
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/278fd58f-4831-3f7e-919d-314e16703a11.roa
File: 278fd58f-4831-3f7e-919d-314e16703a11.roa (raw, json)
Hash identifier: rHfsOOegf7Q7gfMFaOwG0NGPpwlmIn0kcV9cIcc5u6w=
Subject key identifier: 1A:13:D4:AD:A3:AB:18:A9:5B:A8:83:37:A9:EA:6D:3C:5E:09:64:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B477C8D28C8BAF0581073D2A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/278fd58f-4831-3f7e-919d-314e16703a11.roa
Signing time: Mon 22 Sep 2025 13:00:42 +0000
ROA not before: Mon 22 Sep 2025 13:00:42 +0000
ROA not after: Sun 21 Dec 2025 14:00:42 +0000
asID: 396587
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:47:7c:8d:28:c8:ba:f0:58:10:73:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 22 13:00:42 2025 GMT
Not After : Dec 21 14:00:42 2025 GMT
Subject: CN=0ff32f2d-9e4f-44ff-9c5d-bedcd76a7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:63:c1:0a:3b:10:da:7f:1d:32:f3:63:33:
e3:46:35:19:aa:cd:ef:fc:a5:52:44:8c:93:c0:ab:
6e:a9:ac:77:95:e8:ea:b2:33:5c:92:ce:77:09:fe:
d9:ab:21:85:c2:68:cc:c4:d0:bd:af:51:0b:95:32:
49:96:ef:ef:03:0b:07:5f:a3:77:4a:f7:b7:09:ee:
a7:c8:7e:61:38:43:3e:7d:e1:76:36:bd:2c:57:ad:
2d:dd:a0:8a:49:ab:ca:e3:3e:72:8e:e0:45:bb:2d:
e1:41:d4:e6:3a:f5:55:f0:e3:74:9a:93:d3:88:bd:
01:34:f5:b2:fb:0a:8c:84:94:e8:70:b5:3f:dd:93:
be:85:4b:cd:40:26:f9:b7:7b:e7:74:c0:97:88:01:
93:0d:a3:00:69:ae:39:b7:39:81:91:78:87:c0:ac:
83:3d:c5:55:f2:09:d5:1e:a5:b9:4b:38:64:5a:c4:
79:d0:d8:b3:bf:2a:85:80:13:71:7f:3f:4e:d9:6b:
e3:20:4a:d9:ee:d9:22:dd:c6:7f:93:c9:cf:e4:b5:
2e:0a:a8:fb:d7:19:bc:72:ac:df:07:44:8d:a3:5a:
39:ee:36:3e:28:f9:da:c1:52:90:6c:10:4b:1f:88:
cb:4f:12:16:a8:f8:f5:06:d2:02:44:c3:f6:0d:69:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:D4:AD:A3:AB:18:A9:5B:A8:83:37:A9:EA:6D:3C:5E:09:64:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/278fd58f-4831-3f7e-919d-314e16703a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:77:83:49:4e:12:be:d9:49:c5:07:cb:9d:b8:f9:60:7c:19:
64:0c:45:d4:97:90:65:d7:99:41:d4:e4:b7:fa:69:8c:67:5c:
b8:e9:5f:66:46:49:da:07:9a:e8:e5:7f:8a:6a:35:d1:17:8d:
b6:cf:aa:25:6d:03:58:d9:d7:5e:39:61:00:31:6f:3d:8f:c7:
37:bf:50:c7:bf:9f:e7:d4:82:ca:fe:59:1f:cd:a4:26:e1:4e:
59:9a:73:02:78:68:70:e0:24:38:7e:81:87:b4:a9:c5:a0:da:
63:28:4e:cf:46:0d:45:38:3d:64:15:1e:d8:61:71:f6:f0:fc:
ac:1a:5c:3a:79:3b:c2:9b:5b:ff:20:1f:b3:7a:ae:ee:d0:09:
0f:3a:dc:70:74:5e:80:06:c1:82:15:80:b8:33:e2:b5:9d:b0:
05:15:db:f6:f4:f2:82:50:4d:57:b6:d6:1b:ae:2a:ae:0c:ff:
3d:23:e8:eb:83:84:c6:4f:4f:61:d9:89:82:8b:b5:86:ce:e4:
97:c5:7e:8f:27:eb:62:b8:f9:35:ce:24:a2:48:a7:d1:d6:25:
5c:f1:ad:2e:51:04:5a:6b:38:b9:d1:36:ed:66:90:10:27:91:
35:ad:ae:72:a7:06:8f:57:5b:35:58:5b:29:0a:f2:7c:d4:b0:
ef:2f:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:07 2025 by rpki-client