
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa
File: 45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa (raw, json)
Hash identifier: iEHjNHljfGfhTBHxa0f8kZTpocKXtFwComRPp/XOMB0=
Subject key identifier: A3:A5:59:33:42:56:C6:B1:E6:17:84:29:03:9A:5A:8A:C2:7D:D9:39
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D300A227ADE79C19C390E7180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 396587
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:22:7a:de:79:c1:9c:39:0e:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=450afad1-4ab2-4ca5-8ed0-eb43d6cbbe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:7b:5f:e2:7e:bc:34:95:7c:c0:ba:b3:04:
74:a4:fa:a0:12:ff:e6:37:8b:4c:2b:05:18:35:7c:
0c:87:28:47:f3:aa:b5:b4:bf:2f:36:00:e3:90:78:
a4:5f:c4:e6:a7:91:32:d8:d5:b0:72:3f:1f:97:31:
d1:02:0f:c3:45:d2:38:7e:fd:c9:a6:13:45:15:3e:
a3:54:d0:4b:69:37:8f:df:32:c5:31:a9:64:b6:55:
e3:74:c9:04:f2:c0:3f:09:9c:80:20:75:1c:97:b0:
cc:e9:47:50:a8:d0:e8:d1:b2:5e:4a:6a:22:63:12:
7b:b9:d5:18:68:45:92:59:d8:0b:43:aa:b9:56:29:
d0:0b:58:f1:8b:21:7e:ab:ff:37:ee:58:af:40:b0:
e6:69:6a:f3:8d:fe:e9:b6:ff:81:6c:93:fa:18:c4:
5e:a9:a1:43:08:b8:02:de:5f:c3:a7:d2:3b:a0:87:
6c:6d:e9:ce:d5:52:fe:8e:1b:e5:21:35:a7:3c:cb:
49:89:ce:be:fe:17:3e:3a:c9:4c:73:e9:da:67:9c:
41:f5:66:7c:d8:28:f4:4a:04:89:28:dd:21:cf:a2:
da:66:c7:77:73:5d:37:95:a5:10:8d:5b:e6:08:12:
a4:28:51:5e:b7:49:77:f6:32:78:94:05:96:1a:f6:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:59:33:42:56:C6:B1:E6:17:84:29:03:9A:5A:8A:C2:7D:D9:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45d8ac5b-ae72-3db4-b9db-5c636be8b01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:8e:56:b1:8f:33:fa:81:11:03:02:5a:32:e4:05:c8:0e:49:
8c:d3:44:27:1b:4a:d2:51:2d:f7:7e:4e:51:09:58:a1:0f:4e:
2f:56:94:b9:8b:4d:cf:13:28:6c:2c:48:0a:bc:ca:48:b7:0e:
af:11:1f:7c:47:14:1d:82:f1:71:82:65:dd:01:bb:52:d6:92:
9f:98:84:6d:fa:ca:51:f9:9b:28:63:26:06:61:f9:35:af:22:
39:89:7a:89:47:eb:49:70:3d:1b:f6:18:aa:ed:b9:91:65:cb:
29:e3:1e:d1:ed:34:c0:78:11:2a:5d:82:c4:00:d8:39:be:c5:
8e:b4:30:98:78:a8:5a:82:63:f8:60:70:66:43:20:37:ac:70:
ba:12:6d:a5:89:7f:3c:cb:4d:1c:6f:ea:ad:13:13:2b:81:66:
b7:72:f2:8b:af:24:72:58:3e:a6:26:1d:ba:fa:36:dd:0b:10:
c9:a0:e4:59:1b:cc:6f:53:6e:5a:c9:63:00:0c:6f:27:0e:3c:
54:7a:5b:01:e0:21:00:93:6f:47:8a:36:de:16:b4:b7:c6:a0:
9a:38:44:d4:76:bc:9f:fa:0e:40:bc:7b:7d:2e:45:9b:d9:ab:
6f:67:39:31:c4:b5:20:d9:eb:7b:65:cc:e0:a4:cf:f9:8d:9e:
0a:78:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:34 2026 by rpki-client