
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa
File: 8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa (raw, json)
Hash identifier: YyJKXz6Vk+PUKguvEH/8bIM9tlJkV2fxVUsx3SJF2dE=
Subject key identifier: E2:6D:C3:F9:68:98:15:3E:D9:4B:A4:A2:B3:10:EC:06:D4:ED:29:35
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3DFF8D3635340C3B7C2BE9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 397212
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:8d:36:35:34:0c:3b:7c:2b:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=88487c6a-01b5-40d2-ba3d-3b9e50d8ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:6d:77:06:ae:76:91:ff:b1:ef:22:bd:e7:
49:ef:ca:6e:8d:11:dd:f3:a7:f0:b5:cd:48:67:a4:
46:27:4c:d7:fe:a8:ac:ed:cf:34:69:0b:b8:ac:d9:
84:52:b1:2c:15:9d:e2:c6:a1:c9:a3:5f:ce:53:a6:
69:c1:7c:bc:6e:0a:33:f5:e7:c6:5d:7d:c6:b6:be:
30:38:ee:d6:5b:f7:da:e7:60:1c:5a:14:99:cc:1f:
c7:e7:1b:aa:5e:ab:79:bf:31:0f:cc:75:d3:1c:c5:
85:08:de:ed:0b:75:04:4e:3d:36:fa:82:e8:07:a7:
2d:33:97:80:49:65:55:c8:8f:d2:4c:eb:bf:bd:85:
e2:c9:4a:2e:73:0c:d0:08:7a:dd:99:f9:ac:bc:fe:
b3:c4:d3:79:9d:6e:12:60:c0:28:3f:f5:61:b1:01:
fc:2d:1c:2e:45:5a:f0:16:d9:24:06:0b:f5:ea:d4:
48:60:f9:92:e8:08:19:3a:ef:25:37:a2:55:5a:3a:
b5:20:d7:fb:f2:cd:f6:49:d5:93:b5:31:43:2a:fd:
6b:6a:47:c6:b1:8d:7b:54:49:eb:c7:04:e8:31:74:
66:94:a1:c8:68:f5:bf:a2:ce:73:db:56:6c:de:20:
bd:e3:87:5b:c9:3c:71:3c:19:f3:d7:a4:8c:08:79:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6D:C3:F9:68:98:15:3E:D9:4B:A4:A2:B3:10:EC:06:D4:ED:29:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:23:81:32:5c:b9:29:b2:f1:b5:36:08:5d:3c:67:07:44:f7:
0d:f9:e9:ec:b7:f4:ae:9c:db:c2:33:9d:7a:26:21:57:fa:e1:
bf:9c:12:ae:f8:48:f2:d5:e7:ac:cc:5b:00:fd:58:a8:44:1d:
0f:01:3b:84:de:5a:43:22:4e:d1:0b:41:52:95:b1:03:71:0c:
05:80:ea:89:c7:d5:28:92:2e:85:65:12:3d:d6:4b:a5:8c:aa:
fd:f5:5b:a0:ae:67:9f:a9:1b:84:74:82:ee:57:f7:5a:e5:3c:
9d:c5:6d:78:a1:10:21:b9:85:5e:d6:7b:cf:e8:0a:e6:d9:b1:
f1:26:71:51:b4:1a:ff:f1:a2:92:ad:30:4a:cc:50:b3:b6:fc:
1e:e4:47:07:7c:20:cd:50:b5:93:97:05:4d:b8:10:08:ff:e1:
38:4c:07:59:d8:cf:02:ff:6b:79:ed:eb:10:88:94:59:79:12:
12:7a:0f:99:74:ff:2a:3c:8f:d5:dd:02:ed:53:63:4c:17:ca:
57:fa:d2:43:40:97:43:b2:2e:53:dd:b2:0a:b2:af:be:01:8e:
1c:c6:51:c5:0f:ba:5a:20:26:96:17:65:48:56:3b:90:e2:bf:
bf:15:e6:72:70:fb:ab:88:8a:39:38:ec:fb:18:a1:4d:df:f7:
8e:a2:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:21 2026 by rpki-client