
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8232e212-a0a7-348c-abde-7981be234f67.roa
File: 8232e212-a0a7-348c-abde-7981be234f67.roa (raw, json)
Hash identifier: /YojJ+9c1uJAUWjXwhV5WJVOcNUIb75D56UlmzLqE7A=
Subject key identifier: B9:16:08:CB:FA:1B:1C:1F:77:C9:F8:F2:FA:5F:A9:ED:BC:A1:AD:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F225D1D6ED942F3405A76A200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8232e212-a0a7-348c-abde-7981be234f67.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 36622
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:1d:6e:d9:42:f3:40:5a:76:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=b4da2b52-3726-449d-8686-ece3ed0fb314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:94:36:4d:1a:3f:0b:57:12:01:ae:34:e8:
b7:a9:ea:99:8c:8d:ed:da:9b:8d:6c:57:6a:d5:15:
60:46:e8:a0:5b:2e:c7:c4:c4:63:60:7d:22:bb:da:
2f:7a:b4:41:25:b0:bc:7c:11:36:75:10:f6:9c:b5:
37:c2:6f:90:55:3b:bd:e1:78:bd:ff:8c:ef:92:bc:
e7:0c:96:cc:09:3a:90:dd:0a:92:c1:38:0d:ef:9d:
7e:69:60:9d:aa:ef:2d:db:af:2d:cb:33:62:e7:52:
b5:42:97:d7:f0:a1:b1:13:86:79:0d:ce:4e:3b:4a:
58:88:d4:a2:31:b1:cb:32:bd:7b:56:64:2f:a1:6b:
ed:88:0b:ea:93:bd:72:a5:72:c9:a3:3d:9d:92:a2:
dc:77:d1:5d:e9:ad:41:a5:48:9d:fa:63:2f:00:4c:
96:5b:86:de:be:bd:61:f0:65:9b:58:05:80:12:ad:
e6:95:49:9e:70:07:50:30:70:7b:c6:2c:b5:bf:3b:
ca:26:2e:99:54:7f:42:33:81:5b:65:f6:90:cc:fa:
26:0b:18:71:92:4c:32:ec:2e:a5:17:af:59:8b:8e:
ad:ac:03:ca:1a:ea:6f:fb:d3:82:48:87:8f:70:29:
35:af:af:b9:7c:df:4d:a8:50:29:2b:6c:80:75:32:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:08:CB:FA:1B:1C:1F:77:C9:F8:F2:FA:5F:A9:ED:BC:A1:AD:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8232e212-a0a7-348c-abde-7981be234f67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:86:8b:f5:c2:df:13:34:4c:e9:d2:0a:a4:ad:d4:d8:3b:b2:
36:20:86:76:c2:af:7d:b4:52:28:ce:09:d1:77:d0:6a:a5:a0:
de:5e:22:20:3b:98:88:6a:fb:b1:bd:98:60:3d:85:7f:d3:6b:
95:ac:d7:e3:36:c8:c0:50:31:01:2f:7a:d5:13:aa:57:d2:8d:
7d:16:9d:d5:fd:16:69:b0:7f:46:43:35:67:9e:cb:42:56:8a:
2e:ae:d2:06:33:ba:80:46:31:31:d1:ed:6e:89:47:67:16:36:
11:b0:1d:08:96:c1:86:40:8e:e9:39:83:6f:9c:1a:23:14:14:
c6:29:0d:20:1b:a7:91:0b:ac:71:fb:65:21:e9:7e:8b:6a:49:
3f:8b:7a:29:8d:15:d9:87:5b:76:3c:9a:b2:ef:7c:15:0c:d4:
a8:81:b0:c0:7c:00:64:f2:1a:8d:29:24:14:32:b6:18:ae:1b:
c1:57:f5:c9:8d:77:9f:c8:4f:8a:55:52:1a:b7:55:45:25:bc:
26:54:3c:3c:bd:90:f0:81:3d:d2:15:09:af:74:82:04:93:b9:
5e:2b:2a:7d:c7:e4:94:49:2f:63:02:cd:0e:e4:45:aa:62:34:
23:54:e9:8a:15:fd:73:3d:82:36:ec:c7:bd:f8:e5:62:33:e1:
8f:44:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:58:52 2026 by rpki-client