
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa
File: cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa (raw, json)
Hash identifier: X2VMHuPMObpoUMlGBLda7+/9a/YhbjNSPnahUH8n1T4=
Subject key identifier: 48:5A:B1:5A:C1:E6:63:2F:AA:59:D0:80:FA:2E:EF:3E:2D:B8:3B:18
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D07AD11940C63333D48CDFFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 396555
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ad:11:94:0c:63:33:3d:48:cd:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=dd1d55b1-1279-4ede-83e5-65c63fef75d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:b1:f6:d2:c2:b3:42:16:6d:67:db:55:60:
0c:33:de:ff:31:da:9a:64:04:1d:c5:25:38:ba:23:
7d:ce:74:a8:0e:02:8d:bb:15:f0:f0:c3:f8:c7:fd:
70:00:6a:ae:3c:18:d7:19:61:2a:9a:b1:25:e7:f6:
4a:94:5f:2c:cc:17:b9:d2:64:4c:f7:19:d6:01:bc:
fe:a5:0a:54:30:40:bd:b2:c3:83:89:5b:9f:02:83:
c2:06:7d:a5:bd:b9:fb:89:ad:2b:46:64:57:32:56:
f7:11:94:17:d0:1b:76:9e:1b:17:fe:4a:38:d9:3a:
a5:69:2b:18:a9:ac:5d:25:6e:71:ab:a6:e1:d2:11:
14:89:1e:ab:e9:d5:5e:d6:97:bb:01:95:54:26:75:
d6:cf:93:68:f4:c3:7b:f0:92:74:bf:4b:6c:b4:dc:
cb:35:50:96:80:5d:66:9d:db:b9:98:f0:03:f6:e0:
55:af:61:cd:58:08:35:d2:db:04:b8:34:77:01:fe:
94:58:16:30:45:31:4a:d5:8e:3b:22:c8:ea:d7:65:
1f:35:b8:a8:66:9c:af:0e:9f:ad:ed:53:f7:08:42:
1b:f3:69:97:bc:27:85:5d:cf:db:09:f4:40:7d:a3:
0b:de:bf:6b:3a:6c:a2:e1:b8:73:0a:49:a0:7c:72:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:B1:5A:C1:E6:63:2F:AA:59:D0:80:FA:2E:EF:3E:2D:B8:3B:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a9:8b:a2:a5:2f:d9:27:32:98:f1:d0:c4:af:82:2b:fb:b0:
bd:13:40:8c:e1:7e:77:9f:d9:70:1c:75:03:36:f4:62:95:74:
be:22:3a:43:26:ef:ce:3a:db:5b:04:3c:a4:a9:9e:fa:fb:1c:
ae:5e:bd:61:32:61:6f:0f:07:d3:cb:11:91:7e:59:95:d8:53:
09:7b:98:bc:af:57:ff:b9:4a:20:5b:dc:80:26:97:67:cd:d1:
4b:f6:98:c5:2c:5e:86:4b:61:dc:4f:f5:08:26:15:fa:c0:f3:
0a:98:ef:8d:60:57:9c:66:36:2f:b0:3c:f6:0d:43:83:01:66:
d7:55:33:1e:2f:d8:20:c7:bf:d8:c3:cd:00:ac:9a:ba:f1:ed:
22:c3:76:e1:c0:38:80:29:57:81:b2:fd:9d:38:f2:95:18:58:
71:7f:25:76:90:72:66:a8:aa:5b:72:d5:58:a3:d2:ee:25:69:
db:ae:e3:9a:64:2e:98:59:bd:62:dd:e4:8a:8a:00:66:2f:a0:
cb:49:43:f8:61:d7:5d:37:99:34:8d:b5:d1:e3:45:a2:2e:f2:
1f:25:e9:aa:63:1e:98:14:a3:6f:f4:a5:4f:f2:60:c2:12:c1:
65:f5:50:98:be:3f:d8:0d:17:46:95:63:06:c1:79:e6:2b:70:
3b:29:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:11 2026 by rpki-client