
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa
File: cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa (raw, json)
Hash identifier: uecYFDfRvBWiDQdQsksvEbtGa5Ud9sRp+6RXTNNdp9s=
Subject key identifier: E9:46:D7:13:AD:60:FE:AE:E0:13:96:4E:F1:D2:D1:B2:14:FB:4C:6B
Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial: 010D0C9F4328584F655D75D60B54897DA1065280
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 2701
IP address blocks: 2001:49d0:9000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:75:d6:0b:54:89:7d:a1:06:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=c9eba0a8-25bc-4076-89e2-05be3de6cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:46:6a:60:b5:e9:96:0b:19:0e:62:33:b8:
c8:46:71:2b:f7:14:e9:91:ab:82:53:e0:c0:6d:f2:
6e:f0:d0:7c:26:20:12:07:c2:1f:b8:ee:df:42:03:
96:64:53:17:30:85:f7:39:82:58:f2:b8:cd:5d:26:
72:09:29:4f:59:56:0e:c4:cd:8d:dd:ca:d7:b4:0d:
02:b8:f1:c6:d0:a2:a2:94:76:ea:d0:81:e9:90:9d:
8e:54:57:60:e1:ac:93:ae:23:c1:00:ec:77:37:4e:
57:53:50:0a:0b:2e:3d:53:2f:2a:b9:c8:37:52:ef:
dc:15:5a:07:85:38:e6:95:0b:8c:69:96:03:a1:2f:
0e:03:2d:b9:e8:57:eb:92:58:1c:b0:3c:85:ae:b3:
8e:56:b3:d9:4d:ba:61:c8:2f:33:0b:7c:ed:f6:c5:
73:b6:44:14:21:b7:cc:cd:36:f6:0d:0e:b7:ac:89:
f8:5a:f7:0b:c5:44:b8:72:34:27:40:30:88:cc:ee:
2f:8d:c0:6d:df:d1:95:e9:69:2e:04:1e:71:a7:28:
e1:ac:88:7a:45:f2:27:f6:8a:40:eb:d0:8a:b8:fa:
c3:43:cf:c1:ee:47:ca:a0:25:cd:aa:99:22:0e:cc:
50:ec:a2:a5:09:1d:02:e4:84:c2:bb:6f:fe:9d:ab:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:D7:13:AD:60:FE:AE:E0:13:96:4E:F1:D2:D1:B2:14:FB:4C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
X509v3 Authority Key Identifier:
keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:49d0:9000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ee:69:0d:3f:36:20:5c:db:b3:7b:81:25:85:d4:be:35:cb:
58:8b:c1:3e:cf:a8:f7:a8:4f:82:53:aa:fa:26:42:2c:9f:68:
64:5c:5f:09:09:2f:0e:45:cb:88:8f:54:04:6b:b6:f2:72:32:
c0:92:c2:f8:03:d3:01:aa:c6:73:6f:59:9f:76:34:a8:3b:c2:
13:27:be:59:0d:f4:90:fd:34:b1:9b:b5:f1:1b:e2:2f:df:a8:
f2:1d:be:12:f5:1f:84:f3:86:ea:43:0a:c4:3f:84:cb:6a:19:
e1:81:7f:7d:eb:13:54:b7:96:0d:b5:98:d5:c9:57:cf:6d:75:
cb:40:34:fb:23:f8:a1:98:c9:fc:dd:b5:f9:7a:03:55:2d:13:
0d:4b:9e:b7:59:ed:0b:39:0d:ea:f1:46:aa:a1:ae:e3:0e:2f:
47:1a:c8:ca:49:7e:f7:12:f5:35:f6:4a:6b:9e:c9:e4:a8:80:
4e:a2:97:71:57:f8:75:5d:8b:03:bb:de:37:b8:c3:fe:1c:91:
a3:6f:11:8f:fb:ec:1f:a5:75:94:92:51:1c:19:7c:e3:2a:ff:
9d:5f:e3:4b:94:fc:4c:60:33:b1:74:9e:07:ca:69:d8:16:95:
03:37:db:cd:41:a4:33:ce:cb:9f:cd:9c:2e:6c:ea:6c:3e:00:
dd:9d:44:23
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9lXXXWC1SJfaEGUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4
YWIxMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
YzllYmEwYTgtMjViYy00MDc2LTg5ZTItMDViZTNkZTZjZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh9GamC16ZYLGQ5iM7jIRnEr9xTpkauCU+DA
bfJu8NB8JiASB8IfuO7fQgOWZFMXMIX3OYJY8rjNXSZyCSlPWVYOxM2N3crXtA0C
uPHG0KKilHbq0IHpkJ2OVFdg4ayTriPBAOx3N05XU1AKCy49Uy8qucg3Uu/cFVoH
hTjmlQuMaZYDoS8OAy256FfrklgcsDyFrrOOVrPZTbphyC8zC3zt9sVztkQUIbfM
zTb2DQ63rIn4WvcLxUS4cjQnQDCIzO4vjcBt39GV6WkuBB5xpyjhrIh6RfIn9opA
69CKuPrDQ8/B7kfKoCXNqpkiDsxQ7KKlCR0C5ITCu2/+nauGTQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOlG1xOtYP6u4BOWTvHS0bIU+0xrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx
MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvY2IzZDhmMWEtODZhOS0z
OWE1LWFiYjUtMGU0YzE1ZGQzZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1
ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky
OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk
MWI5MjhhYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCIAFJ0JAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiO5pDT82IFzbs3uBJYXUvjXLWIvBPs+o96hPglOq+iZCLJ9oZFxf
CQkvDkXLiI9UBGu28nIywJLC+APTAarGc29Zn3Y0qDvCEye+WQ30kP00sZu18Rvi
L9+o8h2+EvUfhPOG6kMKxD+Ey2oZ4YF/fesTVLeWDbWY1clXz211y0A0+yP4oZjJ
/N21+XoDVS0TDUuet1ntCzkN6vFGqqGu4w4vRxrIykl+9xL1NfZKa57J5KiATqKX
cVf4dV2LA7veN7jD/hyRo28Rj/vsH6V1lJJRHBl84yr/nV/jS5T8TGAzsXSeB8pp
2BaVAzfbzUGkM87Ln82cLmzqbD4A3Z1EIw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 19:10:44 2026 by rpki-client