
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa
File: 2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa (raw, json)
Hash identifier: +yYLSRTRxr72TDtnG/hmOBw6I2hU/+uAVZV7PmPFmSM=
Subject key identifier: 21:84:7E:CD:87:A2:FE:D8:A7:B2:E2:B7:40:4C:BE:57:62:56:FA:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1707D477B84BF2DC38F53400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 396561
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:d4:77:b8:4b:f2:dc:38:f5:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=f69b0c39-83c2-4cb4-9b32-5fb5c00722c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:73:a7:16:16:c5:e7:19:4c:f5:fc:da:bd:
86:07:29:36:e8:97:9c:5d:a2:c7:2d:38:97:f1:99:
85:15:5c:38:79:78:9c:35:6e:26:33:d9:f9:d5:d9:
01:68:cf:77:eb:dd:59:e3:45:52:0c:ea:17:c6:80:
3a:ed:71:7b:6d:ed:7e:c7:0b:d9:d8:80:a2:7c:82:
b3:f3:0f:49:73:a6:70:bc:c3:e6:ee:00:b6:b3:24:
af:09:44:fe:70:e8:a7:b8:13:96:73:e7:92:4f:32:
71:4a:29:38:0b:1a:e9:30:72:4b:c2:76:bd:b7:60:
db:78:6b:8d:0c:17:ac:c5:ca:95:af:57:9a:56:04:
c1:99:f0:77:c6:e1:94:3a:9f:99:f0:1d:c3:55:3f:
9f:e9:82:37:40:4f:6b:e8:7a:65:f0:ee:6d:32:1c:
be:f1:63:c8:3b:d1:53:2f:8f:8a:b6:b3:3a:29:d0:
bb:b5:fb:aa:8c:cc:e5:5b:6e:f7:5b:80:bf:fb:63:
a6:8a:55:92:5d:4f:cb:6b:c1:e9:e9:28:64:0f:ba:
fb:54:68:b4:1b:93:1f:31:aa:cc:fb:17:29:b2:a7:
f6:30:2f:4d:53:e3:8a:1a:2b:18:98:c2:ff:6e:82:
d1:6e:08:3c:d3:f2:f9:4b:ce:a9:e1:2b:52:09:1a:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:7E:CD:87:A2:FE:D8:A7:B2:E2:B7:40:4C:BE:57:62:56:FA:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:a0:4c:93:a8:a6:23:87:a6:fa:f1:b8:43:4f:be:54:e2:6e:
04:59:0c:b6:b1:67:aa:62:04:da:ce:ac:42:56:e2:a5:fb:73:
f1:ab:20:6f:35:6e:82:76:56:33:14:fd:bc:d2:95:aa:3b:dd:
c2:cc:16:50:b7:9d:d7:1c:b7:be:ef:fa:71:e4:c2:23:67:79:
71:dc:c6:38:5d:0b:08:ec:cd:53:02:fb:ca:ca:80:93:eb:fc:
04:b0:6a:b1:54:e9:e7:c7:ff:7c:ce:04:5e:8f:f7:8f:de:74:
37:ed:6b:8d:3f:c7:fe:bb:63:7a:24:38:ce:ce:5a:e9:8f:4f:
99:46:ff:80:cd:c4:79:11:24:61:22:0b:47:55:d2:47:54:e3:
c4:b2:1b:75:4d:e1:f2:ca:51:64:98:bf:93:c5:74:06:76:36:
26:c1:13:60:1b:a3:b7:09:36:6c:e1:f0:5e:b8:40:a1:48:c9:
8c:27:df:d0:e5:a5:e1:75:66:4f:98:91:5d:6f:9a:42:37:d5:
b7:dd:6e:7e:83:86:3d:18:3f:6c:5c:db:70:56:64:9a:aa:6d:
77:e7:6a:01:69:48:b1:a7:49:61:89:e3:87:92:bf:b3:5b:0a:
94:c0:51:16:87:80:f0:3b:6c:12:70:8f:fd:36:cd:24:11:c9:
24:49:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:44 2026 by rpki-client