mm0OSa5ubmiDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD4zeWhsMrFnjk1GYL1kL8G0QLS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4
YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvOWQwYjZiNzItMDI0NS0z
YjVkLWI3ZGItNTk4NTE1NDUzNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw
OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy
YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk
MWU0MmM1N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIqHgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlrbH87/mGTVwjkQibNnB/HtmBq9szxwhsCSXMOzDx12ihM6II4I5
YMl1S8okcShpGygIy1iUe9iHXC8nDhy/yHH57l5R7ySq3efYd+Dyc4UDYoR3MZfL
bxV7qUfPZMp6qJtDpbWgg662jd8C0PkxfYGkYQhP1oiYRtHIx8UnSuM3Y1Upl+h8
omyA38F1fyGew4k2HM8sHfk/yNgs0e3sFuEByO45NdgtRzr7cPw77AHtzYjlXwgZ
sdGWUznwmdHaepwNZAq5FDmUWO2o2NU1F0/kFGPJBBymaq0V/6jt5ZRS2+xwMlNf
M7cmygg2O7HSsfxcIkrty+2ND9gkohNMpg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 18:36:39 2026 by rpki-client