
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afc11cd-2dce-3d6e-abc9-c5730aa15e61.roa
File: 3afc11cd-2dce-3d6e-abc9-c5730aa15e61.roa (raw, json)
Hash identifier: CDscdfMeU8MekrZ5rn3UaPm1sGnZHg2GIwhQZLjXOwY=
Subject key identifier: 3A:C6:5E:84:A3:11:11:00:B0:6F:C7:C0:E4:57:F4:9E:B0:9A:C6:DB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F3E47FECECCD061C64122F7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afc11cd-2dce-3d6e-abc9-c5730aa15e61.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 396553
IP address blocks: 192.5.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:fe:ce:cc:d0:61:c6:41:22:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=e3ed33b9-8a14-4a82-9d02-f0b8b8f7a471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:b5:c6:78:6b:81:9b:12:28:e7:10:39:84:
68:c0:03:81:ea:07:52:70:55:3e:14:9d:fd:10:ba:
be:ce:11:9b:61:52:48:e0:32:92:61:93:4d:d9:7a:
8a:d5:2c:c6:a5:cf:b4:f4:c6:1a:e5:c4:57:bc:c5:
2d:02:95:cd:78:23:03:53:f5:22:6b:b4:61:70:ca:
91:b6:e9:b2:20:1c:9f:d8:84:28:99:b0:da:89:df:
67:e5:0b:c6:d3:ee:3a:b9:fc:dc:6d:6d:9a:4e:44:
ce:58:fd:ab:a3:d7:c8:5d:c2:65:a9:c4:ba:46:af:
1e:a6:75:75:7e:41:4e:05:40:7e:5c:bd:bb:63:15:
eb:ce:5b:98:a0:98:7e:f0:d6:d9:1c:a7:68:5f:c8:
d0:83:cf:8b:61:0a:bc:a8:d5:5a:8b:91:18:c2:b5:
cd:a9:ed:b0:08:5e:3b:7d:9e:25:bc:96:88:91:4d:
08:c1:ff:c9:17:c9:64:df:4e:aa:c6:22:7b:92:a5:
8e:b0:aa:de:25:29:97:0a:14:57:36:77:b4:36:0a:
f3:b4:01:2b:ad:61:2d:5c:c2:1f:f8:3d:c2:d0:97:
21:02:ed:40:13:25:91:7f:71:c6:80:95:11:12:5e:
a6:22:f0:8b:08:d2:9f:88:0a:a2:a9:13:1a:fb:0c:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:5E:84:A3:11:11:00:B0:6F:C7:C0:E4:57:F4:9E:B0:9A:C6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afc11cd-2dce-3d6e-abc9-c5730aa15e61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7e:69:54:43:2a:d5:66:2d:1b:af:6b:50:6a:b6:ad:fb:eb:
30:c6:3b:75:b4:53:39:cd:8f:5a:53:47:5e:58:fa:a1:f6:6b:
d9:f3:2e:77:dc:66:62:a2:14:b5:de:4e:8e:b8:e9:5e:b8:e0:
80:93:c7:22:ec:9f:95:68:a7:71:6c:35:f5:fd:a8:5e:c9:47:
35:1b:ae:03:33:f5:1f:3a:4f:34:29:8d:2a:e4:be:47:fb:25:
e9:fc:1c:58:22:d5:41:5d:60:5c:5e:a8:e6:41:44:26:9d:21:
58:d9:4d:8d:1a:e8:07:09:07:19:1d:25:3e:da:8a:a2:4f:79:
2d:a5:ec:12:91:d7:2a:4c:1d:b9:60:fa:56:e6:d2:1e:2b:70:
94:ce:6d:34:ad:bf:97:ea:75:46:d0:98:31:9f:70:90:28:7e:
d3:b3:66:2e:0b:f1:01:80:91:09:24:30:25:3c:3e:4c:ba:94:
d1:af:81:a9:cf:f4:32:7c:3f:39:a6:79:65:82:17:76:88:30:
d5:4a:7b:a6:3b:4d:0a:c2:9a:db:ff:e0:f7:8b:f9:4d:cd:0f:
74:6a:95:20:e4:74:c5:22:ba:58:bc:39:32:ae:5c:c2:c8:89:
96:1a:10:60:f6:3c:65:18:af:2e:a9:51:28:60:04:69:1f:41:
0b:5e:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:08 2026 by rpki-client