
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa
File: cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa (raw, json)
Hash identifier: wdWoKZXYaVlKmuv+UAA9MGFh30bVmo3p/CZQJvZIqkI=
Subject key identifier: 33:B5:7A:2B:29:88:61:50:99:EA:F1:D1:42:1B:F3:0B:72:09:08:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497D990BFF23AB2657144AB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20362
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:99:0b:ff:23:ab:26:57:14:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cc6ad47e-6ebe-4045-a026-3d414b204bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:3b:cd:5e:19:d8:7e:ea:8e:18:5f:a9:8b:
83:66:0d:91:58:58:ef:a8:56:1e:16:8b:91:4d:da:
f7:32:44:34:74:0f:cb:a7:b4:81:93:03:78:8b:fb:
28:d0:8c:3a:41:dc:24:a3:50:9d:b4:af:3d:93:8e:
66:7a:c1:a6:3a:7e:b3:cb:96:bf:bf:b4:e7:f4:60:
f0:70:80:37:6e:8a:39:53:71:58:68:de:75:ad:90:
7e:9b:a1:23:8f:b7:73:ae:f6:56:80:f1:7d:94:12:
8d:51:31:a4:81:64:fb:a8:7d:26:11:99:84:08:6c:
fd:02:4c:f5:21:14:cb:fd:cc:f3:5b:05:6c:df:2e:
7d:06:b7:30:25:f8:de:bb:0d:1a:f7:bb:6f:49:7a:
bf:7c:73:5c:7c:63:22:9c:c5:29:fb:95:2b:68:8b:
39:40:6b:60:68:e7:08:87:64:05:7d:f3:15:dc:fc:
f0:72:64:d0:70:78:67:a1:34:6e:21:90:2d:44:6a:
15:6b:0d:b1:de:69:80:10:d7:74:5d:5a:71:c7:d9:
1b:10:a9:50:62:db:8c:0b:8a:e2:64:e3:fe:e1:ac:
45:87:84:b2:cc:d3:76:be:96:84:bb:7c:cd:da:cf:
f4:4e:00:cf:ca:b4:54:2c:c0:4e:00:9d:6b:3d:2e:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:7A:2B:29:88:61:50:99:EA:F1:D1:42:1B:F3:0B:72:09:08:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9a:19:b3:15:bd:3f:c5:77:07:a4:27:99:b5:08:78:5e:3c:
cc:2c:2e:23:71:bd:c8:0f:aa:dc:52:ba:84:68:33:3d:de:01:
fc:52:83:f0:2f:84:fc:c4:dc:7b:61:93:a9:0c:b0:b2:4c:68:
4f:cc:53:b4:b8:f3:a7:4d:6c:bb:ba:1e:fe:9d:0f:33:9a:3a:
06:63:8c:42:d5:19:b4:83:87:bc:30:e3:7d:ac:61:00:69:d0:
e2:70:3f:f2:02:ec:3b:c4:18:e1:7a:c9:c7:2c:ca:8f:1d:22:
65:0d:94:1b:54:08:e5:ce:ea:c6:c5:1c:e4:79:40:57:3b:2c:
97:a7:a7:5b:ee:33:e4:ca:09:c7:e0:c9:1e:ac:ee:13:fa:df:
76:e6:e6:a3:fd:0e:d1:7a:4e:11:8c:c5:ad:89:7a:ca:3a:b5:
18:9b:b1:8a:90:1e:1c:ae:69:27:c9:37:85:85:6a:3d:c0:6a:
fe:50:e7:8c:22:6c:c7:f8:8e:bc:21:2b:4a:62:8e:33:bd:c1:
99:e1:fd:2a:42:e4:ec:a9:65:b3:b2:16:76:3d:15:9b:6b:aa:
5a:00:5f:ea:8e:04:51:be:cb:00:49:b4:36:87:7a:34:b2:32:
7e:fc:8a:ae:db:39:e0:4f:d2:3b:37:19:ab:b1:7e:9f:54:ae:
9a:a0:f8:68
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfZkL/yOrJlcUSrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2M2YWQ0N2UtNmViZS00MDQ1LWEwMjYtM2Q0MTRiMjA0YmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7g7zV4Z2H7qjhhfqYuDZg2RWFjvqFYeFouR
Tdr3MkQ0dA/Lp7SBkwN4i/so0Iw6Qdwko1CdtK89k45mesGmOn6zy5a/v7Tn9GDw
cIA3boo5U3FYaN51rZB+m6Ejj7dzrvZWgPF9lBKNUTGkgWT7qH0mEZmECGz9Akz1
IRTL/czzWwVs3y59BrcwJfjeuw0a97tvSXq/fHNcfGMinMUp+5UraIs5QGtgaOcI
h2QFffMV3PzwcmTQcHhnoTRuIZAtRGoVaw2x3mmAENd0XVpxx9kbEKlQYtuMC4ri
ZOP+4axFh4SyzNN2vpaEu3zN2s/0TgDPyrRULMBOAJ1rPS6+8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDO1eispiGFQmerx0UIb8wtyCQigMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzOTA3NTMtN2ZmNS0z
ZGM2LWFlM2ItNDkyMjkwM2NmMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBpmhmzFb0/xXcHpCeZtQh4XjzMLC4jcb3ID6rcUrqEaDM93gH8UoPw
L4T8xNx7YZOpDLCyTGhPzFO0uPOnTWy7uh7+nQ8zmjoGY4xC1Rm0g4e8MON9rGEA
adDicD/yAuw7xBjhesnHLMqPHSJlDZQbVAjlzurGxRzkeUBXOyyXp6db7jPkygnH
4MkerO4T+t925uaj/Q7Rek4RjMWtiXrKOrUYm7GKkB4crmknyTeFhWo9wGr+UOeM
ImzH+I68IStKYo4zvcGZ4f0qQuTsqWWzshZ2PRWba6paAF/qjgRRvssASbQ2h3o0
sjJ+/Iqu2zngT9I7NxmrsX6fVK6aoPho
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:06:35 2026 by rpki-client