
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa
File: 3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa (raw, json)
Hash identifier: KPKwe0Td1SL7CW9lMNRD0LqfLQNb3cEVweB+8aziCFI=
Subject key identifier: D8:5F:CF:4D:96:97:8F:6C:AA:D9:FC:AF:4E:93:5A:A3:48:46:1C:F7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D00B27627A5F2F7A1055ED760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 20172
IP address blocks: 192.43.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:76:27:a5:f2:f7:a1:05:5e:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=d97cdbb4-a92f-4fc3-a6d3-60869e74eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:3c:2f:22:5c:36:67:db:08:6a:16:81:ce:
85:58:b2:c3:c5:e0:70:33:1e:1f:db:49:ee:a5:7c:
ca:f9:72:ed:cd:ac:fc:3c:a6:24:bd:b3:04:e9:1b:
41:ff:b1:2d:64:ce:32:18:e8:77:b8:aa:b9:94:81:
f6:2f:c3:20:9c:46:8b:6c:04:40:9b:7e:7c:1f:e5:
b0:45:82:0d:49:bf:c5:7e:62:b3:81:58:13:d3:3d:
07:f4:d9:d7:82:7b:f3:50:b2:16:68:9b:1f:f6:c2:
81:17:0a:8d:8d:a7:09:4b:28:c2:4d:2a:ac:ca:1f:
5d:04:0d:f9:45:38:01:82:8e:9a:d8:04:3b:ae:d8:
86:b4:34:4a:1e:e0:e5:fb:94:6a:ba:42:5e:60:c2:
c7:19:cd:8d:a5:a2:21:e9:cf:7f:18:ee:81:06:79:
4d:de:49:7d:34:c0:38:90:50:91:11:6e:ae:cc:22:
40:6a:43:45:12:85:1f:20:67:6b:6e:d5:b5:fd:ac:
4f:1b:78:ef:c8:a8:17:20:e9:5d:f9:c1:f2:52:a6:
21:96:2a:10:14:13:f8:96:5a:d8:bf:1d:b6:10:96:
d7:6f:5b:b4:60:c0:e7:25:4b:84:28:3f:ca:4a:69:
15:bc:32:04:6a:aa:05:6b:6d:8e:37:9f:6f:22:30:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:CF:4D:96:97:8F:6C:AA:D9:FC:AF:4E:93:5A:A3:48:46:1C:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9c9aa7-86df-3a68-b98f-36bd34c5a754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ba:86:d9:c6:e4:a3:c4:d9:20:ee:38:32:49:6e:d8:48:68:
50:b5:b0:88:f5:7a:02:28:b6:e3:e1:44:20:93:5d:8e:c7:c5:
c8:3e:6a:1d:b3:f3:09:bb:54:8b:1c:ae:cc:7e:3d:45:4e:cd:
f3:fb:86:f5:63:1f:79:13:39:09:e5:80:d7:49:b9:3e:ee:66:
42:13:24:bb:aa:82:69:16:ed:81:93:0a:b9:4a:4f:a9:7f:0f:
df:b4:18:c5:f5:51:bd:28:e4:e5:4b:47:8e:c1:01:f0:96:4f:
94:80:e1:19:3a:f8:23:44:a9:ce:34:ae:ac:aa:9b:72:f6:bc:
07:1c:80:73:cc:ef:8a:b9:85:42:6f:3b:b0:ff:f1:7c:dd:fa:
f3:5a:0d:d5:ec:12:12:6b:08:3c:2c:aa:3f:c5:2c:95:ce:20:
97:3b:ed:d2:b6:97:a1:80:90:44:85:70:81:62:8d:b7:4a:81:
8c:34:32:bd:87:31:22:85:25:f6:e4:b9:d7:dc:c3:e7:15:c7:
f2:40:b9:f2:ad:c3:b0:5c:ef:ed:da:11:73:73:3b:d9:c0:5d:
b4:50:9b:3a:36:d6:8f:75:06:b0:52:0c:23:4a:70:fa:42:3e:
29:a1:8e:9c:90:43:ba:75:98:83:03:33:e2:49:9f:31:96:8f:
9f:e9:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:21 2026 by rpki-client