
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b86c9f31-eaa1-3ade-8009-f538231c502b.roa
File: b86c9f31-eaa1-3ade-8009-f538231c502b.roa (raw, json)
Hash identifier: I3YrPtsI4rVP28ho/R+eWRRuCHK7f6o81FjqGHITV9E=
Subject key identifier: 2A:1D:E4:85:E8:B6:A8:80:1B:4C:CB:C8:1E:D4:D5:53:80:EA:62:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D9A4B880B24A2DBECFDB12DB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b86c9f31-eaa1-3ade-8009-f538231c502b.roa
Signing time: Thu 23 Apr 2026 14:28:15 +0000
ROA not before: Thu 23 Apr 2026 14:28:15 +0000
ROA not after: Wed 22 Jul 2026 14:28:15 +0000
asID: 396596
IP address blocks: 192.42.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:4b:88:0b:24:a2:db:ec:fd:b1:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 23 14:28:15 2026 GMT
Not After : Jul 22 14:28:15 2026 GMT
Subject: CN=e008719c-3f60-4115-bb82-702c2eaa9d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:28:c2:4a:e1:32:fc:81:11:3f:1d:1f:b8:
bb:d0:89:2d:9d:7d:66:70:58:c6:b8:0e:47:d9:86:
50:6e:28:3b:84:a7:b4:ef:7d:4c:e8:2e:e5:30:24:
41:f5:05:de:ad:3b:c4:e8:59:a8:d4:9a:4f:eb:bf:
3e:24:66:54:5b:fb:86:45:a4:43:0a:4f:93:6c:85:
aa:ab:eb:58:98:00:52:6e:b2:39:ed:57:f7:b4:03:
1d:81:b1:6c:06:b0:8f:9c:15:b0:cd:ff:34:cd:e0:
00:25:59:6e:43:47:79:4f:16:77:a5:8f:c0:ee:f4:
de:ac:4e:bd:e6:51:eb:23:2d:5d:e8:4b:96:6b:5e:
d7:89:f7:91:1d:0d:42:6f:ac:8c:1c:cf:58:06:d5:
d3:cf:21:78:31:c8:34:78:76:07:e8:be:de:92:a6:
e2:c2:9d:0d:fb:05:1f:15:6d:cd:bf:ef:8a:36:37:
7d:b9:f8:c7:88:eb:8d:05:f7:6d:e2:bb:17:2b:97:
1f:50:f9:72:9d:31:8e:42:d2:7a:17:43:d9:96:7e:
61:17:2d:09:ee:03:38:9d:bc:15:5d:ac:b9:c7:bd:
f3:8f:27:36:be:51:35:f7:03:e3:33:4e:1e:e4:f3:
d4:c2:be:a6:07:e2:86:fb:cd:64:0d:e1:43:6c:d3:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1D:E4:85:E8:B6:A8:80:1B:4C:CB:C8:1E:D4:D5:53:80:EA:62:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b86c9f31-eaa1-3ade-8009-f538231c502b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:43:be:1d:59:c5:ea:46:9c:c1:cc:1d:16:51:0a:1b:46:fa:
4c:df:c9:ef:20:65:d5:07:44:cf:57:d7:41:2f:d1:cd:22:93:
db:33:06:de:94:a7:83:73:a8:d0:24:a2:e4:2a:c4:60:87:93:
78:da:40:8c:53:a3:99:15:e2:79:10:40:0d:cf:a3:8c:7e:92:
77:c2:58:63:64:2c:f4:b7:3a:4a:69:3c:b8:e9:39:73:bb:df:
22:d1:6b:b8:e7:88:a1:41:0a:a3:03:87:79:47:44:8f:3a:06:
41:79:ca:eb:e8:d9:33:e3:77:e5:88:aa:9e:eb:e2:3d:4b:71:
28:76:98:a9:67:29:7b:dd:1c:b7:e7:7c:21:75:cc:a4:9c:3d:
f8:6b:41:44:08:97:a4:4a:8f:81:d6:24:b1:f9:bc:57:57:c1:
2a:a3:04:6a:3b:ab:98:ba:b0:4f:1a:0b:93:90:4d:26:fa:7a:
65:a8:83:c7:17:01:ac:6e:07:0c:7f:56:f0:f8:ec:c5:90:a1:
c2:1b:6e:90:22:2d:63:85:f7:e4:b2:61:53:c3:51:c2:5e:77:
fd:b6:3c:21:e2:d9:cb:b1:9e:ff:ce:cd:41:12:15:2e:09:73:
a6:c0:ce:53:db:2d:e5:d8:16:36:5b:a1:71:05:fc:df:39:4e:
31:62:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:33 2026 by rpki-client