
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa
File: 9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa (raw, json)
Hash identifier: 58a2ZbiCs2fe5OM+E3wVJUpecLhhA1Baedjl5V8Xmas=
Subject key identifier: 76:73:86:62:22:02:D9:15:A5:8F:97:6B:D0:E0:E5:7E:A9:0F:FF:44
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D2A74E532CD4D6C9DC3705400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 36630
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:e5:32:cd:4d:6c:9d:c3:70:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=b06147d3-b8da-4ae5-bce9-b4b5f5285c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:b0:20:cf:60:e3:8f:cf:53:bf:ae:25:bf:
ba:4e:dc:3d:b8:7e:e8:37:1e:df:90:69:cd:41:2a:
ee:40:44:a4:59:6d:c3:0e:79:e0:0b:5d:ef:21:0e:
42:6c:fa:eb:ec:04:6d:f2:ae:d7:cf:ae:90:1e:06:
0e:bb:d4:36:ae:2c:8d:29:3c:a2:b0:42:57:5d:06:
fb:1d:c0:a1:6e:20:a0:d6:cd:8c:9d:73:b7:62:af:
9a:29:cd:8c:c0:7a:bc:6c:db:8e:3f:7d:d4:f6:00:
23:3a:44:0a:b7:ad:62:a3:4a:c7:2e:53:e5:e1:05:
ab:bc:cb:34:24:1e:0c:ec:20:2d:ef:da:9a:43:f5:
65:08:35:6a:d9:10:13:9b:1c:c6:6d:1d:24:58:78:
42:3a:3a:a4:90:7a:ee:e9:2b:4d:74:c9:69:c3:10:
09:7e:45:69:07:dc:af:2d:ba:4b:84:7e:a6:22:fe:
d3:cd:68:9f:12:a9:b4:78:0d:06:9a:a8:42:5c:00:
50:96:b5:11:a8:e6:8a:85:85:68:57:b6:cb:cd:d5:
70:de:72:e5:bb:da:2e:b5:50:0d:89:c6:5e:af:ee:
33:67:9e:88:af:40:6a:0e:c3:99:66:61:fe:d6:57:
02:d4:82:80:5b:84:12:ac:a6:3a:a0:53:32:37:09:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:86:62:22:02:D9:15:A5:8F:97:6B:D0:E0:E5:7E:A9:0F:FF:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:68:d0:4b:c7:c9:97:01:ef:a8:40:20:fa:08:51:ed:b1:4b:
5a:9a:ee:61:07:d3:14:f2:49:fc:04:2f:0e:b6:e0:63:f5:39:
f1:7b:8c:38:06:69:cd:89:93:28:0e:8c:4e:9e:4b:a5:1e:3e:
91:4d:75:ba:1b:6f:bf:6e:6f:2b:c6:7c:c0:48:3e:00:97:d6:
12:91:51:48:9b:a7:b9:bf:48:28:3e:bc:5e:75:f7:06:e6:bf:
1d:83:16:42:55:80:32:be:08:4d:1e:f9:06:41:1e:54:c2:85:
d5:29:df:cf:9b:e7:87:74:87:81:c7:ba:d5:a2:33:67:53:92:
b1:0a:06:a5:42:ee:a9:6c:52:67:69:11:0c:cf:77:0e:ac:fa:
38:30:43:a0:a3:fa:56:c7:4a:2b:3e:4a:03:33:ee:e8:54:fb:
af:0c:14:71:16:3c:93:f2:ac:70:00:ce:9a:93:7f:ee:e8:0f:
b1:db:10:49:7b:89:9e:67:3e:1e:fa:a8:aa:d4:ce:12:bc:e5:
fd:51:e7:4a:0f:d5:3b:80:d1:a7:68:52:8a:bd:e9:b1:aa:6c:
61:02:ef:25:51:56:a6:9c:5f:37:ac:72:a4:5e:fe:0c:77:34:
05:5c:4a:3f:75:89:3f:c0:fe:af:aa:32:d5:34:26:39:44:ae:
d1:eb:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:42 2026 by rpki-client