
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efe2f21-4750-3d18-a990-3f11a6c74528.roa
File: 8efe2f21-4750-3d18-a990-3f11a6c74528.roa (raw, json)
Hash identifier: obFKH0geJTRDO+aYxndhEQqpno46Dnntx2BprZXucew=
Subject key identifier: 62:69:E2:62:CA:D8:60:A3:78:3A:0C:9E:4C:CA:D5:9E:1C:26:E4:8D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F498A322337958130B52EA0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efe2f21-4750-3d18-a990-3f11a6c74528.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36625
IP address blocks: 192.35.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:32:23:37:95:81:30:b5:2e:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b727ac34-186d-4f89-8159-b5fa26def02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:df:66:7b:1d:7d:23:e3:c5:0c:bf:78:6b:
10:1a:ca:a3:da:56:56:a2:06:e1:6f:25:f5:65:3a:
6e:d6:9a:a0:bb:d8:71:4b:61:38:1d:e4:7a:9d:71:
ca:2b:4a:9b:3a:f5:82:77:8a:e0:2a:cc:1c:0d:0e:
cc:a1:f7:12:70:5b:60:c8:d1:b2:78:7b:01:af:66:
01:be:6f:44:6e:e7:d2:21:6b:27:03:e1:a3:59:5a:
70:b9:c8:8a:bc:09:7a:da:73:b8:34:e3:c2:75:51:
c1:b9:69:82:7f:e9:1f:8f:a6:77:1c:2f:eb:13:32:
0c:91:6b:67:21:1f:72:dd:ae:71:f3:9b:ec:3b:84:
4e:e7:6f:a1:42:b8:fe:68:56:2c:33:d6:dc:c5:d2:
c6:85:b8:ab:ed:84:cd:06:2b:3d:b2:8d:4d:35:04:
ca:0c:4f:9c:1d:ac:4a:6c:83:5b:63:b8:a4:1b:20:
f6:23:e5:16:02:66:5b:9d:a5:ed:8e:98:a2:30:34:
d8:da:7b:c3:1b:85:58:93:07:81:0e:f9:8d:62:c0:
c5:73:f0:0e:98:b7:0c:06:38:0d:29:33:41:ef:5c:
1a:23:2b:0c:dc:ac:c2:69:2e:48:64:ce:7a:f2:4a:
a0:62:35:a7:90:34:f7:6b:8e:24:cf:70:6a:83:84:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:69:E2:62:CA:D8:60:A3:78:3A:0C:9E:4C:CA:D5:9E:1C:26:E4:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efe2f21-4750-3d18-a990-3f11a6c74528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.35.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:90:9d:49:d4:bd:46:1b:ee:07:29:ae:12:ef:7b:f9:2e:e3:
86:e7:2f:46:be:cf:41:bc:e9:57:c8:f6:9c:3d:39:88:f9:a7:
6f:65:6e:c1:f5:25:9c:a9:75:f3:cc:61:9e:5e:3b:e1:b0:0d:
74:b8:f3:c3:1d:a8:96:51:c6:4f:b5:57:89:5c:b6:aa:2d:78:
d3:01:4b:ba:ba:6f:41:16:20:02:f8:ad:0a:e5:a7:fe:f2:d0:
25:f3:49:b7:55:dc:ca:26:53:c8:6b:50:ca:1c:f3:60:a7:d9:
b3:aa:04:0a:f8:ca:e8:49:88:66:cf:81:39:3e:be:e4:96:7d:
c3:da:75:85:6b:6f:80:07:49:e0:0e:bc:3a:a7:04:22:34:5c:
15:1c:bd:c6:04:ea:7e:3e:c4:22:87:e5:fd:61:65:7e:62:c5:
a4:d1:38:e2:d8:fe:1e:b8:66:8e:0d:4c:4d:b2:e7:7f:71:98:
07:7e:9a:41:e8:48:9b:18:06:ed:91:2a:ec:81:a3:90:09:50:
df:22:5a:a7:dc:dd:ad:e7:e8:8d:ee:b1:dc:1b:a7:4e:20:80:
ff:10:bd:f5:6a:10:05:f6:61:77:9c:d5:95:f2:3f:0e:44:13:
25:69:70:12:01:34:5c:6c:85:e8:d4:ae:27:fe:0d:b5:44:c6:
4a:e9:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:59:33 2026 by rpki-client