
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d71851a0-0a6c-305a-804b-40f926273769.roa
File: d71851a0-0a6c-305a-804b-40f926273769.roa (raw, json)
Hash identifier: wpxjWW4OTG2SHnyTB/3sBtTldyGBw1O4XcM4oGU3yv0=
Subject key identifier: 67:A8:2F:03:53:A1:AD:66:88:A5:B1:66:E3:ED:5A:81:AB:93:CC:78
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D1707E8198F13695E55657080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d71851a0-0a6c-305a-804b-40f926273769.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 396608
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:e8:19:8f:13:69:5e:55:65:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=88ece25d-94af-49e9-9ce5-00bbd00430cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:18:a6:c7:c9:1b:ac:da:10:c3:0f:98:b1:
7e:91:96:7d:c4:be:63:53:37:9b:e5:81:9f:d0:42:
85:6c:2d:55:25:b4:bc:c4:ab:77:42:68:2b:6a:da:
f7:e3:d5:b3:a6:8d:df:fc:78:b8:93:93:a7:19:54:
41:4a:e4:78:6c:90:ec:32:9b:dd:f3:b7:d5:6f:ed:
fe:58:7c:54:64:72:48:d7:4b:50:95:a5:d9:2a:bb:
cc:19:c0:64:e2:8a:2e:61:9a:01:ee:c4:f3:a9:0c:
5a:c1:b5:71:32:66:e5:69:f3:3a:72:7d:4a:d5:48:
04:1a:fd:66:51:11:a1:ad:3c:23:9a:31:b3:9f:98:
07:e3:41:11:d2:d9:f3:d2:2b:7a:1d:cf:11:48:73:
13:2c:c4:26:4a:af:c2:6e:67:e4:bb:c5:cc:8a:e9:
f8:be:88:8e:a4:83:74:f9:9c:82:88:2f:37:42:22:
98:47:0b:1a:e9:87:54:c9:a7:f8:19:a3:69:08:42:
fc:a3:86:e9:c9:14:26:5b:a7:23:f0:b6:f2:7c:fa:
79:b1:66:4a:5c:f5:d1:e6:4a:16:cf:d0:45:51:e2:
e1:14:4b:c6:c1:58:bf:eb:b6:7a:04:4c:e2:5a:d3:
7b:aa:87:b9:bc:fb:cb:bc:eb:94:2c:99:01:77:f3:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:2F:03:53:A1:AD:66:88:A5:B1:66:E3:ED:5A:81:AB:93:CC:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d71851a0-0a6c-305a-804b-40f926273769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:a8:04:43:23:0b:26:00:5d:33:70:8d:51:da:88:0b:b8:dc:
9e:19:46:80:5d:d9:3e:b4:01:99:ea:25:fd:5f:17:9f:5b:0b:
71:d2:4d:bc:7f:3e:c2:73:43:6c:b7:8d:c8:d9:b7:55:f9:d4:
3a:35:29:eb:f8:20:0e:9d:de:32:f3:86:59:52:8e:6c:8a:2e:
ac:51:69:f0:01:49:9a:c6:96:e3:26:e4:92:fe:a1:5a:cc:0e:
53:bf:a5:50:b2:4d:3c:fd:a3:34:84:40:38:9b:77:30:8c:a1:
84:42:20:dc:49:a5:e2:ab:0b:6d:c2:9b:50:04:96:fb:28:1a:
9f:93:a8:5a:a7:94:56:c0:0a:6b:23:b0:7c:96:9b:3c:1c:dd:
d9:c4:8c:ce:60:25:68:52:d5:18:a7:75:06:1f:ac:b0:13:56:
f0:fe:a6:74:7c:2f:61:d3:a8:86:7d:3b:d3:90:de:28:2d:3f:
34:f8:3a:47:d4:4f:1f:17:4a:9b:61:20:49:7c:ef:80:be:83:
43:00:be:c9:4e:8c:5a:65:f6:94:a5:3f:09:5e:1d:01:11:44:
c9:2a:ef:24:1e:b0:8e:c8:36:67:fd:fd:f9:18:0a:6d:1f:16:
b7:08:0b:58:29:1e:ce:ec:ef:e9:d5:d6:d6:f1:e4:d6:8f:bd:
5b:4e:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:28 2026 by rpki-client