
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
File: bfb9dfec-b85d-3860-978d-511ab6c14113.roa (raw, json)
Hash identifier: Kt/Pb5SYtUMHa+enEETAnL/niuDUCKnIsL+bcMvu2IQ=
Subject key identifier: 46:27:B7:06:B9:15:10:1F:2B:6A:AC:21:59:00:CA:10:07:26:98:DE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4974F817CE0E910713789A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396567
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:f8:17:ce:0e:91:07:13:78:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=85fc8ef9-1218-4893-9414-61df99b8e4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:af:a5:a1:aa:15:48:3d:6d:1c:34:13:02:
29:8a:94:0f:7e:a5:a9:5e:a3:87:ff:04:a1:5b:b6:
2a:85:5c:f8:ca:66:cb:9b:ec:64:de:20:2a:19:c1:
34:74:a9:70:b7:de:b0:3e:b3:a2:93:5a:a0:a6:f8:
69:5c:52:01:c0:d3:79:2f:02:1b:27:2d:c3:ae:a2:
cb:92:81:28:ef:42:9d:dc:f5:67:5f:3c:b0:4f:c1:
ad:f2:34:31:21:06:d3:e3:a6:b7:fb:6f:73:cc:b4:
d9:4a:ba:6c:61:92:09:a4:b7:6c:ad:21:c8:94:d0:
37:1e:fd:45:f4:c9:75:02:93:15:31:c3:73:4a:10:
c6:a0:20:b2:3e:5f:66:e2:03:b0:25:3d:d2:f0:52:
f6:4b:87:fc:5e:9d:a2:22:58:63:08:87:cb:5c:c7:
34:35:3a:48:c8:f9:bd:e7:26:69:08:14:27:f2:fa:
e5:73:26:8b:45:2c:18:b5:c9:8e:a6:3d:be:9d:ca:
d0:e0:b6:17:be:08:9d:ac:14:30:42:df:3c:b0:52:
cb:f3:95:12:af:f9:5a:56:13:e2:81:1f:f5:04:75:
90:72:e4:39:af:d7:85:eb:a6:94:7c:51:e2:68:64:
21:1d:78:82:a2:52:01:0c:e0:95:b3:02:d2:45:a5:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:B7:06:B9:15:10:1F:2B:6A:AC:21:59:00:CA:10:07:26:98:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:1e:84:77:ea:8f:0c:cd:e4:38:fc:63:ad:ad:6e:f7:92:9c:
aa:d6:f6:7a:96:8d:a8:2a:b7:39:eb:9c:c9:4c:ae:8a:9b:fc:
c1:38:e4:61:4e:08:f5:8c:0e:a3:66:07:a6:01:e4:33:f5:33:
a7:ed:16:d6:cc:73:a6:53:e6:5c:47:94:29:a6:7f:c4:83:22:
83:3b:af:95:ae:66:88:8a:17:7b:f8:97:1e:2f:34:cd:64:4c:
4f:5f:eb:27:65:a2:fc:a9:2d:91:8b:6f:fd:9c:b4:10:a3:f9:
92:ea:00:77:01:04:0c:70:1b:ac:bf:57:da:96:28:6b:20:56:
5c:7d:58:69:81:7b:0d:fe:56:ff:15:18:7f:ae:b1:57:f9:97:
19:ca:ae:b5:85:df:c8:56:3e:ec:5f:10:b3:27:22:af:7f:dd:
7d:45:a5:78:15:de:63:76:59:aa:69:7f:21:6f:9f:22:8a:78:
a2:58:6f:2b:43:c4:7f:33:10:48:c3:43:a7:6c:0c:7e:cc:59:
e9:86:ce:6b:73:26:a4:76:ea:6c:7f:ef:21:0c:d8:11:43:bd:
98:65:90:c6:f2:66:e7:70:c9:0c:71:f8:34:c9:1c:eb:88:88:
d3:25:69:ff:3e:24:90:02:09:4a:8b:32:3a:d7:ad:e2:1e:91:
d8:b0:1f:b1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdPgXzg6RBxN4moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODVmYzhlZjktMTIxOC00ODkzLTk0MTQtNjFkZjk5YjhlNGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFWvpaGqFUg9bRw0EwIpipQPfqWpXqOH/wSh
W7YqhVz4ymbLm+xk3iAqGcE0dKlwt96wPrOik1qgpvhpXFIBwNN5LwIbJy3DrqLL
koEo70Kd3PVnXzywT8Gt8jQxIQbT46a3+29zzLTZSrpsYZIJpLdsrSHIlNA3Hv1F
9Ml1ApMVMcNzShDGoCCyPl9m4gOwJT3S8FL2S4f8Xp2iIlhjCIfLXMc0NTpIyPm9
5yZpCBQn8vrlcyaLRSwYtcmOpj2+ncrQ4LYXvgidrBQwQt88sFLL85USr/laVhPi
gR/1BHWQcuQ5r9eF66aUfFHiaGQhHXiColIBDOCVswLSRaV7FQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEYntwa5FRAfK2qsIVkAyhAHJpjeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiOWRmZWMtYjg1ZC0z
ODYwLTk3OGQtNTExYWI2YzE0MTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBHHoR36o8MzeQ4/GOtrW73kpyq1vZ6lo2oKrc565zJTK6Km/zBOORh
Tgj1jA6jZgemAeQz9TOn7RbWzHOmU+ZcR5Qppn/EgyKDO6+VrmaIihd7+JceLzTN
ZExPX+snZaL8qS2Ri2/9nLQQo/mS6gB3AQQMcBusv1falihrIFZcfVhpgXsN/lb/
FRh/rrFX+ZcZyq61hd/IVj7sXxCzJyKvf919RaV4Fd5jdlmqaX8hb58iiniiWG8r
Q8R/MxBIw0OnbAx+zFnphs5rcyakdupsf+8hDNgRQ72YZZDG8mbncMkMcfg0yRzr
iIjTJWn/PiSQAglKizI6163iHpHYsB+x
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:21:44 2026 by rpki-client