
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa
File: e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa (raw, json)
Hash identifier: 5uJI5Oqu+t5CGVXBKSBkdUzJWN1Y1Q2QDtbfGfD4BsI=
Subject key identifier: 85:8D:2D:6A:26:46:A1:BB:59:EF:B2:8E:4D:AB:23:41:8E:CA:C2:29
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D2A74FC8D17ACA16D0A199C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 396599
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:fc:8d:17:ac:a1:6d:0a:19:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=2a9532be-bf04-4f2f-9e51-2c2aa5899c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:48:13:ad:73:e4:37:ab:2e:4b:21:e9:de:
69:e5:3b:ec:71:d5:22:e4:50:ac:5c:88:fa:6e:c0:
6f:4e:b8:a8:1f:07:43:0b:5e:68:04:b6:5b:87:59:
4b:43:f1:99:84:01:fd:98:eb:a7:ac:77:65:f7:17:
05:f5:61:da:36:53:ae:83:9f:48:91:89:f9:ec:d1:
7d:0d:f5:30:3c:3a:b1:28:87:ac:a0:63:b3:00:66:
09:86:9e:e8:17:03:7e:b3:93:d5:95:6d:c6:db:36:
4b:65:49:c4:12:e2:f0:9a:f9:e0:41:b6:b2:50:bc:
c8:92:14:19:a7:e6:7e:56:05:60:d6:53:77:a7:85:
95:49:a5:37:37:cc:2a:89:55:eb:60:bb:7a:2f:87:
53:77:77:c1:6e:04:9d:b7:88:46:56:ea:b5:7f:04:
fb:3f:1d:43:75:60:e3:73:4a:9c:99:e9:f6:e8:78:
d0:e0:f2:00:89:e4:88:c8:36:13:10:a6:b5:7e:3d:
90:5e:00:6f:c9:11:50:ca:06:5c:1a:77:41:fd:07:
a8:a6:00:a4:0c:77:f0:57:07:4b:c6:2f:0a:0a:15:
33:4e:8c:5a:85:99:c4:7d:95:c3:c0:a0:af:f9:f1:
b5:d4:03:2a:f7:0c:55:49:03:ee:0b:f2:8b:cd:cd:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:2D:6A:26:46:A1:BB:59:EF:B2:8E:4D:AB:23:41:8E:CA:C2:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:7f:02:78:32:93:bb:ce:d6:67:48:25:81:95:db:d0:82:5b:
49:85:28:dc:5c:0c:6b:10:50:6d:18:bd:31:64:14:dc:5d:d7:
4b:ce:cd:cb:af:1e:db:67:69:8c:b4:f6:02:20:19:50:25:37:
d2:9b:ee:34:6a:d6:e4:e9:cb:9d:36:32:f4:a1:b8:02:1d:4a:
92:d2:3f:ec:c4:07:57:42:54:fb:d0:42:98:db:10:b9:af:bd:
84:66:f7:53:f8:b7:78:94:cf:57:ef:b9:7a:9f:09:8c:33:55:
9c:62:67:43:f6:3e:49:47:84:56:d8:b4:de:66:fe:71:ca:2f:
55:8c:c2:f2:56:6e:6a:92:8e:05:f9:33:14:f5:fb:0d:62:6e:
19:c0:54:2b:e8:2e:83:d4:53:c9:24:ca:d0:ce:4f:e4:05:97:
32:22:6a:61:83:22:47:4a:c1:29:76:96:f9:1b:a3:26:9a:35:
f8:c0:27:fa:eb:ea:3a:d0:cd:d8:43:31:ce:60:82:51:b7:08:
61:92:c7:f8:b4:61:94:ce:63:f0:8d:9e:cb:e2:46:8b:a2:a1:
f2:ac:b1:c6:af:83:ea:bd:53:2f:76:98:62:71:2f:62:42:57:
32:e9:b3:c6:73:f0:70:54:22:d2:56:4a:f8:37:3d:d1:17:9b:
bb:70:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:03 2026 by rpki-client