
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9e8940-05a2-3a78-861c-a14477a7bdca.roa
File: db9e8940-05a2-3a78-861c-a14477a7bdca.roa (raw, json)
Hash identifier: OV7JfAGiUuxWa7zzeD3Vu+VoFRxDF5kzhzfP28XxtkA=
Subject key identifier: 12:C3:3E:B4:C6:66:21:2D:8F:03:60:2A:15:4F:B1:9A:95:0D:77:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EF2E761857B71048F55E33400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9e8940-05a2-3a78-861c-a14477a7bdca.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 36620
IP address blocks: 192.42.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:61:85:7b:71:04:8f:55:e3:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=78ef18ef-6653-40a6-9665-17c466e1a584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:c8:72:81:30:f9:21:71:1c:af:82:3d:5d:
36:cb:f2:65:64:57:03:8f:aa:a8:c4:66:33:8f:f6:
86:79:78:23:e1:5b:9c:86:23:d5:33:8c:6a:f6:66:
9f:83:00:0f:c1:5b:63:73:48:46:a9:c5:da:c8:35:
61:4c:28:d6:8f:3c:c4:a0:55:3b:e6:fc:48:16:82:
59:4e:5a:88:52:6d:61:66:f6:f1:75:ef:fd:af:c7:
e4:4c:dc:22:37:ba:d1:d7:09:36:33:68:3a:50:3f:
72:ec:54:b6:3f:d2:bd:33:0c:cd:f4:fd:55:ab:3d:
cd:ca:55:50:81:1b:05:47:9c:76:eb:ce:2f:b8:cc:
d8:70:a7:95:f3:15:94:83:21:f2:0a:29:c8:f2:6e:
14:53:69:6b:39:11:0d:37:71:2a:0b:6d:8b:54:fa:
c0:5e:56:b0:50:74:76:73:b8:9c:e6:02:e4:5c:75:
87:7e:aa:1e:7e:da:09:66:71:84:a5:55:be:e9:ac:
a7:e8:8d:b8:7f:ca:cf:89:15:9a:48:6e:fa:9e:56:
38:b9:ee:1f:53:d0:33:c5:93:d9:ef:7c:8d:d3:9e:
30:6a:ee:19:3d:54:94:e6:a1:f2:23:08:8b:ea:bf:
35:84:ea:1f:4c:7c:51:09:01:f4:2c:fd:50:2a:e0:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:3E:B4:C6:66:21:2D:8F:03:60:2A:15:4F:B1:9A:95:0D:77:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9e8940-05a2-3a78-861c-a14477a7bdca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c4:ae:e6:2a:83:ad:f1:db:7e:66:44:c7:44:b1:06:ed:e3:
dd:72:61:c6:94:87:b7:ad:be:20:99:72:52:3a:36:3a:d0:33:
8c:dd:48:fe:35:1a:b4:23:e0:bc:64:6d:4b:29:8c:21:34:c5:
a4:7e:d0:09:8e:b4:14:52:07:2a:9a:c4:87:fd:de:84:d5:d2:
aa:9d:2e:11:a8:c6:93:e1:d0:ba:60:6a:8c:8e:6d:29:fe:6a:
32:5c:af:50:0c:ca:33:a9:af:e8:58:c8:8d:5f:c0:f8:9f:86:
10:c1:f5:93:0d:e9:b3:53:72:15:1e:77:ec:c5:0f:8f:c4:d1:
8a:1a:62:9b:fc:51:7f:c5:74:3a:c3:27:a5:ae:45:fe:87:e3:
36:16:8b:64:c1:17:a6:d1:c0:fb:d8:8e:6d:cc:23:98:0a:08:
25:1f:57:8d:d4:d4:54:0f:29:6b:2c:44:44:2f:3e:5e:78:c7:
48:ff:8a:a7:ce:58:76:20:75:0e:1e:e2:97:27:3e:fe:ef:d8:
b2:58:0a:c8:78:4d:8b:36:87:ec:1d:1e:82:c7:9e:05:eb:87:
1f:7f:1b:0f:2e:1b:6e:b1:ce:d5:47:e5:38:cb:70:bf:25:52:
ae:27:7b:04:00:f8:de:5f:53:85:96:b1:32:c3:7c:1e:a0:b6:
58:f1:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:19:16 2026 by rpki-client