
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa
File: 388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa (raw, json)
Hash identifier: hA4krRs9IrDTd7Y1IcUvlF4vr0tjSEKDgrBqCDrB2/s=
Subject key identifier: A1:19:28:73:6F:A7:16:93:0D:46:17:F6:D6:19:A5:5C:82:C3:B3:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D0EA7DC1DA62CE3173BAB2A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 396612
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:dc:1d:a6:2c:e3:17:3b:ab:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=d45fbf3e-0572-4a91-81b8-622fb5a94414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:33:05:98:a3:36:2c:8a:cb:63:28:7e:dc:1c:
e8:76:a7:aa:b8:fe:3c:20:c9:e5:05:03:13:15:6d:
73:58:9e:2c:d0:35:94:72:1f:d9:19:c7:e5:88:50:
62:89:61:27:da:97:fa:c5:3e:b6:dd:72:04:a4:44:
1b:15:8f:74:53:e0:e9:be:c3:90:1b:df:c8:c2:4f:
7e:a9:c8:9c:78:44:ef:69:ab:29:89:12:d7:de:80:
15:58:28:d7:a3:28:10:d9:2a:d2:6d:14:9b:9a:86:
ff:e5:e6:ee:54:63:b0:42:26:cb:a1:51:87:36:0d:
4b:0c:e1:36:bc:c8:25:6f:6b:a9:b2:00:86:5f:dc:
5c:9c:1b:96:0d:2a:28:81:a8:25:03:d1:9f:11:4b:
f8:0a:06:8b:c6:50:14:35:05:5c:ee:15:9c:eb:38:
b2:f1:55:7a:39:76:d2:ce:d2:69:1a:99:21:f5:e8:
f7:53:13:5a:a5:6d:0a:40:f1:72:06:b1:65:ca:ab:
98:63:00:52:7e:ad:27:bb:df:bc:fe:37:41:52:ff:
90:ec:75:d3:e9:4d:32:ac:35:37:1b:f6:57:5e:9b:
86:56:0d:78:50:e9:a7:2d:d3:4b:ea:59:ff:0d:94:
13:e3:8a:59:71:8d:6b:b3:ef:c2:63:01:a6:fd:72:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:28:73:6F:A7:16:93:0D:46:17:F6:D6:19:A5:5C:82:C3:B3:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/388b87e9-5953-3d76-b455-2ffb4a0b5a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:08:b3:7c:91:08:a4:91:8d:e5:69:f1:d2:9a:a4:bd:98:59:
5b:76:68:ce:62:57:28:93:f5:43:9e:7d:ad:cb:c9:57:2c:e1:
b2:2d:f0:6b:f4:d9:c5:0f:e0:31:a0:b4:58:19:1a:8e:0b:8b:
7e:5e:1a:01:ac:15:84:71:78:51:3c:92:92:5e:be:52:b1:2b:
f2:63:40:97:78:cb:48:3d:f8:0b:1a:9c:30:53:5f:1e:ab:0a:
22:56:18:a1:af:5a:d3:80:23:65:97:1f:32:48:cf:41:3f:37:
dd:dd:f3:f8:5a:32:26:f0:dd:a6:3b:b4:db:1b:de:fb:47:89:
0c:4a:34:ac:90:4e:12:9f:91:5a:8e:e9:a0:17:95:8a:86:b6:
16:34:9a:9b:8b:2e:fd:0a:1f:fa:f2:52:0f:a1:40:e9:11:9e:
1d:0a:91:ff:d5:5c:30:e1:7c:80:75:50:40:c0:79:4e:b4:d2:
c3:25:97:17:41:19:91:8a:f6:0e:a3:0a:ea:ab:4a:e6:5e:d5:
39:d5:5c:f6:dd:e8:2f:3e:19:d1:af:b2:30:9d:e5:70:f2:63:
42:ec:7c:1d:99:af:a5:c6:35:05:06:0a:4b:42:de:3e:29:c2:
fe:41:c4:0a:63:ef:d9:38:68:ef:f0:2d:06:1d:be:22:af:c1:
b3:a2:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:17 2026 by rpki-client