
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2b26206-49ca-394b-8050-b95ccd8f3ad6.roa
File: c2b26206-49ca-394b-8050-b95ccd8f3ad6.roa (raw, json)
Hash identifier: GL1Y+KjZx3zCiodNTcQCyhQG9J6JxzyFeUmoeWl1XeE=
Subject key identifier: C3:FC:8F:B3:53:CE:B2:14:8E:39:E7:F5:0A:4C:05:C6:F7:7F:41:8B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1199BC4A7F5ED441F4A4D3A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2b26206-49ca-394b-8050-b95ccd8f3ad6.roa
Signing time: Thu 05 Mar 2026 15:20:04 +0000
ROA not before: Thu 05 Mar 2026 15:20:04 +0000
ROA not after: Wed 03 Jun 2026 14:20:04 +0000
asID: 25485
IP address blocks: 192.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:99:bc:4a:7f:5e:d4:41:f4:a4:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 5 15:20:04 2026 GMT
Not After : Jun 3 14:20:04 2026 GMT
Subject: CN=ad35e10f-241f-4606-8e8a-eb4f3a2908be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:d9:82:a2:bd:07:90:96:7a:bc:da:23:fc:
dd:aa:7d:0f:ca:2b:d4:cf:e6:b9:6b:d3:34:59:f1:
24:22:5c:32:b7:95:cd:19:c1:cb:a3:51:f0:09:11:
2a:17:ff:63:4f:6e:07:b8:4d:43:69:b8:ac:fc:9b:
4e:b2:95:65:50:38:cf:6f:fb:32:71:7a:1f:a0:3c:
56:8e:39:a1:54:ca:12:32:8b:7d:97:94:6f:33:b2:
e3:11:6b:e6:e3:e0:9f:0b:cf:a4:9c:a4:c2:c3:61:
09:51:4e:1c:9e:3b:34:c0:05:2b:79:07:17:f0:19:
4b:cc:38:37:d8:e6:84:a2:b1:93:23:4e:8d:2d:92:
cd:48:75:38:19:bd:a8:22:e4:49:a5:4d:78:72:78:
bd:a6:7a:bb:77:05:92:87:d4:80:e3:87:69:d0:7d:
e5:69:0e:41:4d:eb:94:a3:d8:a6:4e:5c:6b:ff:ad:
a0:03:ea:e4:4b:56:46:b2:ca:95:d3:af:db:fe:0a:
c9:2a:8e:d7:28:dc:b6:cc:8b:01:6c:d0:7c:69:ad:
68:92:aa:75:d0:5e:8a:98:c7:71:89:1f:2f:42:3b:
29:ca:ff:bd:73:e7:e4:a6:31:81:7b:b4:4f:1a:ed:
44:ab:87:36:86:07:be:31:d8:e2:5d:10:86:31:db:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:8F:B3:53:CE:B2:14:8E:39:E7:F5:0A:4C:05:C6:F7:7F:41:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2b26206-49ca-394b-8050-b95ccd8f3ad6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9e:2f:d2:62:3c:c0:76:24:39:e0:62:67:6f:0e:4d:b1:a1:
51:eb:4f:89:b8:00:be:d5:e0:cc:64:76:94:69:63:e3:0f:b2:
7e:00:24:79:ef:10:38:e0:7b:12:4f:db:21:fb:cf:44:d7:02:
71:b3:c6:bd:43:67:cd:f0:bb:70:52:da:09:e0:b7:e7:dc:37:
fe:3b:af:f8:55:c0:0d:33:74:8a:89:a8:5d:00:ee:69:e0:b6:
cb:c8:90:6a:1e:b5:92:d0:68:3b:9e:8d:3c:33:e9:c1:ea:2b:
e7:66:b1:2f:e2:9d:9b:b5:f7:48:d8:36:d7:cd:31:2f:b7:3a:
e0:d2:54:ee:5a:14:cb:e7:ee:a0:95:7b:19:fa:ef:93:cf:4c:
69:ac:3c:f5:b5:49:0c:c9:50:66:ba:33:51:88:60:9c:0e:05:
a9:99:e4:b0:d6:74:d6:a1:31:d0:50:79:5e:1e:5b:e9:25:77:
94:14:41:ab:96:88:9a:f3:3b:ce:6a:ce:ce:9d:cb:c8:ea:69:
da:50:fe:28:c6:b5:f6:26:70:84:f6:0b:0b:26:48:86:c7:98:
e1:6c:59:13:c5:71:38:eb:4b:66:fb:41:82:fd:6f:6a:99:5f:
40:e7:7e:c7:b9:af:f3:13:2d:c3:68:a6:7a:3c:84:f7:59:b4:
42:74:5f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:45 2026 by rpki-client