
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa
File: afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa (raw, json)
Hash identifier: RUUfLMWkZUZeACwAsccTuAZj5Fc0v9j3OJxvgRH2aOQ=
Subject key identifier: 96:BA:DC:3E:5A:D6:A1:0F:75:28:6C:8A:66:4C:EA:F2:19:54:25:A3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4F083277A5C217A7F2F5BCA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 396550
IP address blocks: 2001:503:231d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:32:77:a5:c2:17:a7:f2:f5:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=80ec3ee3-1bd2-42ea-bd49-ce4d97e3b8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:e4:59:11:f7:08:a5:4a:41:5d:f7:f9:1f:
f6:48:9b:7d:0c:a3:1c:f7:cb:f8:d9:23:2b:66:67:
97:c3:31:76:85:b2:de:c4:5e:73:f0:83:e3:55:7b:
21:18:d4:fc:5b:09:0e:ea:64:36:bc:ed:91:49:57:
8d:c3:63:7a:04:5a:af:e2:fb:23:40:02:11:20:80:
8a:01:e7:dd:a4:29:56:41:b2:e3:fb:f8:d9:3e:f0:
84:80:ea:56:8d:04:8c:f0:5a:f8:0f:52:6f:37:dd:
7f:6b:2f:ab:28:41:f3:2a:8c:d3:2a:3e:7c:02:41:
91:b3:a4:db:f1:b0:6f:c4:6a:11:ac:63:08:0e:4a:
e4:13:84:e9:d4:59:0c:c4:43:8e:d5:60:9d:83:03:
d1:73:91:47:d2:54:82:15:1e:06:77:da:02:40:4b:
84:d5:6a:5b:75:3d:ec:5a:13:3f:2e:43:2c:aa:4e:
c9:71:fe:1f:47:8f:63:aa:29:02:0f:b9:b5:a6:2e:
bb:e9:d4:4e:17:d3:72:d1:5c:76:64:69:c8:25:a5:
fe:06:3b:0c:03:61:02:0c:cc:ec:e0:a8:68:0d:2d:
dd:e3:95:9f:4f:82:0e:99:8d:d9:0d:5c:7b:6a:f2:
e8:f7:89:53:54:bf:bc:48:df:0b:f4:e3:43:77:b1:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:DC:3E:5A:D6:A1:0F:75:28:6C:8A:66:4C:EA:F2:19:54:25:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:231d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b7:b7:d8:bd:f3:9a:9c:c1:4b:1c:bf:19:1c:d3:11:71:6c:
33:9f:2b:36:65:65:6d:33:c2:72:12:d4:31:b0:8c:94:62:7c:
e1:a2:82:17:88:16:26:56:6a:28:bd:b8:31:94:70:15:43:35:
17:c2:ac:cc:e8:4b:4c:1c:38:8c:8e:7c:aa:e0:84:97:76:ca:
1c:a7:49:04:ce:8c:d8:23:6b:1e:62:96:3e:43:05:93:f7:c2:
53:e4:62:a7:56:73:aa:25:17:59:cf:d2:d0:ce:1b:28:b7:97:
5f:0e:2d:ce:8c:c4:92:71:62:b3:a7:e6:8e:53:63:09:58:40:
bd:9c:d0:da:17:35:48:53:61:02:d6:ed:d0:ae:6b:42:b5:60:
74:be:b4:bb:46:76:39:47:c4:56:02:8c:7e:79:3b:c8:0b:7f:
76:18:04:2d:e8:0b:76:75:6d:32:d6:a9:b8:3d:44:cd:48:d2:
86:96:90:95:85:48:67:a1:f0:e2:2d:fd:70:a4:59:11:7b:b6:
9d:b1:e8:6b:b2:07:54:62:6c:b8:be:04:da:d4:45:c4:83:ab:
7f:62:c7:ca:56:46:27:46:cb:3f:de:50:2d:d3:7a:29:f1:1a:
ba:18:41:53:30:e5:4f:7c:db:32:14:d8:e4:df:5a:6a:b3:9d:
eb:e8:d1:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCDJ3pcIXp/L1vKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ODBlYzNlZTMtMWJkMi00MmVhLWJkNDktY2U0ZDk3ZTNiOGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWnkWRH3CKVKQV33+R/2SJt9DKMc98v42SMr
ZmeXwzF2hbLexF5z8IPjVXshGNT8WwkO6mQ2vO2RSVeNw2N6BFqv4vsjQAIRIICK
AefdpClWQbLj+/jZPvCEgOpWjQSM8Fr4D1JvN91/ay+rKEHzKozTKj58AkGRs6Tb
8bBvxGoRrGMIDkrkE4Tp1FkMxEOO1WCdgwPRc5FH0lSCFR4Gd9oCQEuE1WpbdT3s
WhM/LkMsqk7Jcf4fR49jqikCD7m1pi676dROF9Ny0Vx2ZGnIJaX+BjsMA2ECDMzs
4KhoDS3d45WfT4IOmY3ZDVx7avLo94lTVL+8SN8L9ONDd7ENzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJa63D5a1qEPdShsimZM6vIZVCWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZjMzE0OGUtYjliYi0z
MTJlLTk4ZWUtOGZlOWNmNWZjZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB+3t9i985qcwUscvxkc0xFxbDOfKzZlZW0zwnIS1DGwjJRifOGi
gheIFiZWaii9uDGUcBVDNRfCrMzoS0wcOIyOfKrghJd2yhynSQTOjNgjax5ilj5D
BZP3wlPkYqdWc6olF1nP0tDOGyi3l18OLc6MxJJxYrOn5o5TYwlYQL2c0NoXNUhT
YQLW7dCua0K1YHS+tLtGdjlHxFYCjH55O8gLf3YYBC3oC3Z1bTLWqbg9RM1I0oaW
kJWFSGeh8OIt/XCkWRF7tp2x6GuyB1RibLi+BNrURcSDq39ix8pWRidGyz/eUC3T
einxGroYQVMw5U982zIU2OTfWmqznevo0dM=
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:26:33 2026 by rpki-client