
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b679e49b-bcf7-3a1a-b274-c0ac628b6999.roa
File: b679e49b-bcf7-3a1a-b274-c0ac628b6999.roa (raw, json)
Hash identifier: m4xiB8eG8AoLM8Pgtb4kH6ZvG6b2XbTD9xbMDrgaqKA=
Subject key identifier: F7:A8:FC:51:BE:73:1F:DC:CF:06:E5:2D:46:4B:C2:52:D1:C3:89:7E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D300A2C1A2D696AEDD81F1740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b679e49b-bcf7-3a1a-b274-c0ac628b6999.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 396562
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:2c:1a:2d:69:6a:ed:d8:1f:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=06469d8f-8664-4bc1-996d-9b98760b0f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:62:18:c4:af:3c:7e:72:45:c1:99:c4:a8:
5a:d0:49:dc:70:de:3b:a5:65:d6:8b:96:f6:7c:ce:
87:68:84:ae:a9:05:ff:d0:8c:38:22:4f:e7:15:6c:
9b:31:ea:55:a8:ef:24:f9:19:6b:77:8c:3c:56:b7:
35:3b:03:41:59:5e:62:8d:db:38:bb:fd:e3:d8:03:
55:64:6a:b9:e6:89:8e:e5:d7:25:d8:3c:d2:77:52:
2e:38:9b:73:18:4d:40:79:69:e8:de:3d:9c:2f:82:
fe:db:07:de:51:bf:88:62:33:14:c3:fc:02:13:72:
c6:63:64:f9:55:5d:b4:ee:39:1f:ff:ab:71:21:81:
a1:6b:39:a5:ac:8b:45:28:a1:53:d2:74:2c:ef:49:
a9:cb:eb:b5:6e:de:96:ec:e4:c8:84:0b:fe:57:59:
f5:38:e0:2f:ed:0d:3c:a9:b9:54:0c:5b:21:30:dc:
3a:8c:7c:fb:00:ea:c2:6d:66:e8:84:ce:5f:99:1f:
0f:b7:e1:c9:a5:ef:c3:df:38:92:59:3c:9e:3f:c2:
7b:c3:de:c5:79:3f:5b:99:bf:2b:58:ef:f5:a1:17:
fd:0e:8b:6b:7a:44:47:53:43:bc:d6:b8:dc:40:a1:
be:74:f2:60:c6:35:fc:b3:53:82:bc:b1:a8:15:23:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:FC:51:BE:73:1F:DC:CF:06:E5:2D:46:4B:C2:52:D1:C3:89:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b679e49b-bcf7-3a1a-b274-c0ac628b6999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:db:06:7f:75:92:40:3d:96:4d:2c:b8:61:02:7f:ed:5d:77:
34:e2:78:51:ed:4d:a6:2b:36:80:08:d9:5e:55:e0:2c:c1:33:
0b:88:d4:77:3e:c0:8f:bd:2c:ac:6d:46:0c:92:f7:9c:1c:e8:
86:80:44:43:58:3a:6c:ce:c4:12:ee:31:e5:5c:7f:5a:89:51:
11:0c:d1:57:07:f5:c9:d2:62:dd:5e:4f:7c:e9:1d:95:c4:9a:
8c:c7:5d:65:02:1c:4e:75:ac:b0:1d:dc:4a:b0:e1:1b:83:1c:
6f:1a:31:94:1e:52:61:39:61:ff:bf:66:af:c8:2a:e1:e1:2b:
e9:f3:a1:55:4b:2f:fd:3e:19:22:66:a2:27:e5:5a:ed:21:da:
24:d2:f2:19:40:1d:fc:0a:c8:58:76:d4:ea:02:57:cf:b9:bc:
bf:d6:26:7f:79:4f:6e:c6:8c:39:c4:a3:02:40:b1:83:ac:7e:
b5:00:52:ad:41:4c:a7:3e:ef:55:55:19:b4:a5:36:61:6a:67:
e0:40:50:fd:52:74:a7:6a:d4:04:af:b1:63:ed:b1:ff:4f:14:
00:33:05:12:41:79:2c:5e:27:af:03:42:cc:ad:ff:ca:64:2a:
6b:30:3b:58:4a:f6:8d:1c:b2:7b:aa:f2:4d:5e:3a:fa:44:a5:
35:b8:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:38:59 2026 by rpki-client