
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b759ba45-d98a-3a4f-a0ff-090b025ddcb6.roa
File: b759ba45-d98a-3a4f-a0ff-090b025ddcb6.roa (raw, json)
Hash identifier: 5EkdcgSMd45aANDZznpQDWudQHXoIoOke9voDZwt91o=
Subject key identifier: 62:78:55:02:EF:5E:7E:51:CB:BD:C4:D2:49:19:00:A2:9D:51:A9:16
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D3E00115F4D3FBEA825F25E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b759ba45-d98a-3a4f-a0ff-090b025ddcb6.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396602
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:11:5f:4d:3f:be:a8:25:f2:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=96d5a245-a4a9-40bd-a730-4f95f9004a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:e4:2d:a6:74:47:65:30:78:20:d4:16:13:
0c:46:c1:56:31:2b:23:06:ec:2b:d1:5c:96:7e:e2:
ce:64:d6:1a:82:ce:4e:4b:95:94:0c:d3:4a:8e:3e:
a1:cd:18:9c:d6:14:e5:b3:85:f3:c0:27:8a:bb:76:
61:0c:c0:46:34:6d:c4:65:58:dd:6b:d4:32:ea:8e:
ea:0f:19:cd:e9:b7:84:2a:ac:46:72:68:f7:dc:70:
11:8e:ab:42:22:0c:87:86:3f:85:3f:5a:0b:a7:59:
7c:1c:4b:39:33:a3:7d:14:4e:df:ae:50:ca:d8:f3:
2e:ba:b7:b0:c8:8a:a1:80:32:c6:71:cc:f9:c6:a7:
a3:3a:b4:a8:46:3f:a5:18:a1:f9:1c:a5:26:25:e7:
9d:d3:a4:8d:38:cd:5c:3a:ad:47:f7:ce:05:38:11:
a3:c8:9f:ec:52:92:8c:0d:b6:e8:ed:c6:58:1b:11:
9b:ae:af:a9:05:f2:b0:a7:63:76:39:d9:5a:be:ef:
e5:1d:4e:25:e6:a5:48:83:87:9f:0c:ec:e2:af:55:
4e:ab:8c:7c:c9:81:6e:a5:78:89:62:75:4e:01:aa:
68:dd:5e:13:ed:fe:79:35:c9:e6:12:48:68:9a:0e:
23:1a:7b:5a:7b:02:5f:35:63:85:ad:be:91:4d:99:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:55:02:EF:5E:7E:51:CB:BD:C4:D2:49:19:00:A2:9D:51:A9:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b759ba45-d98a-3a4f-a0ff-090b025ddcb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:20:0b:dc:4d:d1:d7:0f:c6:e8:8c:d4:c9:63:ac:9e:42:f4:
2a:b0:16:16:43:46:6c:53:95:cc:9c:c0:ce:e0:ee:df:ef:d8:
36:02:7e:a5:4c:4a:5c:92:85:a3:f5:d0:ba:f1:25:a8:82:5b:
d0:09:b8:38:3f:36:d6:68:00:35:61:ac:b3:d4:7d:ac:d5:59:
d3:20:3d:1f:cd:79:4a:c1:70:e0:6a:48:bb:28:c8:c8:9a:41:
34:21:7c:d5:e8:15:d1:9a:fd:02:88:af:d8:c5:28:b3:85:6e:
b2:bb:a8:24:a7:bc:5a:e8:75:e7:10:16:aa:b8:40:1d:ce:86:
08:3c:c7:c7:79:8e:d5:dd:ad:8d:78:86:11:9e:08:d7:ab:f8:
e6:c9:96:37:ff:7d:b0:43:af:21:d7:84:b2:1f:f3:3e:0a:6b:
50:2c:68:08:e0:7d:99:bd:29:ee:13:3c:36:84:ad:e7:e0:af:
b8:80:f6:4e:b3:a4:15:60:bc:18:f5:ea:c9:8f:39:cd:58:14:
31:eb:5f:a1:74:b0:65:93:8d:37:2a:fe:df:df:0f:9b:bb:58:
b0:f5:21:ab:75:aa:a8:6e:c5:69:7d:eb:78:a3:d2:de:9b:97:
86:8c:76:1f:8d:ce:05:77:d4:4c:8f:65:c8:1a:8f:c7:39:3c:
42:86:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:37 2026 by rpki-client