
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143bf1e-77d2-338d-be48-8fcf04455c1b.roa
File: 8143bf1e-77d2-338d-be48-8fcf04455c1b.roa (raw, json)
Hash identifier: zFCshM9gLWmI6lW1/qttLWLxkLQN6mt2Ha6zYlAcXUI=
Subject key identifier: 21:59:45:BE:5E:61:CE:BD:4C:2E:C6:B7:F5:CA:D6:9B:0E:EB:4A:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F093CE6CB14C0739C09473800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143bf1e-77d2-338d-be48-8fcf04455c1b.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 19836
IP address blocks: 192.42.93.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:e6:cb:14:c0:73:9c:09:47:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=84f98b06-191e-485d-8918-30db6c6891b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:23:91:5f:f2:8e:c7:ab:1a:df:f6:6a:80:
cc:16:45:ba:b6:f5:af:59:e8:21:2e:84:bc:24:19:
22:cd:73:04:9f:22:85:cb:8c:5d:80:55:76:7c:4f:
b4:b6:17:36:70:8d:e4:ee:d3:96:b8:34:df:20:1b:
ee:ea:34:8b:cb:22:36:27:d8:34:4e:21:b4:6f:d3:
20:c0:11:12:1e:3f:ed:4f:7b:f9:33:41:0f:8d:34:
ab:75:e0:f4:a4:36:fa:c4:45:a9:90:47:38:7c:d4:
18:94:01:2b:08:77:64:fa:f5:84:02:55:53:35:e8:
26:81:6f:c4:63:44:54:6c:b7:46:76:9f:a1:89:cb:
d1:fc:ee:b2:cd:c2:60:c2:d4:28:ac:e3:cf:88:22:
e2:80:9b:04:ac:89:94:3a:a6:ad:87:37:d5:0b:e5:
10:94:65:f1:13:91:a9:2a:54:c5:1a:44:00:ab:af:
8f:c4:d0:4b:01:e3:62:49:e6:00:ca:ae:93:d5:66:
de:a3:7c:77:5d:81:5c:bd:ae:27:4e:e7:e9:f4:68:
8d:c0:1a:e5:86:d7:00:a5:84:8e:71:54:6f:8f:cd:
d8:4c:03:b0:9c:cf:a3:b0:20:2e:27:52:28:1c:b3:
0c:fa:81:d1:8b:00:3a:f7:56:d0:94:65:87:d3:1a:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:45:BE:5E:61:CE:BD:4C:2E:C6:B7:F5:CA:D6:9B:0E:EB:4A:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8143bf1e-77d2-338d-be48-8fcf04455c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.93.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:92:ad:fc:39:f8:8e:4d:ba:19:29:06:5d:f4:06:73:58:b4:
a8:4e:91:18:f8:0c:a1:78:26:e0:e8:6f:f1:11:19:9a:c7:75:
d7:21:35:77:77:70:5b:bf:e8:20:bd:3b:8a:0e:ff:c0:cb:80:
c7:e8:ca:47:c1:33:ba:14:43:fa:d2:79:66:9e:05:3d:e3:18:
be:82:7e:53:96:78:99:10:af:71:6d:7d:3f:ae:5e:e2:5a:f8:
a8:bc:4c:05:16:dd:2b:f3:08:50:02:92:d4:85:4c:70:95:cd:
2a:4a:bc:3c:6f:f8:49:36:b9:77:0b:bd:a7:7a:2d:90:86:c6:
d5:e7:ba:5a:1a:24:de:85:e7:f6:03:34:28:59:c9:3b:23:93:
38:da:ca:b3:70:60:16:a3:a7:01:16:4e:cb:34:16:f2:19:0f:
c5:57:71:2f:3e:18:33:49:d7:d3:9d:c3:f5:c9:49:95:02:74:
ca:97:84:a7:53:65:78:2f:d4:5c:43:bf:44:7c:f2:11:90:5e:
ab:ee:3f:94:1a:4a:ff:9c:64:17:d2:4f:76:3b:53:53:a9:aa:
40:18:a6:d8:a4:8e:3b:14:d4:da:7a:f4:13:d9:d4:d1:94:ee:
8f:6c:2b:c9:2d:df:96:6c:fb:4d:b4:47:aa:50:45:46:a2:cc:
cc:42:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:26:54 2026 by rpki-client