
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e1d0ccf-e90f-33f4-8b38-f407831f414e.roa
File: 3e1d0ccf-e90f-33f4-8b38-f407831f414e.roa (raw, json)
Hash identifier: HuVi2Akv/tc1E7WN2nGTpxutrVBUzV6Q35mI0hOSoFo=
Subject key identifier: 28:16:52:83:2C:03:9D:88:92:F6:6B:31:9A:37:67:30:CA:23:B0:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F2ABD298F9C6C10E45346C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e1d0ccf-e90f-33f4-8b38-f407831f414e.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 396567
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:29:8f:9c:6c:10:e4:53:46:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=3313de7f-7007-403f-894e-43d6b0b90f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:11:79:31:65:73:20:69:6a:b2:92:27:df:
9c:ff:9f:fe:27:81:c7:eb:36:0f:e8:a2:4c:a6:2a:
94:84:81:ea:40:bf:b0:b2:26:01:31:2b:b9:f9:f1:
fd:f4:56:df:5a:b7:38:0c:e2:63:7f:b7:19:2b:7a:
ec:6c:35:2e:70:da:fa:e9:66:92:ff:fa:af:ac:fc:
ad:5a:36:36:64:16:23:5a:b8:d4:ad:7a:3c:b6:e0:
39:b9:68:c0:6a:86:5c:cf:58:be:ad:4b:45:55:9d:
6a:8d:ba:d1:2b:d2:28:3d:48:30:49:80:d5:a3:68:
71:eb:80:8d:68:52:15:4f:7d:57:ad:a2:d4:55:1a:
5f:c8:ae:30:05:fb:0e:cf:78:6a:d6:76:43:b7:66:
ea:7c:64:84:7b:ff:12:a5:92:87:26:8b:77:20:19:
47:c6:79:94:72:b5:77:7a:be:56:9f:23:0f:21:5e:
1f:0c:90:d6:ef:e9:42:a3:09:2f:8c:d9:0c:af:ae:
6b:8b:4f:60:b5:81:3e:42:6a:19:da:98:fd:d8:58:
06:14:36:74:29:f0:e0:63:0e:a3:bc:56:df:e7:00:
ee:1f:61:d0:98:f2:50:3f:29:1f:f2:a4:2e:7c:19:
4b:ed:25:e4:b8:1f:99:b5:0c:c7:60:d5:ca:7c:e2:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:52:83:2C:03:9D:88:92:F6:6B:31:9A:37:67:30:CA:23:B0:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e1d0ccf-e90f-33f4-8b38-f407831f414e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:32:71:9a:8a:05:3a:a7:50:92:b7:df:24:ba:28:59:45:97:
53:04:65:1b:74:a7:a9:70:e9:5f:c1:35:0e:7f:00:28:73:c8:
32:fd:c9:9c:53:e1:ee:cb:8f:8a:c9:02:e1:70:8a:63:10:d9:
a3:7e:43:f9:3c:e0:9a:af:be:c9:e1:3f:05:8d:b0:fd:a5:1d:
1b:94:b7:73:6e:15:7b:97:40:dd:22:39:80:52:03:29:d7:02:
3d:8b:af:53:2d:7c:56:a4:61:74:da:2e:04:64:a0:22:e1:7d:
68:a8:e0:c4:f2:41:4d:17:a7:78:2d:ce:65:86:ee:d3:8c:89:
16:9f:a4:24:d5:55:56:72:56:ee:3b:32:61:e7:e8:64:56:08:
f2:e6:e7:64:11:3d:58:c7:2c:9f:95:94:13:d5:b9:f4:03:94:
ff:18:82:c1:87:02:41:af:2d:92:01:8b:63:fc:2a:c7:c3:8a:
69:6e:51:8c:a2:ad:cb:76:53:f9:d4:81:31:4a:91:d8:b3:e8:
fd:62:97:f2:dc:10:5e:24:24:54:30:ee:0d:26:e3:a8:d6:66:
75:6a:6b:30:ea:ab:23:dc:2d:da:9d:be:73:96:9d:e4:fe:d4:
1d:4c:e1:86:fa:06:b3:96:a3:44:8d:a5:60:97:ca:0b:4b:97:
86:b5:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:08:39 2026 by rpki-client