
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa
File: b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa (raw, json)
Hash identifier: iFfWozvsQbOfjV7ETpV1S2P5Mkea49aUxxY0f/0eIjY=
Subject key identifier: 58:47:46:9B:B2:88:AA:99:B9:C4:C1:53:70:7C:8C:2D:1B:3B:A9:22
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D143D99C099CC9CD3C3639190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 396593
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:99:c0:99:cc:9c:d3:c3:63:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=1b37768a-858f-4a87-b242-5d71caae54bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:91:eb:ac:2f:09:96:85:71:c3:f8:58:74:
23:9d:ae:62:11:4f:6b:b2:9d:a8:56:24:9b:ea:17:
81:ce:58:5e:96:4c:2b:75:c1:61:89:78:74:1e:ac:
79:e5:b0:66:b2:1c:ef:a9:cc:fd:c8:4b:2d:01:e8:
de:23:c8:d0:2d:00:f7:c8:9b:10:97:74:94:3d:9e:
25:fc:5e:07:93:d7:a2:45:9b:d6:7d:1f:6a:7a:f3:
30:24:f7:92:e5:46:d5:5e:5a:6a:cb:5e:66:87:e4:
0c:db:eb:57:48:1e:b8:f9:df:29:ac:de:d8:f5:9a:
d2:de:11:e1:89:b8:35:5a:9e:aa:02:71:5d:58:ef:
5d:fa:88:c4:f1:e7:ca:91:c4:c8:2e:15:2c:fd:04:
a7:0d:1e:62:d5:bc:9e:d6:75:6e:ff:48:11:88:1d:
d0:87:33:b9:ce:03:19:e6:05:61:22:35:43:f4:35:
df:04:15:c3:0f:bb:d3:30:20:b9:8a:e4:15:68:ac:
09:3c:45:8e:3f:42:8a:df:b8:d4:b4:00:5c:7f:06:
d9:74:53:97:88:0e:13:d0:b5:a4:3a:58:84:12:22:
c1:22:d1:ce:e8:cd:ea:62:8b:0d:6b:c3:b2:cb:0a:
73:be:af:70:bb:8a:8f:cd:74:27:45:5c:86:3a:50:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:46:9B:B2:88:AA:99:B9:C4:C1:53:70:7C:8C:2D:1B:3B:A9:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8bf2b2c-8689-3b5c-a3ad-0aae985a242d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:60:39:55:04:3e:73:ce:9c:e6:be:4d:93:c7:5c:4c:48:6c:
0c:21:f2:50:45:9b:c4:30:65:7a:84:9c:f7:73:72:ab:1a:75:
fa:5d:12:e1:96:af:ad:2d:1d:c7:fd:fc:f9:9e:00:29:05:fd:
df:71:bb:b0:01:01:c6:66:54:3e:b8:62:3d:fc:8a:01:30:c6:
77:04:d5:44:d5:6a:a4:03:0e:ea:b1:62:03:4a:d6:59:19:f7:
45:4e:9c:89:1a:18:d0:86:06:e7:fa:8e:e6:47:87:c0:dd:84:
7e:46:91:08:bb:e1:9e:5a:57:f8:e7:0a:3a:0b:27:f6:c0:dd:
29:15:f6:d6:20:ad:3e:13:39:e1:7c:53:a6:7d:e5:5d:38:f0:
2b:f3:39:f1:e0:8a:c4:10:87:3a:e7:2e:35:55:92:df:1b:c8:
51:35:e6:4c:72:09:ff:79:45:50:be:00:11:de:8c:e5:80:86:
a6:45:5f:50:cc:af:b9:5a:01:77:04:a3:74:28:48:23:02:df:
5d:e3:b5:d2:c1:8d:f2:8f:48:33:27:c1:d9:5d:3e:e7:26:a3:
bd:04:70:90:1b:9c:e0:e8:c6:42:06:d4:82:56:b5:cc:96:08:
e7:7a:ed:d4:ea:7a:5c:63:29:da:36:b1:6a:33:9b:05:42:97:
8f:fb:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:25 2026 by rpki-client