
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3cf2a7-c5fe-30bc-a2fd-4ea4c55cce5c.roa
File: 3f3cf2a7-c5fe-30bc-a2fd-4ea4c55cce5c.roa (raw, json)
Hash identifier: ZaF509Aqd84Q+5w4+FsUwWJgwfwnzoUzVr/LaMS74Fo=
Subject key identifier: 4C:F8:8F:DE:AE:30:D4:2D:C7:ED:EA:F9:E5:77:8E:CE:9F:9E:CF:89
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497F5BA756DF93B1DEB34400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3cf2a7-c5fe-30bc-a2fd-4ea4c55cce5c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396552
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:5b:a7:56:df:93:b1:de:b3:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1386e928-159d-4e57-bea9-104572cf0d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:7e:d7:50:9e:e5:08:5f:a1:fa:bb:bb:76:
7e:79:fe:32:da:84:88:fb:3b:f6:94:94:55:12:7c:
ed:1f:6a:2d:ef:69:ef:fd:bc:54:8e:78:49:ae:fe:
29:1e:7e:69:1b:b4:68:7c:85:08:e7:40:12:5c:cd:
1e:75:42:be:2c:72:a9:ef:02:eb:6d:eb:09:72:32:
68:bc:32:49:2e:55:3a:c4:65:ba:14:32:53:14:0d:
c0:a2:89:60:64:a1:ae:16:2e:24:7c:c1:a4:7f:51:
75:34:19:a9:3e:e2:95:99:5d:b4:01:95:09:72:f5:
a7:7e:69:d9:d3:c5:2b:6b:33:44:05:93:91:04:9d:
fe:87:14:79:a1:c7:39:50:19:09:61:5e:be:6b:50:
e7:63:68:73:64:9f:79:77:f8:2b:45:ba:48:cc:44:
39:79:b2:db:0a:f6:2b:bb:d2:b8:0a:60:dc:dd:f7:
50:a3:f2:a8:b6:5d:43:cc:cf:24:0a:ec:6a:55:a6:
e4:b8:26:7a:41:75:25:0f:b4:4f:c3:6e:d0:a1:3f:
7a:2e:e1:df:d6:3f:90:e4:fd:25:b0:36:ac:0f:28:
b0:4b:56:9a:49:44:3f:0c:35:77:27:f2:01:52:ee:
67:bf:bd:ec:01:f6:a1:ea:68:4f:62:b5:c1:44:8b:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:8F:DE:AE:30:D4:2D:C7:ED:EA:F9:E5:77:8E:CE:9F:9E:CF:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3cf2a7-c5fe-30bc-a2fd-4ea4c55cce5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:74:e2:1d:12:7b:f6:e6:9f:a2:60:30:54:eb:1b:e2:75:79:
17:8e:1f:fc:be:c3:d1:07:9b:e3:cb:cf:34:ba:5d:dd:63:b6:
f2:6b:a2:66:6b:5f:ad:6c:c8:4d:d8:52:04:d1:15:96:e1:4c:
2f:7c:c2:eb:ea:f6:f6:86:21:52:71:bc:b1:a4:a9:9d:eb:30:
d6:4c:72:4d:85:f5:84:00:bc:08:e1:2e:02:c1:c8:53:19:07:
75:e5:74:4e:99:f2:64:fc:8e:92:7f:04:f1:d1:a6:06:48:ae:
bb:c7:fd:97:0b:cf:1c:09:75:6e:f3:c1:e9:8e:93:7c:e3:8f:
0a:73:67:b1:df:b1:38:ae:dc:81:b2:e3:fe:e5:d1:46:ed:4b:
50:ff:1f:16:bf:f7:5c:58:d4:84:8d:6a:c3:ab:f1:a6:50:56:
2b:aa:95:d8:f8:91:3a:06:91:1d:43:69:70:eb:af:f8:60:ff:
17:91:4c:a5:9b:5e:dc:4d:06:a3:11:f0:45:9c:23:11:8e:c5:
a9:17:f4:ca:74:90:d3:6c:d6:ec:e0:68:83:a9:3a:71:e5:f4:
57:9a:21:c2:14:2e:93:41:01:97:2c:91:66:51:67:ff:93:40:
86:7a:2a:50:03:f0:f1:2c:7a:96:0c:4c:9a:cb:9f:c0:a2:d9:
72:b2:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:14:40 2026 by rpki-client