
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84283927-2f32-350b-a76c-3c24bf11265b.roa
File: 84283927-2f32-350b-a76c-3c24bf11265b.roa (raw, json)
Hash identifier: z4KKIAkt/VfjACyoYBUdxPCM+XHgZ87SV9ZuChCtkao=
Subject key identifier: 41:94:5F:BA:72:60:D7:F4:DE:1E:EB:11:EA:E6:8E:40:8A:06:9C:3B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D46B120E0A4873C854A08F300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84283927-2f32-350b-a76c-3c24bf11265b.roa
Signing time: Tue 24 Mar 2026 15:45:03 +0000
ROA not before: Tue 24 Mar 2026 15:45:03 +0000
ROA not after: Mon 22 Jun 2026 15:45:03 +0000
asID: 396604
IP address blocks: 192.42.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:46:b1:20:e0:a4:87:3c:85:4a:08:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 24 15:45:03 2026 GMT
Not After : Jun 22 15:45:03 2026 GMT
Subject: CN=b33568ee-bc31-4f52-a7ab-67e77bfb5c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:b9:2b:10:2b:bb:8f:19:bd:e2:42:e2:5a:
d9:cf:e8:0b:84:c1:db:af:2b:2f:bd:33:69:52:d0:
00:a4:18:0e:55:a0:ef:46:1a:22:de:65:74:a1:0e:
af:94:75:cc:03:11:7a:3b:05:51:38:8d:5e:d7:40:
a4:00:0f:3a:cd:6b:d1:3d:80:d7:f6:2b:16:d8:e4:
6a:f6:c6:67:7a:e1:ee:99:b1:28:7b:1b:aa:d7:be:
40:29:56:8f:36:e2:5f:cf:a7:f4:6d:37:27:38:90:
72:86:6b:2d:e6:2f:52:0c:6c:88:bd:ec:60:c6:aa:
62:ff:59:0e:4a:83:26:f8:f6:bf:59:a0:b4:77:ad:
cd:77:fa:79:cd:42:d7:3a:11:99:86:79:c9:ce:98:
f0:10:94:8a:88:7a:d6:fb:c1:8c:d9:2e:62:87:b8:
e3:e8:b5:f1:70:15:d9:d3:48:ac:e0:0c:ec:44:1e:
c1:db:7a:d7:e4:28:b1:89:2a:e7:b2:ff:e9:7d:37:
7c:65:6c:cc:35:b6:03:98:1c:76:5e:dd:93:52:7d:
e7:26:8a:cb:e5:8b:57:8c:48:c7:04:19:79:2f:3e:
97:78:a8:68:37:38:d6:d1:9f:60:68:8d:5e:1d:56:
e9:56:8f:11:17:32:41:e3:87:0c:d3:35:51:39:14:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:5F:BA:72:60:D7:F4:DE:1E:EB:11:EA:E6:8E:40:8A:06:9C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84283927-2f32-350b-a76c-3c24bf11265b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:d7:38:e5:b3:c3:34:41:8f:45:7d:5e:00:a2:3c:27:04:85:
ef:b9:9c:b0:5d:b5:76:ba:69:91:c8:73:38:2d:0d:a4:3d:00:
43:57:da:06:13:d7:ad:8f:ee:05:15:04:2c:77:11:c5:bd:49:
18:46:da:e8:02:c9:39:76:54:63:2e:af:71:29:df:39:06:b9:
72:36:bb:0a:33:56:db:7d:08:0e:78:5a:a4:13:d1:27:41:c8:
3e:2a:4b:05:01:1a:49:e4:44:87:b7:43:29:fd:7e:27:b8:28:
99:8b:ee:22:3a:10:56:c6:8c:d2:1e:86:e0:10:a3:09:3b:34:
00:5c:e9:50:9c:64:59:78:32:97:8b:ec:2e:25:4e:27:d2:e6:
cb:fb:21:45:9c:4c:6b:da:d8:cc:d4:4f:6e:b0:ce:f1:52:00:
40:e0:dc:8e:ed:fc:72:78:c4:6f:43:65:4a:e8:35:58:21:25:
14:59:8d:31:51:42:b5:6b:d2:57:8d:88:de:3b:4a:ef:02:fd:
66:28:bf:49:31:e3:e3:58:2c:b8:13:f1:3e:75:a3:6c:b5:be:
8f:d4:db:17:d1:fb:56:fa:13:ce:b0:2d:24:ec:e5:01:11:78:
73:f1:8e:59:c7:da:dc:b2:cd:94:e3:c9:7b:4a:db:a7:b1:00:
64:97:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:10 2026 by rpki-client