
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa
File: 6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa (raw, json)
Hash identifier: VK2Y6Y8tJo4CEMdY/WHV5A9b64WUpBQkhdXidoQUf3M=
Subject key identifier: 6A:3E:94:B0:CF:7F:73:8A:AB:61:FA:FD:B8:98:EF:BD:51:06:66:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3E000F6F3FDA9006A8C61D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396655
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:0f:6f:3f:da:90:06:a8:c6:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=d9e18375-780a-4ff9-bcca-c4ae697990ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:9f:46:be:10:67:9f:5d:05:a3:81:c7:03:
3c:fa:00:65:60:53:e0:76:98:8f:b1:64:21:3f:4f:
fa:ee:65:71:43:09:de:3e:45:a2:74:67:25:f8:cf:
09:d0:d6:8c:d1:79:f0:a1:f3:46:e4:54:23:b2:38:
d7:e0:0e:49:9f:e9:48:52:a4:44:a6:8f:0c:0e:fe:
9e:2f:26:d1:9a:98:cf:43:4f:11:e9:c3:ba:82:66:
56:31:c9:f8:9f:79:de:dd:d5:87:11:3d:fb:c5:63:
9a:49:8c:78:0b:3a:04:b5:da:c9:70:eb:56:41:b0:
29:7e:80:93:07:11:0d:2c:88:55:cf:d2:e4:a4:95:
48:aa:e7:d3:19:80:66:a0:40:e0:86:d1:99:75:e1:
10:1d:c4:17:92:51:29:90:87:28:e7:19:e7:6d:10:
2d:0a:63:b3:6d:e7:7e:e6:7c:59:e0:a5:a8:65:94:
ac:b1:71:89:ca:53:9c:6d:87:f1:79:c9:89:79:31:
08:60:10:02:bc:80:ba:6d:d4:f0:fa:e1:91:d2:e6:
51:78:e7:2a:21:2c:ec:db:ee:1a:b2:9e:35:45:c5:
37:85:de:33:e0:cd:6a:58:d9:2c:da:f0:ea:5b:ae:
b1:1b:e8:4d:fe:3d:4c:f8:b6:6f:22:e9:65:6c:29:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:94:B0:CF:7F:73:8A:AB:61:FA:FD:B8:98:EF:BD:51:06:66:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d52a2a3-1c55-3a40-8d8d-7a2fd2dc36ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c4:6b:dd:28:5e:97:64:68:dc:98:67:f9:db:e5:64:59:fb:
55:fe:1b:1f:cd:e9:82:0b:f3:a1:ca:6b:f5:a4:3d:9c:4c:42:
72:4c:15:f0:bc:8d:bd:36:3a:89:c6:38:58:5c:f7:f0:18:4e:
f4:d4:93:fe:08:9b:c4:b3:35:36:78:f1:ef:cf:ec:45:c8:91:
08:c9:71:b9:73:0f:d5:21:43:d6:90:5e:d5:b4:38:9d:ce:be:
8b:3e:e0:7d:4d:a9:c9:2d:8f:78:af:38:f6:aa:d2:5c:63:28:
95:62:40:83:2c:6a:e7:3c:a7:22:f2:d1:06:8e:c0:03:32:a0:
49:82:2e:50:6f:c3:12:02:82:7a:6b:da:40:87:22:3a:f1:73:
9d:cf:c4:09:aa:7b:74:32:b0:6d:37:36:db:ea:07:0b:83:d3:
75:7e:a6:45:26:1d:61:03:a2:98:11:0d:a7:f3:07:8e:e5:17:
9f:7b:31:2d:fc:8f:b8:f4:2c:43:33:40:64:6f:9a:3b:0d:c5:
de:34:4d:d8:a6:d8:a4:8e:7d:9b:71:5a:ac:3e:f2:c2:37:d3:
05:ce:4b:57:75:11:ba:82:ef:95:29:0b:2b:00:22:da:2e:67:
11:02:f2:d8:fa:a0:4f:ce:c5:90:67:f2:08:8e:9a:d8:00:aa:
69:38:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:12 2026 by rpki-client