
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e4b84c-7e8a-3ede-99fa-db4292882933.roa
File: 20e4b84c-7e8a-3ede-99fa-db4292882933.roa (raw, json)
Hash identifier: 407hVNWjNt+08r+KrRgHWHxr269CAmrGggmc5q6g6NQ=
Subject key identifier: 56:80:E5:B2:3C:5F:2D:95:E1:08:DA:61:AC:CF:98:99:79:53:B7:DF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549DA8845FD3A440792F6D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e4b84c-7e8a-3ede-99fa-db4292882933.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 40647
IP address blocks: 2001:503:d2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:a8:84:5f:d3:a4:40:79:2f:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=c423760e-e6ee-4844-8e44-4f98b0def139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:cd:6a:74:91:d2:c5:1f:fe:a7:81:58:9b:
d0:d9:bc:1b:3c:b2:01:b4:ff:c0:73:13:4f:53:e6:
23:25:a3:1a:cc:d8:b4:f5:56:47:99:5c:35:a1:7e:
9f:dc:79:fb:89:5c:1f:a8:74:92:c4:33:34:b6:b8:
a3:7a:f5:60:63:0b:b0:e7:50:0f:56:ba:85:43:de:
52:a3:85:b4:a6:3c:a2:9a:1d:38:b6:60:3d:55:14:
e8:a4:1e:39:c5:fa:c1:00:96:f0:1d:00:26:46:d2:
3b:33:96:03:81:35:65:f8:09:0e:c2:8e:bd:46:3b:
70:5a:65:b7:46:b4:2a:e4:3d:8a:d5:1f:a1:85:10:
8c:dd:5c:c1:b4:6c:c5:75:e5:7e:d1:30:74:2c:5a:
46:2c:01:17:db:a7:36:78:4b:02:d4:92:3c:50:a7:
8a:e2:6b:41:32:cf:7a:0b:29:ad:7f:b9:33:cc:ea:
20:93:37:76:15:77:c9:4f:97:17:d9:61:71:f7:6e:
e1:a0:70:19:bd:24:7b:95:ce:84:7e:13:2e:c6:46:
2b:96:8b:67:f3:77:a8:d6:0f:67:82:8f:2d:1a:fe:
e9:26:d7:80:b1:81:ed:96:1c:6b:ee:f2:23:04:79:
71:e8:af:24:be:f0:1d:96:25:b9:8f:07:05:6e:ca:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:80:E5:B2:3C:5F:2D:95:E1:08:DA:61:AC:CF:98:99:79:53:B7:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e4b84c-7e8a-3ede-99fa-db4292882933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:93:40:78:f4:27:ef:28:b9:52:87:bc:c1:ff:63:7b:4d:12:
bc:10:c2:2e:64:e9:6e:18:14:a1:a8:fb:75:15:1a:1e:16:c2:
0b:74:6e:0a:2e:91:52:32:b0:61:03:09:43:af:a7:68:8f:78:
9d:8f:ea:14:cb:17:e4:34:f1:40:73:87:da:13:0f:2d:9e:12:
fc:b0:a4:2f:76:39:7b:c6:0a:50:ab:ee:3b:3a:91:11:73:f5:
22:31:b0:0b:51:f3:44:4d:cd:5a:28:6a:41:22:9d:78:d4:d4:
bb:d8:9e:f8:46:12:eb:4b:be:5e:87:db:f0:83:cd:96:c9:0c:
4d:e1:aa:ef:77:37:de:cb:7e:19:ca:1d:56:b3:88:c0:e7:73:
06:07:ff:ea:61:69:44:c5:df:c1:f9:0b:10:d1:dc:67:aa:f6:
66:16:6d:00:7d:b5:c0:56:55:ee:a2:75:45:01:86:b8:ab:86:
15:25:37:44:32:33:8c:0c:ee:73:f0:47:69:4b:29:9e:a7:d2:
79:39:2e:74:8c:d2:5a:2c:b1:9e:a5:8a:fd:e4:22:03:b3:97:
e5:9a:66:51:d9:f4:2a:5a:6f:df:3e:fb:58:55:e3:8f:a7:d8:
7e:d4:a6:8e:17:52:66:44:9e:6c:dc:59:ce:ae:ef:0d:4f:a5:
70:cf:63:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnaiEX9OkQHkvbUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
YzQyMzc2MGUtZTZlZS00ODQ0LThlNDQtNGY5OGIwZGVmMTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvabNanSR0sUf/qeBWJvQ2bwbPLIBtP/AcxNP
U+YjJaMazNi09VZHmVw1oX6f3Hn7iVwfqHSSxDM0trijevVgYwuw51APVrqFQ95S
o4W0pjyimh04tmA9VRTopB45xfrBAJbwHQAmRtI7M5YDgTVl+AkOwo69RjtwWmW3
RrQq5D2K1R+hhRCM3VzBtGzFdeV+0TB0LFpGLAEX26c2eEsC1JI8UKeK4mtBMs96
Cymtf7kzzOogkzd2FXfJT5cX2WFx927hoHAZvSR7lc6EfhMuxkYrlotn83eo1g9n
go8tGv7pJteAsYHtlhxr7vIjBHlx6K8kvvAdliW5jwcFbsoGYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFaA5bI8Xy2V4QjaYazPmJl5U7ffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjBlNGI4NGMtN2U4YS0z
ZWRlLTk5ZmEtZGI0MjkyODgyOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+TQHj0J+8ouVKHvMH/Y3tNErwQwi5k6W4YFKGo+3UVGh4Wwgt0
bgoukVIysGEDCUOvp2iPeJ2P6hTLF+Q08UBzh9oTDy2eEvywpC92OXvGClCr7js6
kRFz9SIxsAtR80RNzVooakEinXjU1LvYnvhGEutLvl6H2/CDzZbJDE3hqu93N97L
fhnKHVaziMDncwYH/+phaUTF38H5CxDR3Geq9mYWbQB9tcBWVe6idUUBhrirhhUl
N0QyM4wM7nPwR2lLKZ6n0nk5LnSM0lossZ6liv3kIgOzl+WaZlHZ9Cpab98++1hV
44+n2H7Upo4XUmZEnmzcWc6u7w1PpXDPY8w=
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:32:26 2026 by rpki-client