
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06c8f791-42a2-3e28-8044-418f42370982.roa
File: 06c8f791-42a2-3e28-8044-418f42370982.roa (raw, json)
Hash identifier: Px8kdwihX8/laaPB71Mkx7aSVC5JPmQImKNT1RfBnZ4=
Subject key identifier: 0B:B6:FB:5F:34:10:CE:D5:39:19:66:24:B8:EA:AA:DE:22:5B:F4:BC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D2A74DFC1175CD32348C78500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06c8f791-42a2-3e28-8044-418f42370982.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 396546
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:df:c1:17:5c:d3:23:48:c7:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=005abfc8-6f47-4908-b666-03a1c300956c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:5a:bf:2d:f7:5c:1a:0a:44:61:1b:29:66:
a5:88:17:dd:7d:ab:87:0d:40:9f:10:82:72:9b:70:
87:b6:e3:23:f7:76:f1:9b:62:5f:4e:27:87:1a:da:
a4:fa:57:f5:c2:a0:7d:d8:f3:60:c2:45:fe:55:1f:
50:32:3b:55:59:25:4d:cf:05:85:4b:76:7a:60:c9:
22:4f:fa:e4:d1:8b:9d:96:74:b1:6b:54:63:fa:ca:
35:84:39:ed:56:71:72:c5:4f:a3:e0:28:b0:d9:0e:
62:c4:73:f7:0a:a1:c4:5b:3f:79:a2:b5:7a:9f:c7:
ad:4c:9e:6d:da:72:fc:f4:df:b9:65:51:e3:ab:d1:
3c:e8:c7:08:4b:75:34:00:ad:16:8e:96:28:58:c1:
75:8f:c6:87:35:c9:19:bb:15:13:69:1f:ee:af:5f:
7f:83:0d:29:8e:cd:9b:42:93:9e:e2:6b:cf:29:ea:
03:4b:aa:a1:a1:ce:39:0c:31:c0:b1:3d:c9:54:c9:
2f:36:1a:66:d4:5b:9d:d0:51:48:2b:85:f8:4b:ab:
f4:32:e4:4c:7a:81:13:66:6b:45:24:b6:bd:dc:ab:
31:3c:4d:71:61:e5:d3:6d:0b:d5:f1:8e:56:67:21:
3f:3b:af:18:b6:2c:3d:b3:b5:42:d7:fe:c4:af:e8:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:FB:5F:34:10:CE:D5:39:19:66:24:B8:EA:AA:DE:22:5B:F4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06c8f791-42a2-3e28-8044-418f42370982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2c:9a:da:d6:87:aa:21:82:44:b0:4d:31:b1:32:d5:1e:0f:
57:f4:0d:e7:23:a2:d7:b8:8a:14:d6:7b:5d:11:65:16:e2:ca:
77:cf:42:e7:73:85:60:85:b2:32:a2:72:d9:9f:de:98:61:93:
89:7b:b4:fb:3f:44:9d:06:22:c1:a9:d3:a9:39:38:a5:0f:cc:
5f:2d:df:56:0b:34:a1:19:72:c2:86:d1:c2:54:e8:60:c1:21:
88:7f:9a:24:aa:d4:fa:9a:cc:46:1a:9b:30:a8:9e:98:91:e8:
f6:93:ed:81:d7:9c:30:08:6b:89:52:85:0e:a1:81:c1:8f:4b:
99:c8:b4:ac:ad:01:4b:6c:af:0b:7d:54:b8:94:ac:8a:c3:80:
32:5d:32:ff:9a:07:8a:31:32:06:27:1f:0d:6e:2a:92:c4:f6:
81:99:8a:9f:f6:fe:af:bc:a0:8b:e2:fa:b8:93:b8:87:ee:24:
70:2e:60:cc:09:6f:64:ba:47:da:b8:15:2d:28:8c:ed:ae:f4:
5d:b8:1d:39:cf:1d:db:32:46:d5:81:0f:40:73:65:bf:0d:ff:
e9:1e:79:57:38:64:13:19:38:4b:9e:16:49:44:81:e6:1e:66:
59:12:0d:e5:d4:3b:3a:71:ee:41:88:0c:93:35:c6:52:70:f4:
86:8c:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:30 2026 by rpki-client