
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dbbb5e1-5e12-3fe6-9d21-3baafd22c6c7.roa
File: 5dbbb5e1-5e12-3fe6-9d21-3baafd22c6c7.roa (raw, json)
Hash identifier: RvTYOj4cZCvnxjeNxcFr6Cc5MqJ5DJJ6d0J1JFgZqfw=
Subject key identifier: B4:99:08:C3:C1:0A:8D:B9:FD:AC:17:3D:72:D4:72:04:E1:9A:B8:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1707EA2D51AD0C2D887582C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dbbb5e1-5e12-3fe6-9d21-3baafd22c6c7.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 397205
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:ea:2d:51:ad:0c:2d:88:75:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=22f60186-a308-4b5c-8ece-f3c0091f4cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:04:d9:42:dd:be:b4:3c:ee:45:e1:af:d9:
f6:13:d2:d4:3c:c6:27:9a:9b:81:66:f3:36:e9:03:
e9:bf:23:e3:5c:23:27:29:1d:60:c0:5a:2b:7a:dc:
8c:15:f5:d5:05:7a:93:13:bd:17:9a:b9:29:e4:7c:
b5:10:51:17:0f:d8:f0:86:44:00:8f:0b:9e:d1:7c:
c1:da:4a:7a:1b:be:d3:5a:3c:e6:02:72:29:bb:87:
bb:ce:1e:90:15:52:21:ac:a7:46:12:79:46:fc:4f:
59:c6:c7:a7:7f:96:f4:68:a8:a0:92:3c:b0:7b:4d:
de:a2:cd:a0:3c:e7:06:23:53:95:ec:2f:df:1e:b2:
14:97:7d:59:4e:37:30:f4:f8:0d:bc:8b:1c:e4:b9:
f3:4c:3c:48:b6:72:82:de:f3:d7:73:3a:99:ac:79:
2f:97:d4:72:b0:4d:2d:b0:cc:84:40:c8:14:e8:78:
19:db:57:84:f9:c6:01:4b:28:6b:cd:03:f8:ff:48:
e6:2b:1d:09:dc:a5:91:bb:b5:88:45:90:95:fa:9a:
9d:07:69:ed:86:7a:bd:88:f0:2b:52:c0:43:d3:ea:
a6:71:af:e2:ba:df:de:01:43:69:f0:e8:a2:3f:f3:
22:21:fd:be:4d:73:6e:d9:6b:a7:cb:40:68:17:ca:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:08:C3:C1:0A:8D:B9:FD:AC:17:3D:72:D4:72:04:E1:9A:B8:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dbbb5e1-5e12-3fe6-9d21-3baafd22c6c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:30:49:b0:b6:76:31:f1:06:d4:06:18:b8:83:8b:f1:cd:6f:
6d:ff:65:43:c7:68:bd:61:e5:28:a3:cb:89:d8:e3:59:74:62:
8e:fa:0e:80:c5:ba:42:6a:4b:54:82:58:3d:c5:f3:3c:55:28:
d8:be:6d:36:63:ca:61:85:8f:4c:d9:6a:92:9c:b4:dc:6c:11:
cc:2d:00:24:31:fa:26:0b:60:c7:1a:98:61:72:b0:e8:20:e5:
f8:95:18:b7:fc:6a:c9:d6:ad:d9:25:5e:81:99:05:18:44:75:
41:90:a3:68:d1:d9:36:c1:9c:0b:63:b3:1c:50:56:2a:e9:ae:
9c:64:1e:52:50:63:41:ab:7f:a0:7c:8b:f0:54:f3:ca:d8:95:
fb:18:ae:95:9c:4a:3d:a4:b3:51:f2:77:2f:03:f5:b9:59:62:
ee:27:2a:05:4f:e8:7d:ec:da:58:15:74:d0:8a:fb:07:c9:db:
9f:00:71:28:91:8f:2f:62:8a:0c:90:8b:e9:b9:dc:95:ed:98:
8b:1c:13:e5:6e:95:8d:a7:a0:7c:f9:a7:46:d9:99:72:fd:5f:
e6:7b:c4:2f:26:4e:eb:4f:f7:cf:de:ab:8c:47:2d:08:ac:0f:
50:b8:cd:69:e5:17:7e:e4:88:5b:bc:d1:23:04:55:22:7d:d0:
b4:3d:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:30 2026 by rpki-client