
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa
File: baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa (raw, json)
Hash identifier: CZl1Gkyk2jY80ekDziO65fEEE78xFy7ooSlSZbeAYGU=
Subject key identifier: 2B:70:48:FA:34:65:78:5E:FC:8C:55:CA:70:94:9F:99:A6:42:31:35
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49868681CC14785FB70237C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40647
IP address blocks: 192.42.174.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:86:81:cc:14:78:5f:b7:02:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3232910a-7aeb-4b36-991d-833815a1218e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:33:97:f0:61:e7:46:b3:88:c5:6b:84:e2:
de:45:80:58:f3:a1:17:dc:a5:93:a8:80:52:d4:9a:
6d:5d:c4:23:35:02:9f:27:99:54:b7:0b:ec:84:b2:
47:a2:70:31:e2:e3:7c:de:1e:a9:84:ab:81:25:46:
a3:a2:8c:c9:42:e6:36:a3:dd:fe:11:d2:2b:87:75:
f6:ea:c4:5b:b3:d3:56:2c:65:0d:f4:fe:e7:23:86:
8b:c1:a5:6e:78:24:55:13:50:66:73:4e:7b:12:f8:
5d:04:2f:05:c1:c2:a0:57:29:57:1a:d6:e9:56:45:
19:5a:aa:80:b5:6b:75:fa:d9:4b:c9:50:7d:6b:1d:
c8:7c:a8:50:b6:50:65:19:b5:45:ad:6d:5c:9c:9f:
af:27:96:11:79:8d:5e:48:05:ea:97:84:8b:b2:e7:
6c:5f:f3:01:6f:ec:3d:d9:89:4f:0c:36:65:49:2e:
fb:fb:b5:39:23:8e:3a:a2:10:46:e7:de:f9:82:83:
2a:85:eb:a8:24:cc:36:68:89:8e:2f:da:bb:de:53:
f1:f3:89:2d:88:64:a9:7e:7d:34:1e:a7:51:d9:51:
72:e5:f9:97:7f:05:47:ab:f4:c4:12:86:02:92:9f:
bd:be:a2:94:51:be:6f:64:f2:b8:cc:46:5d:eb:1e:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:48:FA:34:65:78:5E:FC:8C:55:CA:70:94:9F:99:A6:42:31:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.174.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ad:80:cb:e0:ba:f0:61:ca:ec:44:c9:e7:05:5d:6b:b8:eb:
2c:64:90:2d:73:54:68:aa:7a:86:8f:66:d1:c5:a4:30:85:90:
05:ee:12:1a:28:e4:53:92:0a:1e:9e:76:3e:78:19:4a:3d:11:
07:cf:90:f8:e0:52:c6:d4:13:52:e5:6e:c8:ed:49:33:5e:80:
79:41:84:df:c7:02:ae:8b:ef:7f:fe:79:23:73:e1:0e:8c:d8:
bc:77:6f:84:19:1e:d6:bb:a2:8b:d0:33:8f:33:27:9d:c1:73:
3d:53:a7:44:e0:d1:35:06:e9:4c:09:cb:2e:ea:c9:b4:29:75:
7a:9d:19:d2:22:34:a2:b1:a0:5e:30:25:ce:bc:cc:36:7a:e1:
fa:4f:28:c1:d2:ee:07:79:d1:99:0f:54:57:9a:07:94:8b:93:
a8:94:64:43:ef:36:33:52:6a:81:20:80:57:d1:f6:82:a3:d9:
e9:38:67:96:47:dd:0b:42:f4:47:48:e1:39:46:45:73:0a:f3:
c5:90:4b:89:12:3d:9f:58:d7:02:0e:cc:16:38:f1:93:fd:8d:
0e:85:c7:9c:24:f0:53:a5:1c:f0:dd:e3:8e:00:e0:fe:ef:2b:
46:a4:e1:c8:69:a8:56:2a:97:99:f8:0e:7e:5d:e9:e2:64:97:
b4:0c:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:30:09 2026 by rpki-client