
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c03e205-3788-3935-ba5e-2c2a84cdff8f.roa
File: 9c03e205-3788-3935-ba5e-2c2a84cdff8f.roa (raw, json)
Hash identifier: KkHZW91ybDo+pWdJsp4LG0yEFRDW0Wdi+gu+UPhFeC4=
Subject key identifier: EA:D4:1B:E1:24:07:E9:68:59:07:C4:7C:91:C1:0B:79:5B:3B:0B:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3E0013050B5F19D61BCFF100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c03e205-3788-3935-ba5e-2c2a84cdff8f.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396599
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:13:05:0b:5f:19:d6:1b:cf:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=89eb194c-9f65-4f7a-b968-79eebe13c43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:17:ed:60:e4:fd:59:a3:f5:d0:d2:43:3b:
93:70:6c:3e:20:67:a7:0d:d1:d9:73:4e:9e:87:db:
75:cb:6a:54:64:1a:11:f5:7b:11:28:2b:46:0a:a7:
ee:da:ca:fb:65:14:5b:09:eb:56:27:93:16:eb:50:
bd:79:e4:e7:0f:db:bf:c2:4d:a4:94:76:17:36:03:
0e:df:b5:ed:98:e0:3e:d5:ab:eb:21:a5:0a:38:32:
b8:dc:47:2f:67:05:9e:e6:98:96:3b:5c:d6:3f:c2:
5b:d7:eb:a1:77:3b:b3:1e:e9:95:d7:54:29:5b:dc:
fa:9c:04:12:45:07:a8:b2:08:53:92:e8:c4:7a:7e:
83:e7:0a:24:f1:b6:3e:38:ae:ad:f9:83:99:e6:04:
a2:97:34:d5:59:7f:0f:3b:28:ff:01:1b:b5:5c:a4:
82:96:2e:bb:d7:ee:03:8c:93:35:9b:a1:34:43:56:
e8:94:f6:e9:a7:a2:96:86:83:b9:5c:d6:d0:f5:94:
2a:d1:ca:4f:37:d0:a3:83:85:41:0e:23:ff:8f:2c:
3b:cd:39:0f:5c:bd:3d:13:15:f1:ee:8d:08:79:e9:
b3:27:95:f0:4f:6c:bb:40:73:45:fc:65:13:2f:ff:
e0:df:01:4b:73:a9:02:37:fb:d5:df:30:2e:0a:98:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:1B:E1:24:07:E9:68:59:07:C4:7C:91:C1:0B:79:5B:3B:0B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c03e205-3788-3935-ba5e-2c2a84cdff8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:f8:95:9d:74:25:89:cc:c1:46:f6:e7:60:bf:68:a6:cc:75:
6d:f2:74:02:38:a8:10:b9:81:57:81:60:f9:3a:28:07:2c:93:
32:e8:15:fe:da:2e:b9:d4:ef:57:6c:8b:4c:45:6c:70:f7:4f:
3c:95:db:d2:e5:0f:ac:c7:24:53:23:30:58:56:4e:44:7f:87:
f7:82:22:35:e8:be:18:84:0b:41:ae:80:34:03:b2:f8:67:15:
b3:19:77:04:fb:a9:e9:d9:67:40:76:ab:3d:78:73:6f:f2:06:
df:bb:b3:86:b8:57:6f:98:1d:42:5a:46:15:47:42:a9:56:ee:
4c:37:dd:8f:07:ae:55:35:e3:22:e4:44:c4:3f:0b:52:37:77:
55:f2:8f:d1:18:95:54:00:41:78:55:84:0b:64:c4:06:50:f6:
46:f6:ad:59:03:98:aa:76:35:37:09:87:48:20:82:c7:13:6d:
c6:c1:cf:ec:09:5d:5b:24:b3:a3:10:72:69:6d:f1:05:dc:c8:
ed:57:29:ee:5e:62:e6:9d:bd:d6:c2:08:06:66:88:68:c6:b0:
a5:0c:bb:d4:5f:a8:87:a4:81:17:44:7e:cd:a2:cc:07:32:7a:
31:15:48:ac:fb:bc:88:d5:ef:7f:9f:b9:a6:e7:21:2e:75:5e:
97:b5:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:08 2026 by rpki-client