
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa
File: 65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa (raw, json)
Hash identifier: 1aq62xKH3MKs5nM3Lvt7O3aOxii5hmZ2tkLGhNMRzjQ=
Subject key identifier: 47:69:09:C1:4E:20:72:2B:C8:B1:6C:F0:8C:56:58:00:E2:71:80:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D492A438B2B372C7313E3F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 397210
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:43:8b:2b:37:2c:73:13:e3:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=3522ead1-20a1-464f-ba4b-0f2ea80971c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:57:d2:1b:ca:be:8b:19:f0:30:bd:77:d6:
b0:fe:7f:4c:d6:df:97:4b:5c:3d:bf:46:0a:47:f4:
32:61:7e:2e:b8:d0:42:f4:b2:79:24:52:95:6b:42:
82:66:fa:7a:b7:63:07:81:3c:43:6a:b9:b1:22:f1:
84:47:c7:25:5d:e1:78:61:fe:b2:d6:a5:79:31:bf:
5f:78:45:c1:f6:bf:3d:1b:de:d9:1b:71:46:48:9d:
a6:b2:be:4d:38:a1:30:7d:e9:4c:d0:2f:94:09:ab:
00:1d:75:74:c9:3e:4a:1e:96:a0:e0:2c:a2:a1:b8:
12:11:e7:e5:0a:15:2e:81:93:6b:ba:31:b5:62:1a:
31:4d:da:91:74:9a:f7:57:0c:3b:51:fe:df:65:77:
bb:73:74:44:2f:a3:ac:92:d1:17:6b:b1:f2:22:ee:
b8:d7:7d:e1:d5:cb:f9:08:92:97:b3:14:1a:e1:60:
1a:c0:1a:93:66:84:3d:cc:e4:ee:be:37:e0:3c:bf:
5a:43:55:6c:d2:4e:b4:f8:53:9d:2e:98:1c:a4:95:
b1:4b:33:1b:e3:02:38:ea:0d:7e:94:0d:35:51:5f:
62:6d:dd:1d:89:82:f7:0c:01:85:06:b6:15:2e:df:
6e:7f:3b:14:a9:db:fb:ce:e3:7a:ac:49:ab:21:b1:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:09:C1:4E:20:72:2B:C8:B1:6C:F0:8C:56:58:00:E2:71:80:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:fd:b1:f5:7e:9e:3b:8b:37:85:ea:cd:44:6a:60:1b:9d:10:
7e:43:e8:c5:fc:03:c9:30:5a:14:d0:ee:48:82:68:1d:84:17:
67:f6:c6:b3:55:97:c4:3c:ba:88:ad:a1:d6:1f:24:93:8b:fe:
72:99:6d:9e:52:71:3b:66:3b:34:c3:dd:a1:e1:7e:a0:a9:19:
39:52:cc:8d:f6:09:4c:0e:6f:a5:0e:91:34:e7:63:af:ad:e3:
bb:fd:13:d4:26:7c:17:17:0b:6f:ac:a1:37:df:06:00:08:ea:
02:99:d0:0a:06:0f:21:cd:dc:b1:de:24:1b:44:13:90:60:22:
95:ac:79:fb:d8:c7:3c:22:fd:7c:47:2a:a7:ca:bf:71:88:ab:
e2:74:5c:b3:18:58:76:8a:ec:62:ea:99:87:d3:dd:34:27:69:
b5:62:89:eb:8a:a0:d6:6c:1f:fc:eb:bc:a4:e7:39:06:d1:b9:
a6:44:7e:61:46:42:17:67:4f:44:bc:ed:7d:26:5b:db:e9:2b:
e2:af:39:bc:24:42:18:53:a1:6d:78:83:33:6e:6e:f3:dd:6b:
12:1c:a2:1e:6c:f5:bc:7f:4f:74:aa:5c:07:fb:be:4f:84:a4:
75:2e:0b:3f:a4:b8:9e:f1:73:5c:36:ad:24:37:d6:6e:ec:ca:
4a:b0:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:15 2026 by rpki-client