
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd6ce89-f8a0-344a-9dad-901dd61ab28a.roa
File: dfd6ce89-f8a0-344a-9dad-901dd61ab28a.roa (raw, json)
Hash identifier: a61BKnHRuW6YgetPkQGuA+RPs6DZvJTl5mFuimUDfrk=
Subject key identifier: 4D:B6:BA:CA:9E:C4:BC:68:4D:2F:3E:6B:66:B9:32:2C:75:04:CB:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F43DD2E7A3C9E219A70A177A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd6ce89-f8a0-344a-9dad-901dd61ab28a.roa
Signing time: Wed 23 Sep 2026 01:00:12 +0000
ROA not before: Wed 23 Sep 2026 01:00:12 +0000
ROA not after: Tue 22 Dec 2026 02:00:12 +0000
asID: 19836
IP address blocks: 192.42.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:43:dd:2e:7a:3c:9e:21:9a:70:a1:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 23 01:00:12 2026 GMT
Not After : Dec 22 02:00:12 2026 GMT
Subject: CN=f41ffac9-1776-4a5e-89c0-c11badca725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:67:e9:44:86:f1:fa:6e:bd:81:f1:65:8b:
91:9f:35:82:76:4b:ac:84:de:e8:34:ab:ff:4b:0c:
ff:e7:c0:72:8d:ab:86:6f:4f:7f:7e:3b:8e:55:b5:
ad:f7:d2:af:19:1c:a9:9f:39:12:80:a6:2e:63:85:
7c:2e:72:bc:d6:7f:ae:17:e7:95:f4:bf:c5:f8:89:
09:6f:d9:1d:14:34:23:03:13:c9:bb:f2:20:0c:7a:
50:6c:4e:2f:21:6e:df:2c:3e:8b:09:d8:f5:48:fc:
59:8a:ca:56:ff:30:87:ce:ad:1e:82:cf:d5:41:50:
93:84:90:25:4d:19:1e:2c:fc:81:7a:c8:02:06:3b:
d6:f6:ca:fe:b2:49:fd:dd:59:15:34:a0:7c:fe:ed:
ee:30:b5:6c:5b:ac:6e:69:03:d1:e7:29:87:70:b2:
9a:a4:3d:65:02:f2:f2:f4:41:b3:72:5a:f7:ea:fc:
f8:19:53:93:21:93:e0:ff:58:f6:80:f6:94:22:95:
fe:e4:17:c8:c5:9f:4f:b6:86:cf:76:2a:98:a3:ad:
da:fe:a9:33:69:da:28:39:e4:ac:97:f5:58:48:5c:
9c:e1:5b:76:9a:34:55:64:81:f3:4f:a6:59:3c:82:
fc:3f:7a:51:be:ca:42:e5:4c:f9:ca:a1:a7:8b:35:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:BA:CA:9E:C4:BC:68:4D:2F:3E:6B:66:B9:32:2C:75:04:CB:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd6ce89-f8a0-344a-9dad-901dd61ab28a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:80:f4:1c:ee:dc:8e:e2:e8:37:71:ac:f5:a9:dc:1c:db:7b:
2c:4c:b0:62:77:6f:b1:68:5e:d7:82:d3:41:02:5b:78:f8:4c:
e6:7d:15:b1:ff:4d:6f:31:73:f3:b4:13:7f:4c:80:da:44:6e:
00:fd:6e:74:94:f3:e7:ce:b8:63:2a:99:90:0a:b2:a7:cf:42:
17:7c:17:e4:1e:b0:e0:a8:c3:3f:f5:70:82:08:06:17:b2:04:
2e:0d:33:79:69:38:55:5f:54:f6:4b:5e:ae:c9:74:4c:3b:b2:
f7:0e:25:a9:1e:05:0c:e4:a5:fa:67:e8:d0:d1:b1:ad:18:e5:
d3:07:1a:29:bf:bc:a4:05:5c:4e:00:aa:73:f7:c0:c2:93:1f:
5c:2d:af:60:eb:c6:6f:08:23:e6:24:d3:14:1d:a6:0b:29:f2:
03:67:a8:69:ff:32:a2:2d:31:56:95:6f:85:fd:c2:74:24:1e:
33:90:27:a9:84:19:55:f6:03:5b:8e:92:ba:6b:a4:fb:2e:fa:
dd:4c:a4:23:64:3d:ea:12:7b:16:6c:d2:46:70:fd:02:30:54:
32:02:3a:6c:33:1b:d0:29:07:c0:bb:ae:40:c0:82:a0:20:a6:
16:58:b6:64:0e:86:f4:92:e7:0f:ed:c0:25:40:fa:44:1e:45:
56:91:28:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3S56PJ4hmnChd6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZjQxZmZhYzktMTc3Ni00YTVlLTg5YzAtYzExYmFkY2E3MjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTRn6USG8fpuvYHxZYuRnzWCdkushN7oNKv/
Swz/58ByjauGb09/fjuOVbWt99KvGRypnzkSgKYuY4V8LnK81n+uF+eV9L/F+IkJ
b9kdFDQjAxPJu/IgDHpQbE4vIW7fLD6LCdj1SPxZispW/zCHzq0egs/VQVCThJAl
TRkeLPyBesgCBjvW9sr+skn93VkVNKB8/u3uMLVsW6xuaQPR5ymHcLKapD1lAvLy
9EGzclr36vz4GVOTIZPg/1j2gPaUIpX+5BfIxZ9PtobPdiqYo63a/qkzadooOeSs
l/VYSFyc4Vt2mjRVZIHzT6ZZPIL8P3pRvspC5Uz5yqGnizXkcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE22usqexLxoTS8+a2a5Mix1BMsjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZkNmNlODktZjhhMC0z
NDRhLTlkYWQtOTAxZGQ2MWFiMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCpdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmA9Bzu3I7i6DdxrPWp3BzbeyxMsGJ3b7FoXteC00ECW3j4TOZ9FbH/
TW8xc/O0E39MgNpEbgD9bnSU8+fOuGMqmZAKsqfPQhd8F+QesOCowz/1cIIIBhey
BC4NM3lpOFVfVPZLXq7JdEw7svcOJakeBQzkpfpn6NDRsa0Y5dMHGim/vKQFXE4A
qnP3wMKTH1wtr2Drxm8II+Yk0xQdpgsp8gNnqGn/MqItMVaVb4X9wnQkHjOQJ6mE
GVX2A1uOkrprpPsu+t1MpCNkPeoSexZs0kZw/QIwVDICOmwzG9ApB8C7rkDAgqAg
phZYtmQOhvSS5w/twCVA+kQeRVaRKHk=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:05:35 2026 by rpki-client