
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f91b0d7-4e3b-337a-8280-1bd314770677.roa
File: 3f91b0d7-4e3b-337a-8280-1bd314770677.roa (raw, json)
Hash identifier: ftK3TzUtCdGmxt/WgbcrHI5LgHayr2tn/v3yqT8Ap9I=
Subject key identifier: 66:60:E7:26:83:11:6F:1C:82:52:35:A3:FD:CE:C8:74:DD:12:39:71
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E6145697DC73471E071A9F280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f91b0d7-4e3b-337a-8280-1bd314770677.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 36625
IP address blocks: 192.33.14.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:45:69:7d:c7:34:71:e0:71:a9:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=8cdc2171-5153-450a-8e3f-093994906abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:cd:1b:24:e1:b8:a6:67:65:9a:8f:a5:ea:
32:63:9e:cf:00:e8:f9:d7:24:c9:2a:b0:ea:0f:9a:
a5:a6:33:32:1b:d5:52:a1:cf:ea:4e:50:1b:48:07:
5d:aa:bb:a0:d3:f5:88:63:5b:7b:15:76:db:b0:b8:
89:f4:43:39:16:56:e6:5b:0b:a2:2c:f0:94:ac:9a:
91:b8:e3:04:0b:d0:5f:22:e3:23:09:52:88:a5:ba:
b0:e5:ad:a9:c3:0a:31:62:49:42:2e:b8:48:f6:fa:
27:89:b3:f1:84:5f:37:a6:56:cc:a8:26:75:5d:98:
6a:9b:a9:50:79:b6:a8:08:98:76:2e:94:8b:f1:6f:
8d:00:e9:e3:6a:2b:11:95:81:08:f4:d8:49:e1:ad:
45:ec:49:00:0c:82:0e:dd:b6:81:80:d0:ca:df:07:
36:db:ac:39:f3:47:af:a9:ae:88:b6:38:42:60:f4:
1f:06:6a:56:61:d2:bd:0b:b9:94:cd:ad:1c:92:08:
7f:58:b2:5b:10:3b:f5:b1:65:87:36:45:19:12:f2:
77:44:78:f5:3a:53:d0:fa:a9:cd:52:c1:4f:5d:11:
99:81:c9:86:bf:5a:15:84:a9:0e:8f:51:cb:14:60:
c1:10:17:45:ab:db:d5:4f:e1:ee:52:e7:2d:50:fb:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:E7:26:83:11:6F:1C:82:52:35:A3:FD:CE:C8:74:DD:12:39:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f91b0d7-4e3b-337a-8280-1bd314770677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:5d:fd:9a:3d:fa:77:d7:53:76:38:d4:fb:c1:2d:3a:5a:bf:
8d:92:ef:59:dc:df:6e:e1:d6:25:8b:89:28:dd:d5:f2:61:b0:
04:43:57:19:e1:42:32:be:cb:c7:49:74:79:8b:1b:94:ec:a2:
c7:cf:29:f3:9b:86:c3:d3:02:61:65:58:11:07:15:14:00:7f:
0c:8f:c6:c7:11:60:eb:a3:f4:ec:e1:98:95:82:13:e8:7e:0b:
37:a5:87:dc:cc:2c:17:6e:4a:af:88:df:4f:83:57:a3:6d:8b:
ea:71:e3:b3:28:5b:cd:02:14:54:30:56:d4:8d:1b:8d:76:98:
06:0e:3f:50:3c:51:62:4d:e3:26:8f:6d:a8:b2:23:9c:07:09:
e4:11:01:0d:e7:34:a0:39:ef:f2:ba:f2:36:84:ed:3c:62:bd:
26:4e:69:98:f4:81:17:4b:b7:6e:04:de:3f:6a:25:5b:98:6b:
e8:f6:39:11:df:6d:40:d2:85:b0:e8:bb:05:8a:18:93:c3:29:
37:12:50:9e:88:48:3b:09:ac:e4:55:c2:17:8b:41:55:c0:83:
3c:31:e7:f9:ec:02:e1:69:da:cd:88:60:48:db:34:b1:95:49:
84:cd:de:4d:61:0e:19:ce:a8:9c:5c:c0:66:c2:12:df:dd:cd:
c7:73:f5:3b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5hRWl9xzRx4HGp8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
OGNkYzIxNzEtNTE1My00NTBhLThlM2YtMDkzOTk0OTA2YWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK/NGyThuKZnZZqPpeoyY57PAOj51yTJKrDq
D5qlpjMyG9VSoc/qTlAbSAddqrug0/WIY1t7FXbbsLiJ9EM5FlbmWwuiLPCUrJqR
uOMEC9BfIuMjCVKIpbqw5a2pwwoxYklCLrhI9vonibPxhF83plbMqCZ1XZhqm6lQ
ebaoCJh2LpSL8W+NAOnjaisRlYEI9NhJ4a1F7EkADIIO3baBgNDK3wc226w580ev
qa6ItjhCYPQfBmpWYdK9C7mUza0ckgh/WLJbEDv1sWWHNkUZEvJ3RHj1OlPQ+qnN
UsFPXRGZgcmGv1oVhKkOj1HLFGDBEBdFq9vVT+HuUuctUPtfEwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGZg5yaDEW8cglI1o/3OyHTdEjlxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y5MWIwZDctNGUzYi0z
MzdhLTgyODAtMWJkMzE0NzcwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXXf2aPfp311N2ONT7wS06Wr+Nku9Z3N9u4dYli4ko3dXyYbAEQ1cZ
4UIyvsvHSXR5ixuU7KLHzynzm4bD0wJhZVgRBxUUAH8Mj8bHEWDro/Ts4ZiVghPo
fgs3pYfczCwXbkqviN9Pg1ejbYvqceOzKFvNAhRUMFbUjRuNdpgGDj9QPFFiTeMm
j22osiOcBwnkEQEN5zSgOe/yuvI2hO08Yr0mTmmY9IEXS7duBN4/aiVbmGvo9jkR
321A0oWw6LsFihiTwyk3ElCeiEg7CazkVcIXi0FVwIM8Mef57ALhadrNiGBI2zSx
lUmEzd5NYQ4ZzqicXMBmwhLf3c3Hc/U7
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:05:21 2026 by rpki-client