
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ba8e2e7-6b0b-306c-a61d-b474600d36d5.roa
File: 2ba8e2e7-6b0b-306c-a61d-b474600d36d5.roa (raw, json)
Hash identifier: k0OQl/QzuhsHoiLmPFKDtxeqnJJHS5tE+Cwg0fj39T0=
Subject key identifier: FA:19:0A:EC:B8:B9:15:01:62:56:A0:FC:54:F5:B6:9F:86:2D:4C:C7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0672772C29490E8D493F7380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ba8e2e7-6b0b-306c-a61d-b474600d36d5.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396573
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:77:2c:29:49:0e:8d:49:3f:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=f0d801fd-0784-4286-a5e6-19d5de146722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:ab:9e:13:07:3f:45:1c:a0:83:17:d0:05:
1b:c3:e6:60:7e:a9:7c:07:1c:41:14:a5:06:f4:8d:
ba:a7:de:28:3d:9b:02:ac:2a:0a:56:cb:da:16:49:
28:85:70:2c:bb:f8:a1:bd:17:d2:74:99:91:bb:63:
c3:fb:83:c0:e7:36:8e:72:a4:ee:bf:57:41:c1:46:
7f:a6:77:69:96:40:91:e1:47:00:48:1c:0d:c2:2c:
f6:78:39:82:e4:62:47:52:0c:4d:a5:18:2b:e6:0a:
0e:97:d2:16:c1:36:aa:d8:be:da:a3:a2:25:81:46:
01:9c:f6:52:3f:45:f1:e3:d5:51:5e:45:a7:cf:09:
c2:4e:d7:84:30:27:a3:c2:b9:d3:69:d4:08:69:b1:
b0:c3:e6:f0:46:2b:38:4f:4a:c3:87:d0:42:c1:d2:
bc:02:9e:12:42:80:0a:4c:4d:0d:24:43:07:0c:ca:
46:cc:0c:bb:b1:69:6b:a5:c3:bf:7b:6e:bc:fd:db:
cd:ec:7c:cd:87:22:52:38:b8:2a:61:7a:b6:8d:50:
ee:ad:80:bc:28:87:9f:47:cf:eb:86:db:64:ad:ed:
e1:50:86:af:11:ab:7e:bf:f1:2d:47:07:ab:2b:fb:
c4:c6:d8:6e:8c:f7:79:90:a2:20:fd:b6:ce:aa:32:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:0A:EC:B8:B9:15:01:62:56:A0:FC:54:F5:B6:9F:86:2D:4C:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ba8e2e7-6b0b-306c-a61d-b474600d36d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:70:12:60:c2:8d:49:57:b8:88:03:3a:46:0a:f3:bf:58:2e:
c4:12:97:fb:2c:80:ed:1a:e7:d6:42:36:57:21:3e:a1:60:08:
c8:99:32:2e:ec:e2:02:97:bb:07:39:fc:44:8b:c5:ce:29:07:
fd:7c:a8:0a:f7:62:56:54:a1:75:f3:f3:81:08:c3:cd:0b:cd:
bc:ad:66:98:75:39:c3:40:21:f8:d0:8f:1e:b1:82:1a:79:60:
e9:a6:6a:83:e9:52:41:95:5d:a3:69:aa:70:61:cf:17:12:e5:
6d:dc:4f:8f:56:14:b3:df:db:ab:a9:73:07:0b:97:94:67:42:
c0:3b:61:8f:93:08:25:5b:19:c5:0e:0d:35:9a:0b:55:bc:91:
3d:13:62:3c:87:4b:7f:dc:6f:40:bf:c1:db:b3:de:8d:44:50:
16:46:ed:4c:47:37:bd:bf:fc:7c:e8:71:df:2c:30:62:8e:3e:
48:2c:a2:b1:55:fb:36:a5:09:2a:38:53:4c:af:f5:eb:08:75:
4d:24:d9:94:31:67:c0:1e:27:a8:89:b6:28:ee:3f:5d:04:27:
8f:d6:ee:2e:a9:d3:b5:c1:8c:c5:a4:5e:c6:2a:0b:39:17:2e:
81:b3:ad:9d:04:63:26:de:bd:2b:41:fb:98:09:b3:83:25:91:
74:a6:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:49:11 2026 by rpki-client