
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840fcf09-b8b5-3db5-b23e-746e419796d4.roa
File: 840fcf09-b8b5-3db5-b23e-746e419796d4.roa (raw, json)
Hash identifier: JBmPNFH/W0g2fGR/Cr8xHZ7kWvisw0HB1qUfZA0d5Gc=
Subject key identifier: 04:69:B7:4D:0B:13:B3:6A:CD:50:D4:7D:C8:2A:CC:5F:21:A3:C2:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D8D8FF5A9AD626C5F256ADB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840fcf09-b8b5-3db5-b23e-746e419796d4.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 397199
IP address blocks: 192.48.79.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:f5:a9:ad:62:6c:5f:25:6a:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=b3a9c7f0-afbf-4fe9-bd6f-86cd4d28e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:17:e4:d7:e4:75:3f:99:78:70:24:15:d4:fc:
1c:7f:ff:da:91:8d:e1:02:38:5d:58:20:20:8c:c0:
d9:80:bf:b5:f7:bb:be:60:87:57:d0:e6:0f:71:9f:
5a:3b:fe:b6:b8:fc:a3:8d:20:f6:15:2f:eb:a0:1f:
a3:bc:d5:c9:c9:42:96:61:93:ef:93:dc:c0:c5:f9:
c1:cc:c0:a5:88:9e:d4:b3:e9:7a:0c:e5:07:45:e6:
08:76:96:10:fd:00:6d:4d:5b:1a:a2:82:77:39:4d:
e9:85:4e:8f:fa:17:6f:f7:33:64:72:e7:54:d4:c8:
b6:7d:86:0e:23:10:43:2c:00:cf:e1:67:be:1b:81:
47:d9:98:74:f3:11:f4:a7:aa:41:4a:23:5c:be:47:
4a:24:a9:b9:b2:bc:ee:ae:74:e1:c6:90:4f:a2:f4:
59:9f:34:39:71:77:85:e3:9d:3b:7e:82:71:50:e7:
73:6e:0a:d3:4f:b0:37:c2:3f:19:81:6e:9c:41:48:
9f:c8:64:3e:d0:2e:59:5b:ee:1e:54:db:28:78:17:
22:28:09:64:1f:bd:7d:3f:4e:ec:13:0d:c3:c7:e8:
ea:83:b1:50:f9:f6:38:92:d5:a4:2a:69:3f:73:ed:
c0:8b:08:52:1e:33:2f:40:e2:57:e7:db:69:61:a4:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:69:B7:4D:0B:13:B3:6A:CD:50:D4:7D:C8:2A:CC:5F:21:A3:C2:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840fcf09-b8b5-3db5-b23e-746e419796d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.79.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:37:1a:dc:b6:e5:43:51:bd:9e:89:37:8d:eb:1a:da:cd:49:
9e:80:d4:83:d0:65:f4:17:84:3d:57:38:20:58:4d:e9:28:8c:
7c:a9:8f:f3:02:3b:6a:ca:51:01:8f:e3:93:71:8f:27:87:a6:
8c:67:9d:90:64:d2:60:2a:4f:f8:b9:f6:ee:b8:6f:79:63:3f:
66:3a:74:1b:cc:b8:c5:55:69:29:48:bf:d2:05:0f:e3:60:5c:
9f:bb:db:0d:b5:a1:5d:69:e6:cf:bd:72:ad:46:07:87:5c:83:
3b:6a:ce:4f:88:30:77:88:ad:94:44:72:fd:37:f7:04:35:e5:
25:11:95:ee:b3:3f:40:48:21:4a:b1:3f:85:3f:64:8c:95:db:
cc:83:e3:26:e0:95:1d:b0:f5:83:93:ac:87:35:67:97:eb:dd:
a9:c8:5e:e9:11:2a:04:96:18:d9:ea:8f:a9:b2:6a:58:b6:00:
35:09:22:3b:95:55:26:63:2c:53:fa:ff:2a:f8:8e:a5:27:3f:
5c:9c:9f:7b:2f:70:ca:eb:60:6a:26:f8:13:54:33:3f:1b:6b:
b1:75:02:7d:48:aa:41:65:94:f4:a5:cc:09:49:7e:a8:21:1d:
23:55:d7:d9:35:e9:17:ba:64:28:ce:a7:ec:09:7d:a8:31:10:
79:47:8d:a0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Nj/WprWJsXyVq2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
YjNhOWM3ZjAtYWZiZi00ZmU5LWJkNmYtODZjZDRkMjhlNzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRfk1+R1P5l4cCQV1Pwcf//akY3hAjhdWCAg
jMDZgL+197u+YIdX0OYPcZ9aO/62uPyjjSD2FS/roB+jvNXJyUKWYZPvk9zAxfnB
zMCliJ7Us+l6DOUHReYIdpYQ/QBtTVsaooJ3OU3phU6P+hdv9zNkcudU1Mi2fYYO
IxBDLADP4We+G4FH2Zh08xH0p6pBSiNcvkdKJKm5srzurnThxpBPovRZnzQ5cXeF
4507foJxUOdzbgrTT7A3wj8ZgW6cQUifyGQ+0C5ZW+4eVNsoeBciKAlkH719P07s
Ew3Dx+jqg7FQ+fY4ktWkKmk/c+3AiwhSHjMvQOJX59tpYaQK7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFARpt00LE7NqzVDUfcgqzF8ho8JQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQwZmNmMDktYjhiNS0z
ZGI1LWIyM2UtNzQ2ZTQxOTc5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDBPHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCqNxrctuVDUb2eiTeN6xrazUmegNSD0GX0F4Q9VzggWE3pKIx8qY/z
AjtqylEBj+OTcY8nh6aMZ52QZNJgKk/4ufbuuG95Yz9mOnQbzLjFVWkpSL/SBQ/j
YFyfu9sNtaFdaebPvXKtRgeHXIM7as5PiDB3iK2URHL9N/cENeUlEZXusz9ASCFK
sT+FP2SMldvMg+Mm4JUdsPWDk6yHNWeX692pyF7pESoElhjZ6o+psmpYtgA1CSI7
lVUmYyxT+v8q+I6lJz9cnJ97L3DK62BqJvgTVDM/G2uxdQJ9SKpBZZT0pcwJSX6o
IR0jVdfZNekXumQozqfsCX2oMRB5R42g
-----END CERTIFICATE-----
Generated at Wed May 13 08:20:02 2026 by rpki-client