
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fca3d95e-73d3-3409-90bd-00e745ce4d68.roa
File: fca3d95e-73d3-3409-90bd-00e745ce4d68.roa (raw, json)
Hash identifier: AaDHfrkhpnLprRVETtI8iecwkLrwtRtGVwEVGawbyAQ=
Subject key identifier: B1:8E:22:B4:08:2E:B1:50:3D:A2:54:F5:CA:38:C1:45:26:68:E6:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F6292C1BEC7B4B0A698F55300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fca3d95e-73d3-3409-90bd-00e745ce4d68.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 36624
IP address blocks: 2001:500:d937::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:c1:be:c7:b4:b0:a6:98:f5:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=219dc8c5-2ded-4934-907c-df7d6837a672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:62:c9:19:6b:a8:b9:d2:7f:cd:f7:0f:39:
c3:3f:13:99:8f:ad:68:88:78:bd:ca:3e:92:3b:4b:
8d:63:06:a7:c6:f0:c9:23:10:a0:3c:4a:2b:f9:d5:
b1:1a:e5:ab:46:1c:b4:08:be:34:72:94:3b:ca:68:
7a:42:32:2a:21:18:d3:a8:71:70:e8:7c:c4:73:66:
bc:89:f1:34:7b:80:02:1e:2e:51:7d:8f:ef:69:7a:
9a:58:08:4a:3b:ce:e3:88:69:6d:bf:41:9f:b9:8f:
aa:f1:25:e9:26:2b:1c:8f:42:c3:84:14:a4:20:1f:
78:26:0d:82:c9:94:79:62:34:d7:71:3a:b5:d8:65:
2d:68:10:57:76:1f:ec:eb:49:5a:e8:6a:cb:bc:e3:
ec:e2:81:22:cf:18:79:da:7d:dc:97:63:72:92:2e:
77:fb:54:1e:34:95:74:70:e3:cc:0e:56:ec:dd:2d:
f5:2d:0b:6d:b2:2b:4c:e5:eb:e4:49:28:b4:8c:da:
26:f2:6a:1d:e3:4f:ce:47:02:c4:81:64:3b:d7:b2:
6a:71:a0:ca:65:08:52:2c:01:86:47:dd:4e:c8:12:
51:56:a9:80:3c:9e:17:fb:ea:6b:33:bd:fa:79:33:
cd:4c:7a:d7:04:ef:22:c6:41:15:83:8a:eb:a8:d1:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:22:B4:08:2E:B1:50:3D:A2:54:F5:CA:38:C1:45:26:68:E6:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fca3d95e-73d3-3409-90bd-00e745ce4d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:d937::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d5:ab:43:e4:e8:28:7c:c9:a0:29:a0:63:b7:aa:76:10:af:
27:2d:ad:fd:f8:a7:00:56:7a:8b:d5:93:29:aa:7d:86:f5:cf:
9c:68:73:4f:b5:aa:42:c8:13:9c:39:f6:17:03:02:90:87:60:
6e:d9:e3:5b:d0:62:bb:b2:7c:d6:33:bb:46:32:5f:21:48:cb:
05:b7:5b:70:74:5c:c1:65:a5:ad:43:d0:08:c2:f7:2f:a7:23:
09:b8:9a:de:7a:d7:fd:e4:c7:1b:9b:c9:51:22:c0:cd:51:97:
66:e5:ef:8c:19:20:a5:34:41:e0:da:3b:2e:2f:d6:cf:76:3f:
39:11:51:28:cd:77:1b:9c:67:0a:55:6a:5d:0e:93:b9:8c:2f:
fa:b1:72:42:89:50:76:a0:0d:f9:f8:d5:fd:cf:22:46:fe:9e:
34:be:a3:dc:e7:d7:51:61:80:51:08:6b:94:30:28:ed:3a:9a:
d6:e6:1d:40:98:9f:3b:86:10:b0:e6:82:6d:4c:88:40:0f:f9:
28:44:9b:6b:51:7e:1b:f8:bc:c4:22:b8:86:86:b2:7b:6a:b8:
de:65:b9:e5:cf:12:37:23:29:4d:05:35:df:9e:74:89:d1:9d:
9f:50:52:04:72:71:0f:06:96:56:82:8a:be:a6:27:97:0a:26:
e7:e4:77:1a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iksG+x7Swppj1UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MjE5ZGM4YzUtMmRlZC00OTM0LTkwN2MtZGY3ZDY4MzdhNjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprtiyRlrqLnSf833DznDPxOZj61oiHi9yj6S
O0uNYwanxvDJIxCgPEor+dWxGuWrRhy0CL40cpQ7ymh6QjIqIRjTqHFw6HzEc2a8
ifE0e4ACHi5RfY/vaXqaWAhKO87jiGltv0GfuY+q8SXpJiscj0LDhBSkIB94Jg2C
yZR5YjTXcTq12GUtaBBXdh/s60la6GrLvOPs4oEizxh52n3cl2Nyki53+1QeNJV0
cOPMDlbs3S31LQttsitM5evkSSi0jNom8mod40/ORwLEgWQ717JqcaDKZQhSLAGG
R91OyBJRVqmAPJ4X++prM736eTPNTHrXBO8ixkEVg4rrqNHk4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLGOIrQILrFQPaJU9co4wUUmaOYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmNhM2Q5NWUtNzNkMy0z
NDA5LTkwYmQtMDBlNzQ1Y2U0ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3Vq0Pk6Ch8yaApoGO3qnYQryctrf34pwBWeovVkymqfYb1z5xo
c0+1qkLIE5w59hcDApCHYG7Z41vQYruyfNYzu0YyXyFIywW3W3B0XMFlpa1D0AjC
9y+nIwm4mt561/3kxxubyVEiwM1Rl2bl74wZIKU0QeDaOy4v1s92PzkRUSjNdxuc
ZwpVal0Ok7mML/qxckKJUHagDfn41f3PIkb+njS+o9zn11FhgFEIa5QwKO06mtbm
HUCYnzuGELDmgm1MiEAP+ShEm2tRfhv4vMQiuIaGsntquN5lueXPEjcjKU0FNd+e
dInRnZ9QUgRycQ8GllaCir6mJ5cKJufkdxo=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:40:22 2026 by rpki-client