
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff91514e-60ed-34f3-8220-e7611cdc1898.roa
File: ff91514e-60ed-34f3-8220-e7611cdc1898.roa (raw, json)
Hash identifier: ipL1hOIyZtxM84epqSnCitRCLpXdQkcF4Lworf0P1Xg=
Subject key identifier: 6B:2E:4C:3C:7B:AD:0B:2D:CD:E4:53:A7:06:69:A3:D4:5B:1E:DD:28
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497436B12D5F02C545784A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff91514e-60ed-34f3-8220-e7611cdc1898.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396583
IP address blocks: 2001:501:8a29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:36:b1:2d:5f:02:c5:45:78:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=978309fc-52a7-4abb-9376-8ef98bff9999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:4f:c5:32:c1:5c:4e:a1:d3:88:f6:4c:43:
b1:93:0a:ef:cb:d4:90:aa:85:c1:75:1d:b1:1f:29:
ec:5f:2d:64:45:4b:da:bd:80:fb:f7:9b:45:dc:60:
0d:f0:df:5a:b2:f3:84:d6:2d:b4:aa:c4:99:67:6d:
b1:30:7b:25:c1:8b:fc:83:49:40:19:44:36:b5:6d:
c6:96:e3:b6:e2:e3:67:fe:6b:4a:32:10:7b:e9:f9:
ab:f6:e3:76:81:5b:e5:cb:51:61:e7:5c:56:f8:4b:
40:95:be:a5:1d:11:03:00:26:4c:c8:09:f8:c5:2c:
cd:f6:f1:05:bb:77:ec:f3:ce:85:e5:4a:93:97:04:
2b:46:98:33:51:76:17:91:fd:10:c7:28:34:79:e8:
9f:07:5d:2b:55:41:84:d7:5b:2a:6f:b3:ff:32:2e:
16:8d:76:c6:33:ae:c1:dd:ce:3e:18:4e:3f:e7:77:
90:77:9b:89:3a:b7:a1:ba:59:64:02:62:1d:7d:53:
42:50:17:7b:75:d3:2d:7c:14:43:6d:ce:9e:a0:ba:
db:20:04:66:38:3b:19:36:c0:ec:82:06:69:a0:0e:
68:52:bb:2c:59:68:44:5f:82:a3:73:4a:5c:f3:fb:
e6:f4:d0:3a:dd:ba:4f:bb:a0:e7:e4:f5:90:01:0f:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2E:4C:3C:7B:AD:0B:2D:CD:E4:53:A7:06:69:A3:D4:5B:1E:DD:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff91514e-60ed-34f3-8220-e7611cdc1898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:71:cf:92:44:1a:39:4f:32:d1:cc:d3:e8:12:25:85:ed:32:
f0:b9:13:c3:14:b4:a1:5d:84:88:b8:7a:9a:5c:19:39:1d:92:
84:48:81:99:7b:1e:90:5a:84:1e:d8:6c:f5:90:ff:fb:53:ba:
a8:06:10:5f:13:15:0f:94:8b:e8:49:01:df:a1:93:95:11:c8:
f0:0e:53:e5:29:bc:81:00:35:45:70:7c:c0:dc:62:f4:30:7f:
c6:35:b1:24:43:1f:88:19:f7:30:9a:af:fe:98:36:6d:bf:23:
5b:36:87:79:9a:03:16:2d:d0:52:90:70:b3:cd:5d:2f:62:63:
be:dc:5e:84:e9:cb:f3:ce:95:52:1d:26:fb:a7:17:9c:69:d5:
4f:25:62:e8:e5:d7:92:12:51:d3:47:86:ba:b7:3d:77:54:bb:
81:5e:72:15:f6:d1:f3:c9:f6:7b:f7:a1:37:5b:6a:d0:a6:06:
03:97:f4:cc:1a:58:37:a5:93:86:ab:cb:94:73:00:1d:74:bb:
3e:ce:54:69:a9:55:a3:e3:8a:9f:0f:7a:f8:b1:06:51:73:60:
50:36:7d:36:0c:68:53:b8:20:a0:31:c2:dd:77:66:e0:6b:3d:
36:64:99:77:6e:64:19:c8:96:7c:b5:2e:c5:66:5d:18:d3:de:
79:f6:00:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdDaxLV8CxUV4SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTc4MzA5ZmMtNTJhNy00YWJiLTkzNzYtOGVmOThiZmY5OTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ZPxTLBXE6h04j2TEOxkwrvy9SQqoXBdR2x
HynsXy1kRUvavYD795tF3GAN8N9asvOE1i20qsSZZ22xMHslwYv8g0lAGUQ2tW3G
luO24uNn/mtKMhB76fmr9uN2gVvly1Fh51xW+EtAlb6lHREDACZMyAn4xSzN9vEF
u3fs886F5UqTlwQrRpgzUXYXkf0Qxyg0eeifB10rVUGE11sqb7P/Mi4WjXbGM67B
3c4+GE4/53eQd5uJOrehullkAmIdfVNCUBd7ddMtfBRDbc6eoLrbIARmODsZNsDs
ggZpoA5oUrssWWhEX4Kjc0pc8/vm9NA63bpPu6Dn5PWQAQ9YvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGsuTDx7rQstzeRTpwZpo9RbHt0oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY5MTUxNGUtNjBlZC0z
NGYzLTgyMjAtZTc2MTFjZGMxODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI5xz5JEGjlPMtHM0+gSJYXtMvC5E8MUtKFdhIi4eppcGTkdkoRI
gZl7HpBahB7YbPWQ//tTuqgGEF8TFQ+Ui+hJAd+hk5URyPAOU+UpvIEANUVwfMDc
YvQwf8Y1sSRDH4gZ9zCar/6YNm2/I1s2h3maAxYt0FKQcLPNXS9iY77cXoTpy/PO
lVIdJvunF5xp1U8lYujl15ISUdNHhrq3PXdUu4FechX20fPJ9nv3oTdbatCmBgOX
9MwaWDelk4ary5RzAB10uz7OVGmpVaPjip8PevixBlFzYFA2fTYMaFO4IKAxwt13
ZuBrPTZkmXduZBnIlny1LsVmXRjT3nn2ADc=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:14:08 2026 by rpki-client