
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/681d5111-1bb5-312b-9238-cd1dfb883d47.roa
File: 681d5111-1bb5-312b-9238-cd1dfb883d47.roa (raw, json)
Hash identifier: BpfySwBzFO7qBtnhjHzXPeE+eBXMeIose0ZqmVZnDuk=
Subject key identifier: A6:61:AF:43:4E:50:47:E2:69:99:F6:67:8E:D8:18:EC:40:23:B2:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D46B11D2A4DBF593554278D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/681d5111-1bb5-312b-9238-cd1dfb883d47.roa
Signing time: Tue 24 Mar 2026 15:45:01 +0000
ROA not before: Tue 24 Mar 2026 15:45:01 +0000
ROA not after: Mon 22 Jun 2026 15:45:01 +0000
asID: 396583
IP address blocks: 192.42.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:46:b1:1d:2a:4d:bf:59:35:54:27:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 24 15:45:01 2026 GMT
Not After : Jun 22 15:45:01 2026 GMT
Subject: CN=32ef4eeb-440b-4889-913a-afb50b9a638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:33:d0:85:ff:b0:36:b7:c9:7e:7e:4e:38:
37:7a:b5:70:b4:bf:96:79:f8:fa:a3:88:2c:ec:ac:
f5:a4:30:73:26:e6:4f:c0:92:aa:fe:5e:1a:5c:de:
17:d8:72:f8:cf:58:ed:8d:08:c5:06:59:a4:b6:d1:
01:70:07:33:85:e0:9b:b8:30:da:66:92:f8:35:c4:
9c:01:91:f2:96:68:4b:b0:24:a7:1e:a4:fc:fc:a1:
01:dc:f4:c6:f5:c3:d8:8f:be:54:37:f2:66:9f:ac:
a1:a8:16:7b:88:c1:55:a1:85:d6:07:0e:84:ea:2d:
79:97:04:fc:38:c0:84:a0:1c:ca:dc:4b:3d:91:77:
a0:cc:78:bd:03:bb:e1:6a:f5:fd:0d:da:91:d8:70:
00:22:35:64:c8:5e:70:7b:b0:e9:9e:7f:c9:f0:f5:
b1:76:13:e2:b2:39:f5:81:8e:6c:b6:c1:f2:d4:30:
d1:72:c1:6c:12:a6:1d:02:ac:59:21:e8:83:20:a3:
13:f1:13:cd:a6:f7:fe:72:5b:d5:0e:1f:40:1f:b7:
e8:a1:41:9f:f6:47:9b:72:ce:f8:8f:7d:dc:c7:16:
5f:1d:5c:33:44:25:6d:72:3d:92:e1:a1:7f:d2:0c:
46:e8:78:74:e8:7d:2b:06:fa:68:82:6f:e4:0c:ce:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:AF:43:4E:50:47:E2:69:99:F6:67:8E:D8:18:EC:40:23:B2:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/681d5111-1bb5-312b-9238-cd1dfb883d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:2a:e4:94:5e:f8:57:56:c6:d7:ea:36:d9:f1:c4:84:ba:94:
96:4c:aa:f7:8e:82:74:3e:34:38:f0:53:c4:34:98:e8:14:c1:
a1:d0:93:7d:39:f2:d6:de:18:72:61:d3:74:dd:5d:1e:61:90:
0e:87:c5:56:45:5e:d5:d3:e3:e0:cd:c2:c6:1c:56:f2:c9:38:
ee:f9:45:97:4c:c5:29:1b:e5:78:58:6e:02:ea:6d:32:13:49:
f9:02:fa:19:05:3e:d0:90:70:cc:28:e3:00:1d:03:86:92:88:
f1:04:ec:73:8c:ca:ce:d6:16:d4:29:ad:fb:c4:5d:fc:de:1d:
ba:cb:6b:7b:54:0d:56:50:93:28:54:25:72:75:2f:c4:77:2a:
b4:0e:48:b6:fe:8f:8d:92:75:dc:70:1a:b3:df:93:20:29:a5:
57:ed:64:9d:bc:39:30:7e:4e:9b:1d:df:9a:44:ce:58:69:c5:
ae:97:31:2c:1f:aa:25:35:63:d8:f6:fe:38:cc:73:13:2f:ea:
07:68:1c:b3:4a:a6:63:78:a8:2e:f9:ef:7c:a9:4d:40:75:db:
9b:10:fc:66:27:4f:c0:8f:f6:72:40:97:21:0e:c4:53:38:11:
40:25:9c:d1:da:1e:e9:37:e4:cb:1d:68:84:cb:ee:4e:ac:b2:
c2:71:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:59 2026 by rpki-client