
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd1aa8d-8d51-3266-b591-72522f4e996f.roa
File: 5fd1aa8d-8d51-3266-b591-72522f4e996f.roa (raw, json)
Hash identifier: z+ufX631rknVeJuzpkDGeaHJLz1oXDDFX4i7RbcjUNI=
Subject key identifier: 31:5D:E6:43:22:E5:BA:FD:8C:22:B0:46:6C:85:73:A2:44:6F:C3:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3DFFA2ABDC1D2E57C1FAF280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd1aa8d-8d51-3266-b591-72522f4e996f.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396738
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:a2:ab:dc:1d:2e:57:c1:fa:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=d1c04cde-86ad-4561-beb2-84098b7a6ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:71:c6:f3:4b:98:1b:bf:d5:2e:76:15:89:
64:17:5e:ef:0d:6e:ad:68:85:d5:d5:ce:ff:80:b6:
4a:99:4d:b4:a6:7e:2b:0c:e5:52:70:c7:a9:4f:05:
b1:e3:37:e0:e6:75:c9:f4:00:64:b4:b6:ac:d8:b0:
e1:6d:1b:2a:82:5d:5e:83:09:a7:5f:da:5d:44:71:
f5:18:88:c0:bd:a7:b1:2e:62:0b:a7:6e:ae:25:b8:
79:29:a4:4a:b3:30:d5:7c:6d:2a:83:c6:d5:cd:73:
89:d3:9e:2a:25:59:1e:4b:60:a4:ce:cf:58:25:53:
63:6a:fa:33:d1:43:cf:aa:d8:8e:3e:67:47:a6:c7:
96:e9:61:2d:80:97:01:8f:8e:b8:c9:25:82:36:b6:
9f:a3:8d:8b:63:7c:43:40:ba:31:d8:e3:15:74:99:
59:54:ea:b2:fe:57:c2:4c:1e:f1:1b:72:53:b3:64:
55:cd:7b:ee:1d:1a:f2:2c:9b:08:82:70:54:bb:37:
88:b2:56:83:a2:b7:c4:e0:45:a2:22:1f:0a:f5:6e:
ac:cf:db:56:8e:66:cc:31:d3:64:fd:b0:8f:a4:fc:
a9:01:45:a9:c8:9c:40:21:d7:85:cf:ca:c6:79:bb:
43:8b:c3:cc:eb:16:40:12:11:85:24:19:2a:34:bf:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:E6:43:22:E5:BA:FD:8C:22:B0:46:6C:85:73:A2:44:6F:C3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fd1aa8d-8d51-3266-b591-72522f4e996f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:91:30:69:89:2a:c4:18:38:25:d4:d0:b9:6a:85:a9:92:e6:
6c:a0:dd:55:95:bc:27:6e:eb:0e:12:99:60:39:d1:d2:2c:08:
40:2a:4b:1a:83:c9:45:d5:53:32:ac:fe:c8:06:c9:46:55:57:
63:cd:9d:fc:54:dd:c4:65:31:ec:44:30:5e:ec:b1:02:2e:82:
39:84:49:6f:a4:40:66:9d:93:a2:8d:ca:27:61:17:2b:e3:58:
cd:15:bd:7d:02:6a:59:21:08:af:e6:23:6d:7d:3a:fe:60:23:
c7:1e:37:08:3b:0b:e0:de:c1:c1:c2:30:5f:ae:0e:9e:18:67:
1a:f4:74:21:f4:dd:51:ca:4e:fb:ba:44:fc:c2:72:43:28:b0:
6f:5b:3b:f1:1d:ad:50:f0:d1:5d:22:8d:02:17:54:81:1d:9d:
ea:68:9d:af:5e:28:c7:dd:56:fd:44:ff:ca:5b:2b:2f:e7:c4:
df:44:7a:24:9d:cb:b2:dd:53:c9:c9:cd:d8:c5:de:cb:6c:7f:
92:47:1a:0d:1c:60:ee:e2:56:29:83:01:be:b4:d3:7e:93:10:
26:9e:02:59:21:b6:f7:e1:bc:ce:72:0d:3b:6c:5e:f6:de:f6:
cb:29:a0:42:c0:22:93:32:e4:ec:61:f6:63:86:b2:a0:72:45:
4c:96:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:26 2026 by rpki-client