
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f1f6d9-8723-3de0-86ff-4a2093bf9cd0.roa
File: 87f1f6d9-8723-3de0-86ff-4a2093bf9cd0.roa (raw, json)
Hash identifier: nDHo7ce8UHuoZSEBd3kcYkwyQA+nK5WOWGHNmi41vL0=
Subject key identifier: F6:5C:CF:2E:06:A2:03:D9:01:B3:C1:02:AB:2C:F1:85:88:CB:46:C0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EB57C4E0D734880EB963CE66B
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f1f6d9-8723-3de0-86ff-4a2093bf9cd0.roa
Signing time: Mon 03 Aug 2026 01:00:11 +0000
ROA not before: Mon 03 Aug 2026 01:00:11 +0000
ROA not after: Sun 01 Nov 2026 01:00:11 +0000
asID: 396582
IP address blocks: 2001:500:856e::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b5:7c:4e:0d:73:48:80:eb:96:3c:e6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 3 01:00:11 2026 GMT
Not After : Nov 1 01:00:11 2026 GMT
Subject: CN=7f78cfcb-5d4a-4798-bf51-1a6389f9becd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:5a:a2:11:fb:5c:15:ec:61:8a:eb:52:9a:
6c:bb:6b:b8:23:63:74:8e:be:6d:9a:56:7e:12:8c:
19:af:56:60:1b:86:44:12:24:79:2f:1d:5a:3d:09:
60:c0:de:ff:74:72:94:6b:cf:df:b7:22:93:2b:02:
11:9f:4f:96:68:8d:7e:ff:c8:d7:5a:10:8c:20:9d:
6a:62:f0:66:1c:90:cf:c3:58:d7:65:7c:b4:ce:b2:
35:91:4e:b4:0e:27:07:1c:8d:28:9d:5d:e3:f0:02:
ee:4d:82:1d:39:38:6c:f0:e1:29:a1:c0:b0:c5:07:
8c:0f:25:90:b3:e5:37:5a:1f:ad:ff:1b:c4:18:e8:
a0:84:1a:6c:c2:77:3f:a6:ee:cc:71:d9:4a:03:1f:
17:65:6b:20:68:47:24:b8:82:df:3b:4b:37:83:e3:
73:44:91:4c:50:c6:1f:da:77:cd:47:ea:d6:77:e4:
cf:7c:ee:55:47:68:86:36:2b:aa:dd:3b:6e:bb:7b:
b9:93:09:af:5d:21:58:a0:34:c7:df:37:06:4a:f5:
8d:62:a6:93:7e:cf:ee:cc:e8:70:dd:22:2a:25:89:
2c:f1:82:a0:9d:cd:e1:6a:6e:1f:52:a8:d2:57:f1:
c4:6e:89:20:80:2e:f4:e2:a8:87:57:86:41:b4:c8:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:CF:2E:06:A2:03:D9:01:B3:C1:02:AB:2C:F1:85:88:CB:46:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87f1f6d9-8723-3de0-86ff-4a2093bf9cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:856e:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:bd:fe:b7:f0:47:17:60:37:09:d4:2c:ca:83:9c:1e:84:9b:
19:e0:bd:ec:dd:7b:c6:bb:fb:96:68:f5:b6:be:e4:c1:90:8c:
b8:64:45:8c:7b:35:34:3e:41:39:3d:e8:06:b5:bb:c8:63:34:
e8:4c:b6:29:79:9e:6a:f1:2a:1f:92:c9:41:e5:a7:2c:ab:22:
b6:09:d7:55:b3:bb:af:fc:b0:2d:42:6b:83:4b:1a:d1:d8:dc:
71:bb:a5:3d:dc:ae:ae:d4:af:c7:99:30:1f:dd:02:9a:59:dc:
d4:7b:46:6e:50:35:9a:1c:c0:b0:2b:0e:09:8e:55:81:36:a4:
f2:55:2c:1c:ff:24:ee:4e:be:4e:73:a2:90:01:93:12:82:bd:
25:6e:00:ef:3f:b9:d6:95:0e:5f:c0:85:15:50:52:ae:41:02:
08:0a:9f:75:27:16:22:a7:23:b8:58:4c:63:fa:54:d3:7a:1c:
74:19:38:05:3c:c3:bd:47:f0:3a:9c:e1:ca:1b:ea:d1:01:40:
2b:5b:f0:5f:36:d8:5b:35:f0:a0:19:64:11:56:17:e6:b4:37:
42:c1:c3:0e:d5:57:9a:df:a5:1b:ef:46:a3:b8:b2:3e:47:a6:
85:5a:65:74:18:b8:66:aa:5f:be:96:be:a6:28:d8:b5:7a:6a:
01:b4:62:b7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE61fE4Nc0iA65Y85mswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk
N2Y3OGNmY2ItNWQ0YS00Nzk4LWJmNTEtMWE2Mzg5ZjliZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxVaohH7XBXsYYrrUppsu2u4I2N0jr5tmlZ+
EowZr1ZgG4ZEEiR5Lx1aPQlgwN7/dHKUa8/ftyKTKwIRn0+WaI1+/8jXWhCMIJ1q
YvBmHJDPw1jXZXy0zrI1kU60DicHHI0onV3j8ALuTYIdOThs8OEpocCwxQeMDyWQ
s+U3Wh+t/xvEGOighBpswnc/pu7McdlKAx8XZWsgaEckuILfO0s3g+NzRJFMUMYf
2nfNR+rWd+TPfO5VR2iGNiuq3Ttuu3u5kwmvXSFYoDTH3zcGSvWNYqaTfs/uzOhw
3SIqJYks8YKgnc3ham4fUqjSV/HEbokggC704qiHV4ZBtMh/YQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPZczy4GogPZAbPBAqss8YWIy0bAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdmMWY2ZDktODcyMy0z
ZGUwLTg2ZmYtNGEyMDkzYmY5Y2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCXvf638EcXYDcJ1CzKg5wehJsZ4L3s3XvGu/uW
aPW2vuTBkIy4ZEWMezU0PkE5PegGtbvIYzToTLYpeZ5q8SofkslB5acsqyK2CddV
s7uv/LAtQmuDSxrR2Nxxu6U93K6u1K/HmTAf3QKaWdzUe0ZuUDWaHMCwKw4JjlWB
NqTyVSwc/yTuTr5Oc6KQAZMSgr0lbgDvP7nWlQ5fwIUVUFKuQQIICp91JxYipyO4
WExj+lTTehx0GTgFPMO9R/A6nOHKG+rRAUArW/BfNthbNfCgGWQRVhfmtDdCwcMO
1Vea36Ub70ajuLI+R6aFWmV0GLhmql++lr6mKNi1emoBtGK3
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:23 2026 by rpki-client