
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27f2e3d3-34d9-3b0e-a0bd-f1bc4afd92b3.roa
File: 27f2e3d3-34d9-3b0e-a0bd-f1bc4afd92b3.roa (raw, json)
Hash identifier: huK2nP9aeuulKHO65ODsvi2B4REwan3osiYC4UOo73M=
Subject key identifier: FD:9B:D8:E9:57:65:91:27:79:D9:6D:C4:57:5F:16:99:A7:9C:4F:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D143D977586B76A6C9C855DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27f2e3d3-34d9-3b0e-a0bd-f1bc4afd92b3.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 36623
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:97:75:86:b7:6a:6c:9c:85:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=fc2c9375-cc80-4382-b791-fe3617d4840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:0b:99:47:68:cb:05:fe:de:7b:e1:12:2a:
f1:d8:8e:58:79:5c:04:97:b8:b0:a0:29:05:c4:fd:
3a:91:4c:64:c3:b9:f7:81:29:a1:2c:c9:6e:38:68:
6e:70:92:29:b6:52:19:94:35:a1:23:5b:6c:24:d0:
58:e3:82:1e:ff:21:81:2b:bd:e1:16:f9:f9:08:74:
20:70:34:ec:4b:96:7d:b6:19:de:66:c0:aa:54:ba:
79:c6:37:f4:7c:22:1c:75:a8:46:77:aa:bc:b6:1e:
31:20:90:e3:ba:b3:b5:77:dd:d5:58:71:04:31:ff:
ff:35:8e:db:b0:97:89:c5:3f:8b:bc:02:df:77:57:
42:2c:0d:e8:30:c0:26:86:7e:83:d9:67:1e:1e:b9:
6a:9b:4c:72:b8:fe:b6:61:e0:12:ff:c1:0f:45:f9:
55:9e:29:ea:fa:ac:b7:32:f5:80:c4:84:58:04:cc:
5b:66:f6:d9:d5:dc:91:28:75:8d:57:e2:36:31:6a:
23:72:29:4a:35:ab:0a:6f:fa:76:4b:32:ff:6c:ef:
d9:1e:b9:6d:0a:2e:cb:a1:1b:d2:7a:17:35:42:37:
6f:d7:eb:78:70:2c:e7:b7:e3:a3:91:eb:b9:ac:a2:
a0:ad:71:ff:aa:ae:28:54:c9:02:96:19:3f:f6:11:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9B:D8:E9:57:65:91:27:79:D9:6D:C4:57:5F:16:99:A7:9C:4F:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27f2e3d3-34d9-3b0e-a0bd-f1bc4afd92b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ab:74:c2:d9:5b:62:11:8d:56:f3:13:4f:c6:0b:7b:2a:65:
19:d2:35:ed:77:24:d3:69:ce:85:15:70:9e:84:b0:42:91:51:
0c:2b:46:5d:0a:7d:33:ab:80:c0:8d:06:a6:58:ac:51:79:17:
0b:27:ec:41:b3:00:83:c8:a1:b4:fa:d5:5d:e4:20:19:ef:16:
b8:55:82:2d:ba:d9:d4:71:22:33:10:a0:13:59:58:91:78:44:
74:bf:30:18:72:c0:bd:d8:9a:b1:56:3e:35:66:cd:97:f8:51:
43:5b:af:3c:05:00:f2:29:0b:14:be:e0:8f:15:ca:de:52:b4:
d3:de:a6:da:c7:17:00:ef:72:c1:53:35:a4:13:b1:82:60:d8:
1f:45:ed:da:44:a3:82:56:a7:51:60:23:3b:d8:eb:fa:53:60:
24:49:40:1f:c7:61:1e:eb:1a:cf:46:5b:b5:2b:91:7f:d2:86:
e9:16:33:4c:c4:10:5e:df:37:bb:f4:5b:d5:1f:5e:99:68:35:
eb:24:3e:ea:e9:b2:a7:d1:c1:f5:83:2e:32:ef:47:e9:18:5d:
6e:82:22:1d:8f:5a:3f:eb:cd:5b:ee:f6:58:9e:38:b1:ec:01:
c2:e7:37:18:10:b6:2b:85:20:50:9b:fc:ae:4d:47:63:2c:04:
94:02:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:06 2026 by rpki-client