
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
File: bfb9dfec-b85d-3860-978d-511ab6c14113.roa (raw, json)
Hash identifier: 3qShFUw48PfaITm4i32OANzxVj5XXxDVU2ck6RSp2Ws=
Subject key identifier: CF:D7:0D:CE:05:23:E3:AB:D8:7D:A3:CA:D4:EE:D4:7B:0B:BF:23:01
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1707D803C380E061A683BC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 396567
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:d8:03:c3:80:e0:61:a6:83:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=e3b6f21d-2661-486e-8f66-c35acf67546b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:8e:39:6e:1b:a0:25:b9:28:aa:62:78:b3:
f7:fb:d0:6b:e9:01:65:27:8b:83:8c:68:33:67:3a:
35:80:1e:1c:33:d1:8e:d5:51:24:41:87:e4:45:ae:
77:a4:12:4b:60:90:8b:f2:69:e6:9b:b1:40:1e:74:
59:9a:e8:4a:6e:2e:73:11:05:7a:7b:4d:17:3b:4c:
58:ae:90:c6:6d:8f:5a:d1:57:b6:6a:8d:ff:3c:f5:
01:fa:1b:f6:59:a8:07:be:b0:5a:80:ff:05:5f:4a:
64:ad:59:0d:f4:4c:a4:5a:ea:3a:76:51:25:a1:fc:
85:b7:8b:0d:5c:e7:a5:18:bb:a9:46:12:ce:58:2a:
fa:67:15:5c:98:9c:82:1a:18:07:05:4d:5d:ac:4a:
20:eb:96:64:c9:48:5d:4c:37:65:b7:20:07:76:70:
f5:50:58:78:5f:c9:dd:45:8b:f2:1b:ed:26:88:38:
ce:ff:76:23:e5:8e:3d:f2:a7:24:4b:27:35:21:b0:
f8:0f:ae:e1:85:1f:2e:7f:7e:9f:04:6a:03:eb:06:
3a:aa:3a:67:b7:4b:86:d1:bf:a4:9e:a5:94:19:4c:
e9:42:c6:dd:72:c2:19:ea:3c:b4:a9:41:64:3d:f6:
57:c7:77:0a:a0:15:5f:d5:01:0e:3a:8b:37:bd:7e:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:0D:CE:05:23:E3:AB:D8:7D:A3:CA:D4:EE:D4:7B:0B:BF:23:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fb:c3:4c:c8:69:1d:75:ea:5d:d0:84:d9:40:bf:4b:9a:d3:
8d:1a:a1:4e:cd:7a:ea:ab:0e:08:37:ea:99:66:12:75:83:67:
74:86:50:f0:2a:cf:e3:30:dc:ef:e2:6f:8a:21:f6:bd:d5:95:
8d:27:79:f2:8e:f7:db:71:8b:7f:c8:b6:5c:ab:36:26:12:9c:
b2:82:99:5f:98:33:83:e4:a4:a3:50:47:4a:76:3d:87:f7:f4:
be:5b:16:c1:d3:eb:1a:4e:3c:1e:da:88:b7:83:8e:30:13:43:
cd:45:a3:d0:35:f2:48:8e:8c:65:75:56:b7:97:3b:a5:6d:66:
9d:c3:97:97:5e:d4:3e:7e:74:fe:c4:26:3b:c5:47:35:3d:bc:
00:d6:b6:f1:19:6b:a8:91:65:22:98:c1:fc:b2:5d:46:b6:5c:
85:44:a3:38:74:90:4b:51:f3:39:7b:a8:b8:17:f4:56:58:12:
8e:78:a3:2f:1e:f9:14:17:3e:50:12:09:7a:2f:71:c6:aa:74:
9b:b1:e6:99:07:d7:ff:72:c2:8f:8e:4c:71:3a:1a:ff:be:ae:
32:95:9b:f7:9a:f2:b3:b0:e9:a3:cb:44:f8:20:bf:eb:2d:56:
2e:56:fc:d6:be:a4:69:fe:14:68:ff:09:78:38:6f:5c:34:23:
53:77:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:19 2026 by rpki-client