
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa
File: 1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa (raw, json)
Hash identifier: 31FeiB+8PgkAyksA0mLPeFkOd00xqFi04YVS0xkxxv0=
Subject key identifier: F9:3C:7A:0D:F3:D2:41:D3:9B:BF:A4:AE:D9:15:DD:DD:DC:7B:D2:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3DFF9C1BE3CC199ED4B6E740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 397205
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:9c:1b:e3:cc:19:9e:d4:b6:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=450f7600-73f4-433e-ac19-2b494dd8b5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:58:8a:36:11:1a:5a:83:d6:ac:02:88:78:
35:84:f0:3d:79:cc:11:70:b8:60:76:ad:5f:96:ff:
d6:3d:c2:5d:a6:08:42:85:8b:c7:7c:8d:8d:9d:fc:
94:a3:87:38:97:c4:e3:2e:6d:1c:ad:7b:88:d2:90:
8c:5d:71:ae:30:25:c8:2b:13:2c:65:85:d2:80:5d:
e8:d7:ef:33:e9:17:b3:25:14:1a:bb:4c:a9:a1:3c:
0e:d0:05:21:0d:21:e5:8e:e5:36:cb:fc:d7:df:7d:
8d:4b:65:85:f5:3c:fe:c2:d7:a1:7e:1e:bf:e1:86:
ef:d8:ed:3a:a7:32:be:6b:16:2d:9f:be:9d:3a:a5:
72:da:b6:0c:6e:2d:b8:f9:c1:26:50:56:53:08:b9:
cc:0f:c5:d0:8c:7d:14:19:5a:62:d8:5d:25:ae:b9:
cb:16:17:8f:27:70:37:92:86:16:03:ff:ef:39:26:
00:9e:b6:7b:d9:84:8b:ca:47:f6:ed:a5:d8:e6:52:
16:63:b3:7c:9c:ea:61:30:9e:24:92:8c:cf:6b:f3:
e1:d9:25:c5:bf:f2:c2:6b:0d:5c:80:31:4b:ca:14:
5b:81:f9:cc:d5:91:1d:98:7c:95:82:7f:c8:11:82:
0f:46:2b:86:79:7e:3b:17:e3:f1:ba:52:c5:21:b6:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:7A:0D:F3:D2:41:D3:9B:BF:A4:AE:D9:15:DD:DD:DC:7B:D2:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:18:bc:35:35:12:58:c7:d1:30:d1:73:15:4f:48:7f:1a:d6:
d0:5d:21:8f:be:f8:75:34:43:21:00:34:23:9e:a3:bf:db:a1:
a3:47:50:21:39:80:8b:ee:41:5c:7a:c9:79:5d:81:ef:bb:e6:
31:f1:40:05:6c:c6:05:2b:57:b5:84:ac:b0:b5:1d:51:ef:fb:
6d:fd:cc:3b:1e:ed:bf:4e:09:4d:3b:8e:1e:3f:a4:65:17:50:
21:68:72:17:93:a9:5d:c7:09:b9:f5:d2:0e:3b:c4:0e:4b:f8:
ef:83:00:29:5f:9b:4c:29:12:9d:02:f4:de:f7:f8:e8:c9:20:
54:04:ed:3f:11:d5:d9:af:cc:5d:b8:07:a9:1a:bc:ae:32:7d:
09:c2:c9:ce:bb:b4:97:8f:1f:39:78:87:67:b2:02:75:ce:b6:
9b:96:3f:fb:af:58:11:2d:17:64:e8:61:c9:29:5c:d3:8a:c4:
19:06:56:39:cf:2f:3d:7d:83:e7:d4:a6:4d:84:17:dd:7d:3c:
ae:2b:ad:3b:58:47:1c:16:c9:fa:7c:e1:98:5a:9d:6b:4e:b2:
9a:12:5a:ed:46:f0:ca:db:78:83:ed:aa:da:e8:4f:d0:e5:b6:
7a:34:da:86:b9:32:c8:df:1e:88:89:af:e0:97:60:14:97:36:
90:ef:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:13 2026 by rpki-client