
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa
File: 30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa (raw, json)
Hash identifier: osq9YO7B+xKy9wl9He8/Z8PuV7gpnmLI0S5DHE5ahdc=
Subject key identifier: C8:11:5E:5D:4C:EC:49:67:60:24:1A:D2:A7:5D:BD:77:62:56:B4:90
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06729086275C8DA12020A750
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 397204
IP address blocks: 192.82.133.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:90:86:27:5c:8d:a1:20:20:a7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=4c31323a-ad94-4691-9ef7-57ab2e42e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:31:8a:75:de:70:84:66:b2:a1:25:07:f1:
51:9a:3e:81:87:e6:4a:24:01:1d:b9:17:9b:55:25:
ea:d0:5c:8a:cb:2d:0b:cb:ef:75:fc:67:99:8b:46:
93:c9:5d:12:20:bc:d1:1b:40:be:93:a3:b4:ac:15:
1a:c1:52:bb:a5:32:9e:56:93:0a:77:51:c6:09:c6:
d1:0a:56:ea:06:85:48:a6:f0:5b:7c:d4:bc:ab:45:
3b:3b:7e:6f:5c:98:6b:91:57:e6:92:0a:01:b3:8f:
18:b6:82:2d:ec:2b:45:fb:19:b6:e3:4e:c9:8d:15:
62:e2:97:6d:0e:f9:69:b3:bc:5d:62:35:cc:25:a7:
a1:63:8f:e7:7d:34:47:2f:85:38:6d:09:78:57:71:
20:43:d6:0d:1f:33:a6:70:8f:90:0c:cb:dd:a3:25:
e5:39:43:50:99:db:79:ba:c3:68:6e:80:44:f5:4f:
e2:3e:2e:76:5c:81:83:67:a3:84:39:b0:77:b2:63:
b4:72:25:fd:40:15:de:c1:10:4f:b3:ac:aa:3c:11:
ea:75:cc:65:8e:4b:35:10:29:8d:56:5a:cd:af:12:
85:e1:fa:5b:ab:3c:d6:d4:1f:18:18:16:4f:6b:86:
0e:aa:8e:7d:74:b8:1f:d6:92:21:92:94:b7:36:1f:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:5E:5D:4C:EC:49:67:60:24:1A:D2:A7:5D:BD:77:62:56:B4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.133.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:9f:e0:f0:87:e8:3f:30:73:d9:91:d7:c5:88:40:6f:29:1b:
a0:56:e2:88:f5:f8:3c:05:10:77:64:37:f1:58:b7:bd:b1:85:
62:d8:e0:97:36:40:db:04:2a:85:5c:3e:a1:3a:29:70:8a:c2:
41:3e:47:c2:72:91:99:2a:59:ba:b1:19:7f:61:98:ae:f6:aa:
90:b5:82:9f:97:f0:81:75:3c:34:58:cf:bd:61:8b:a5:7e:09:
51:96:9d:39:65:a2:b9:33:7b:36:25:d1:31:32:5d:b3:b0:f9:
76:47:59:c4:bd:18:11:ac:95:20:7c:01:0e:41:6e:6d:e7:60:
c0:49:52:f9:66:6f:8a:55:43:f0:25:bf:06:11:ac:dd:08:d6:
17:f0:d8:82:93:73:58:54:29:04:f4:2c:0e:63:43:19:59:e6:
98:b1:2b:45:b4:c5:52:00:9b:9d:8b:95:e7:2a:fd:d4:84:c9:
2a:7d:e3:c6:05:b9:a4:c6:86:85:03:7f:b6:7e:14:85:94:eb:
aa:00:c1:6c:6e:ae:2f:34:10:03:bb:97:17:38:40:93:9d:62:
58:d1:7f:c5:29:df:e0:e1:8d:6b:0f:7d:7b:4a:44:a3:8b:54:
a4:f6:da:a6:33:0d:d7:fd:17:b3:ea:b1:62:d2:0f:64:81:99:
fb:98:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:00:28 2026 by rpki-client