
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a2cc408-197f-38a9-8370-6ce8e37b58fb.roa
File: 3a2cc408-197f-38a9-8370-6ce8e37b58fb.roa (raw, json)
Hash identifier: TpfPDuLaPbLI35B+NnT7tBJcTwT8DBbGKdnDUsjLzGU=
Subject key identifier: B3:56:55:8A:C4:2B:4C:43:D2:ED:B2:2E:0B:6B:27:01:7C:E3:79:DF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F10379AFF282807D4C2BF7300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a2cc408-197f-38a9-8370-6ce8e37b58fb.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 396600
IP address blocks: 192.54.112.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:9a:ff:28:28:07:d4:c2:bf:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=d34411e8-56c7-456a-a7d4-b221a3edb1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:43:a3:e6:f3:13:bd:6e:da:66:54:e1:ce:
49:99:a9:dc:72:6a:1b:d4:95:df:f4:30:5a:d0:5a:
f1:3b:bd:1e:26:29:c6:1e:97:1b:30:b0:90:cb:50:
0b:a9:80:11:68:09:1c:09:a5:3d:8c:4e:e0:ba:38:
2e:2d:ee:c2:a9:00:62:9a:e0:7a:5d:3c:e4:70:fa:
08:f9:07:c7:b9:01:53:ec:e0:ed:32:5f:0b:f6:89:
26:76:d0:5b:d1:2f:76:88:cb:e7:ba:66:9e:55:41:
8b:f2:b3:29:6c:a8:68:10:53:b2:51:e1:19:f8:d7:
31:34:ba:77:d4:3e:89:d3:e6:14:c2:62:8c:ee:e3:
d0:36:7e:66:88:44:8e:7e:9e:e9:cf:62:56:da:0a:
a5:e8:ae:4e:a2:6a:75:c9:da:24:52:e8:06:57:a0:
22:ed:7c:3d:e6:ed:47:2b:a8:d8:1a:bd:57:17:55:
00:c9:df:61:2f:6f:d7:11:a9:be:2a:01:9a:02:d9:
f5:ce:6e:42:4c:2b:e7:4d:d6:ba:43:61:57:96:5b:
3f:1f:7e:10:2b:ce:48:1d:62:15:c7:fe:5f:4f:33:
29:fc:a9:89:0b:13:19:df:ff:4a:12:8c:e4:f5:d6:
f3:d4:f7:fb:b3:b2:e3:2f:41:1d:59:ae:23:94:5c:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:55:8A:C4:2B:4C:43:D2:ED:B2:2E:0B:6B:27:01:7C:E3:79:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a2cc408-197f-38a9-8370-6ce8e37b58fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.54.112.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a7:39:7c:0e:20:17:6d:d9:6f:ff:f2:64:13:14:7b:13:16:
95:1b:f1:7e:5a:ae:6b:81:e5:44:5d:c2:f7:6e:97:be:b4:00:
9b:8c:d6:e1:d7:b2:de:cb:13:55:24:a0:32:c7:e2:ac:63:9d:
02:3b:c3:3e:46:73:a7:b2:22:f6:6b:09:6d:c7:6b:bd:17:dd:
cd:68:49:fa:ca:09:3e:82:75:bf:be:48:37:de:02:01:e9:8b:
30:84:4e:97:c7:37:6a:37:eb:31:69:cc:5e:cb:db:b4:1e:3d:
6d:60:46:cf:c1:0c:52:1b:b7:a6:5d:84:21:68:3a:7f:76:a9:
a1:09:eb:c8:5e:da:7c:6e:3b:d3:e5:b3:80:50:1f:fe:dc:9b:
83:f2:31:6f:1d:78:5d:5f:f2:95:03:12:e3:eb:de:28:09:4f:
d7:c3:66:e0:99:3a:19:1c:99:72:ae:49:37:ba:83:76:36:23:
31:6d:b1:38:22:95:5a:17:06:9c:0e:9f:68:1a:61:1a:37:70:
34:2a:20:19:b6:da:83:82:5b:c5:12:47:c0:c6:af:9b:01:ae:
76:02:1b:2b:73:e6:cc:9e:8f:ef:d8:a5:7c:80:25:80:04:7c:
17:5f:68:a3:29:a5:fe:52:2f:bd:39:2d:c9:ea:d8:a5:b7:7b:
1a:72:99:22
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8QN5r/KCgH1MK/cwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZDM0NDExZTgtNTZjNy00NTZhLWE3ZDQtYjIyMWEzZWRiMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDRDo+bzE71u2mZU4c5Jmanccmob1JXf9DBa
0FrxO70eJinGHpcbMLCQy1ALqYARaAkcCaU9jE7gujguLe7CqQBimuB6XTzkcPoI
+QfHuQFT7ODtMl8L9okmdtBb0S92iMvnumaeVUGL8rMpbKhoEFOyUeEZ+NcxNLp3
1D6J0+YUwmKM7uPQNn5miESOfp7pz2JW2gql6K5Oomp1ydokUugGV6Ai7Xw95u1H
K6jYGr1XF1UAyd9hL2/XEam+KgGaAtn1zm5CTCvnTda6Q2FXlls/H34QK85IHWIV
x/5fTzMp/KmJCxMZ3/9KEozk9dbz1Pf7s7LjL0EdWa4jlFwlXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLNWVYrEK0xD0u2yLgtrJwF843nfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2EyY2M0MDgtMTk3Zi0z
OGE5LTgzNzAtNmNlOGUzN2I1OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDZwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCepzl8DiAXbdlv//JkExR7ExaVG/F+Wq5rgeVEXcL3bpe+tACbjNbh
17LeyxNVJKAyx+KsY50CO8M+RnOnsiL2awltx2u9F93NaEn6ygk+gnW/vkg33gIB
6YswhE6XxzdqN+sxacxey9u0Hj1tYEbPwQxSG7emXYQhaDp/dqmhCevIXtp8bjvT
5bOAUB/+3JuD8jFvHXhdX/KVAxLj694oCU/Xw2bgmToZHJlyrkk3uoN2NiMxbbE4
IpVaFwacDp9oGmEaN3A0KiAZttqDglvFEkfAxq+bAa52Ahsrc+bMno/v2KV8gCWA
BHwXX2ijKaX+Ui+9OS3J6tilt3sacpki
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:25:45 2026 by rpki-client