
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3650bb1b-cfa2-3712-bac9-294757040513.roa
File: 3650bb1b-cfa2-3712-bac9-294757040513.roa (raw, json)
Hash identifier: 35T5yKcyTBl/Sf0cML3XPxw32T2FZaLNukHdBr6PoL8=
Subject key identifier: 12:A8:02:5B:B7:66:D8:B4:47:E1:AA:55:84:7E:D5:5F:D3:CB:50:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549D621DB0E9BF40E37632C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3650bb1b-cfa2-3712-bac9-294757040513.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 396547
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:62:1d:b0:e9:bf:40:e3:76:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=83f1f461-f878-4fcb-b6e0-30f60e8caf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:6a:85:df:8e:88:17:c5:e0:22:7a:e0:28:
8b:01:26:6c:32:b3:6d:aa:78:60:b1:6f:46:c3:69:
7f:71:f6:50:d4:52:1b:15:de:cf:c7:6c:60:4b:ff:
15:f3:cd:d8:cc:69:38:5c:92:c3:bc:99:dc:be:4e:
7f:1e:8d:62:bd:55:b0:97:4f:82:69:5b:ad:15:ba:
ea:93:ed:d2:ce:4f:89:25:ea:c4:48:5f:17:bb:2e:
ea:45:a6:b6:ab:49:8b:13:e1:e1:a9:1b:31:b2:7d:
f2:37:8a:16:b2:c2:99:0e:0b:3d:1b:9c:c7:4d:2e:
d8:9c:ba:e6:4b:3d:00:e9:42:6d:42:4b:56:ed:09:
66:89:75:f7:05:50:4f:eb:ff:5c:48:40:78:67:f8:
e1:c6:84:b7:a1:a3:85:93:0d:62:4c:90:42:06:b8:
ad:eb:d8:3d:e9:73:0f:7d:55:fa:6d:52:00:44:97:
d6:4c:4c:ee:5b:41:44:f9:2f:9f:03:c0:ea:f3:06:
09:55:5c:4e:09:4d:7b:54:87:c6:63:64:5f:01:19:
ed:9f:97:f3:4c:3b:77:b9:b5:c8:c5:ca:82:85:29:
99:dd:2a:22:5a:d8:f6:97:da:51:22:cc:ad:d2:16:
97:9b:73:03:86:29:16:b6:fe:0d:8c:19:32:5a:a2:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:02:5B:B7:66:D8:B4:47:E1:AA:55:84:7E:D5:5F:D3:CB:50:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3650bb1b-cfa2-3712-bac9-294757040513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:63:2b:12:3a:cf:21:e9:2c:a1:6d:42:14:12:93:03:77:5e:
29:e5:61:23:67:ed:db:cb:6f:bc:9b:e1:04:ac:e2:a9:7c:d7:
72:e4:e1:98:39:7b:99:d0:b6:0d:10:01:bf:72:92:d1:54:f0:
96:34:45:6c:af:0c:0f:a3:6c:4c:13:89:6f:99:a7:b7:f3:04:
4d:32:81:a8:24:4c:75:09:f9:32:d3:96:c8:ac:4b:4b:82:4f:
6f:fe:29:b6:d5:73:4a:7a:e1:46:c7:04:31:8a:54:71:f8:6e:
b7:63:b2:0b:18:6e:bc:1e:15:12:ed:39:38:3d:28:99:2c:a2:
aa:96:c1:e1:2b:13:a3:46:01:b7:ef:2f:29:6b:b5:3c:75:db:
b0:2a:e4:3e:11:89:f7:bb:c5:b7:4e:f9:f1:74:4f:87:bc:5c:
bf:05:d9:24:98:27:95:5c:87:e1:4f:31:0e:74:be:2a:08:fd:
50:a2:38:e0:eb:fc:87:71:27:58:5a:eb:d9:b6:b8:ce:9d:dc:
3d:9f:fe:cf:70:ef:5b:6b:e8:1b:cb:8a:45:1a:75:63:13:77:
84:c0:29:8d:5a:39:54:90:58:ca:48:17:dd:9e:3e:b8:03:55:
a8:d5:e0:99:2a:7c:b6:fb:02:76:78:6e:5e:a3:25:45:24:0e:
26:e3:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 02:31:26 2026 by rpki-client