
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa
File: 0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa (raw, json)
Hash identifier: bUkgoPkoXHiMRyjsdHEE+Ba5cVjlFGmyqjzjzlJSP/c=
Subject key identifier: F2:05:2E:B8:9F:84:C1:B3:5F:97:D7:C2:01:84:5D:97:2D:71:91:C6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1199C6AC6FE427D6422C8C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa
Signing time: Thu 05 Mar 2026 15:20:09 +0000
ROA not before: Thu 05 Mar 2026 15:20:09 +0000
ROA not after: Wed 03 Jun 2026 14:20:09 +0000
asID: 36631
IP address blocks: 192.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:99:c6:ac:6f:e4:27:d6:42:2c:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 5 15:20:09 2026 GMT
Not After : Jun 3 14:20:09 2026 GMT
Subject: CN=422ed130-80ce-4d85-84c3-18cf11a52763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:36:22:2b:a0:a1:4d:4c:97:5b:63:a8:2b:
d8:47:b5:45:19:7c:b9:85:de:7c:b2:3f:a8:c5:ee:
57:26:3e:1e:e5:1d:13:22:60:00:59:fc:d0:5d:94:
82:98:b7:55:88:f8:4a:a1:0e:da:71:05:72:ae:e6:
6d:6b:4d:6c:91:73:41:d0:89:de:84:5c:c9:9c:0e:
fc:84:4f:45:a3:66:9b:55:e2:2b:f6:66:34:50:a2:
04:c8:10:60:1b:0a:a3:d0:ee:05:6b:59:6d:3c:be:
6a:ba:25:0c:21:8b:41:02:77:6a:cf:cf:52:95:dc:
0f:0f:fe:f7:f6:7b:38:90:b9:18:c7:69:67:28:8a:
35:07:32:7d:02:46:03:64:f8:44:b1:36:2b:cf:8b:
76:fc:bc:7d:06:24:69:e1:e2:1d:bb:96:d6:74:c2:
33:4c:63:cf:48:50:f1:17:55:2d:3e:73:e4:98:60:
78:9c:82:c8:6c:5d:4e:cd:fa:22:67:e7:00:df:ce:
7e:72:54:a7:e4:ee:82:4c:c2:88:fb:4b:99:b3:40:
8b:c2:f6:c2:37:f6:1a:15:a3:b2:ab:99:75:05:4b:
78:92:1a:df:dc:8d:3f:31:53:ad:93:b9:10:61:78:
7b:e8:67:14:5b:e4:e2:c7:66:97:f0:57:ff:d7:e5:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:2E:B8:9F:84:C1:B3:5F:97:D7:C2:01:84:5D:97:2D:71:91:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac0ca2f-1863-3f5d-8c2d-21092569c694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c5:65:10:60:b0:9b:00:e0:46:13:20:3a:41:1d:f4:dd:ad:
84:2d:a9:73:c3:79:6f:fa:94:d4:a3:81:89:2e:39:de:15:85:
c4:82:c5:76:c4:b6:b5:6c:80:06:c8:8a:bc:e7:58:1d:8e:5f:
f9:87:78:f2:69:61:3c:96:f4:f9:b7:71:c3:49:c2:f6:96:27:
10:f0:6b:c7:82:95:31:a5:3c:1f:61:3e:57:17:79:5f:fc:9d:
d5:12:e5:57:ba:45:7f:e4:1f:20:cb:6e:ad:fa:5a:6b:03:74:
73:82:fa:67:7f:61:05:26:ce:1c:04:ca:d8:b4:9c:f8:10:96:
4b:38:6d:09:46:67:19:1a:62:e8:18:f6:f8:ee:f2:e7:e1:0c:
81:a0:8a:48:38:1e:7f:54:76:14:e2:d2:8f:36:1c:06:ce:a4:
22:f4:7e:45:62:d3:59:55:55:46:af:65:29:32:3a:9f:c7:02:
d4:2c:b3:5f:11:07:93:1c:6a:ba:90:09:db:5d:a4:b0:8f:61:
a5:27:13:8b:89:77:ea:1e:0e:a5:2c:0d:7f:51:8c:1d:58:8b:
74:32:c2:b7:1f:db:64:7d:38:5e:76:e1:ca:5d:03:55:ba:c0:
e6:32:8f:a6:59:04:f8:a9:1f:d8:58:c9:e4:83:44:2e:f7:dc:
2a:fb:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:14:40 2026 by rpki-client