
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa
File: d0daa832-6d5a-36d1-bd07-231326754f9e.roa (raw, json)
Hash identifier: oXmr1+ndD1deKzlWsvRTX9NjQWJpEUaAkZ598PCAznc=
Subject key identifier: CC:8D:44:BB:1E:B6:AC:FF:6A:C6:5C:8B:25:53:3B:CD:06:56:F3:7D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D492A4DDE72C27DB37EC29C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 36625
IP address blocks: 198.17.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:4d:de:72:c2:7d:b3:7e:c2:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=415814a9-215b-4b97-8e38-bc6ab08da8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:2b:46:d8:ac:06:f2:29:b7:9a:1a:1b:8e:
37:61:a6:40:a8:18:e3:4b:9a:75:ba:aa:c9:bd:84:
1b:77:7e:3a:e4:74:d7:0a:98:55:03:18:fa:fa:83:
23:97:39:87:0e:e3:02:b5:8b:83:ae:33:83:13:7b:
b9:16:5e:86:c2:1b:3d:43:bc:af:75:c8:3c:3b:e3:
8d:0e:3a:91:6b:4a:86:c2:2d:01:5b:b3:09:e4:4e:
7d:24:c8:87:3f:83:f7:81:9d:3b:b1:f9:21:71:ca:
d6:87:a3:09:df:d1:67:fb:83:2f:a3:25:82:1c:8f:
e9:be:cd:0e:5f:48:51:4d:38:f8:87:a7:4d:59:75:
6e:40:28:e2:2d:84:4b:02:b2:07:7d:2b:bb:25:bd:
6e:8f:ad:75:c1:e7:43:ec:1a:5e:6b:4e:c0:f8:cd:
da:d2:95:62:71:9e:63:c7:95:8a:38:80:13:7e:1d:
7a:4a:9f:98:75:60:89:2b:9c:bd:8e:8a:c1:52:50:
59:0c:76:cb:cc:9d:57:c7:10:37:0d:a2:72:fa:c1:
99:ac:a6:b7:a3:7b:ca:43:11:02:59:4c:be:73:c9:
52:85:8f:55:66:1d:f1:ca:6e:4a:c8:d0:d1:4c:4f:
7d:4f:41:12:5f:1c:f9:0e:4b:04:0c:5e:e8:88:64:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:44:BB:1E:B6:AC:FF:6A:C6:5C:8B:25:53:3B:CD:06:56:F3:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0daa832-6d5a-36d1-bd07-231326754f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:26:18:18:3a:7c:85:85:72:52:52:e3:45:60:22:dc:f9:3d:
75:01:3e:ae:db:36:0f:6b:af:06:71:05:59:39:b6:0d:70:97:
0b:fd:26:a8:1b:5b:21:4b:8b:97:0a:aa:bc:a4:e2:24:12:0b:
86:4d:4e:21:93:18:b6:fb:09:f2:4c:f2:6b:26:bb:bd:47:b6:
03:4e:46:97:76:b3:48:42:b6:e4:34:64:5f:ef:a0:69:2f:a5:
82:33:f7:fe:8b:21:44:d9:e4:6b:ef:ed:cb:a8:bf:43:61:c0:
14:a2:54:d9:3a:89:73:31:ac:ae:72:73:43:1e:8c:e1:81:2c:
33:fd:e4:2c:a9:6e:3a:f6:5d:21:49:01:d6:78:45:b9:3e:78:
bb:1a:75:6c:3e:b9:e9:48:c0:d1:d2:06:86:87:00:21:a9:c9:
9a:09:b8:54:03:ef:bd:0c:d2:89:8b:7d:09:93:6c:f3:ab:27:
12:e8:ae:0d:86:26:52:00:a7:3b:3e:34:36:4c:d8:a3:12:c8:
82:90:34:47:3d:39:7c:d3:2a:2d:11:9f:19:b0:9b:bf:b3:cc:
d4:a9:c1:62:e4:d3:71:e8:fc:13:cd:77:42:6c:d4:8f:b8:1d:
96:f3:57:01:44:cf:a7:c0:a4:b6:38:21:42:72:e1:79:99:ca:
f9:07:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:02 2026 by rpki-client