
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa
File: aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa (raw, json)
Hash identifier: pE1XUD8dUriQfbiQm1yr7zdQn+dmDkY/P2//zskndMc=
Subject key identifier: 06:4E:A3:44:6C:01:26:BB:CC:23:C0:6B:44:B7:6D:CF:3F:DB:33:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1707EC91E5F7F1DE846BFB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 396562
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:ec:91:e5:f7:f1:de:84:6b:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=674dbaeb-6947-495d-9f5b-17b51deab36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:8f:1f:da:09:d6:81:a2:24:24:39:0a:23:
01:10:b8:76:81:9f:aa:b4:a5:cc:bd:45:55:2b:d4:
3f:ad:0a:61:ba:26:a4:48:69:a6:ee:b4:b5:aa:e4:
c8:df:0f:c2:ae:8b:0d:3c:d6:74:ac:68:74:8c:77:
b2:8f:d4:23:ab:d6:f1:25:b4:1e:38:7e:4b:25:22:
3f:2f:54:42:18:a1:71:aa:f0:94:e4:7e:e9:fb:8b:
0e:c5:b6:ec:94:23:cb:9c:a6:61:f9:21:83:41:ac:
f3:98:16:84:99:6d:42:ca:4e:ee:c5:33:af:41:ea:
b6:f8:d6:89:3a:1f:d3:e9:40:e0:2b:f2:1c:86:2d:
8e:3a:aa:a1:7a:32:01:38:60:58:8b:88:61:25:65:
dd:09:1c:91:29:73:61:d0:f8:a2:29:ad:aa:18:5a:
9e:16:64:2a:ad:eb:06:4a:21:a2:7d:73:4c:cb:0a:
62:c9:22:01:0d:ba:6b:90:9f:9f:cf:2d:5a:f6:70:
0c:f6:28:78:4c:71:bd:ec:c4:32:e6:3a:18:57:36:
8b:73:60:2a:d9:05:09:bc:0d:b2:1d:a6:18:07:24:
bf:45:ea:a6:84:11:f5:92:51:42:d3:eb:c3:2b:d2:
94:59:b3:b1:7d:f6:5f:35:ce:fd:d8:bc:a6:f6:f4:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:A3:44:6C:01:26:BB:CC:23:C0:6B:44:B7:6D:CF:3F:DB:33:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf67ad3-6d8e-32b1-961e-93f99ea9eb7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:6a:f6:71:e3:6c:4d:64:65:be:1a:3b:30:24:be:8b:92:7b:
48:0e:be:35:03:4f:f9:32:66:e2:1c:cd:52:76:ad:fc:22:f2:
7e:a3:31:20:fe:3c:68:17:22:b7:76:2b:bc:ab:81:4b:30:1a:
16:ba:7b:6d:73:42:58:3d:72:65:98:b2:9e:69:26:e3:53:4d:
02:11:1b:85:70:ed:bc:54:8d:2d:63:20:25:91:28:e5:e3:e1:
1d:3e:c8:09:b9:e6:a2:13:f9:3b:91:cb:88:40:6f:42:0e:e2:
2c:04:26:0e:75:be:1f:34:34:4c:16:0e:ab:d0:52:94:ff:f5:
33:5e:63:96:83:45:52:5c:5a:4b:af:fc:6d:db:03:50:77:3f:
2c:69:bf:c6:0f:99:88:e9:79:b4:4c:2b:8f:37:41:48:62:59:
12:52:62:54:0d:61:37:9c:eb:0a:ec:85:ae:bc:06:17:9e:50:
4e:6f:3b:e8:57:c5:be:21:e7:0a:3a:9b:62:fb:03:cc:3f:46:
25:1d:e1:72:c9:51:83:92:07:32:0a:5a:73:fd:68:72:d9:68:
47:01:48:5a:ac:d3:dc:b2:ce:86:63:99:65:29:08:ac:ce:f0:
88:3b:67:31:c4:f3:a0:a5:80:2b:4d:f2:ee:49:f8:d2:dd:a1:
70:c3:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:27 2026 by rpki-client