
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f91b0d7-4e3b-337a-8280-1bd314770677.roa
File: 3f91b0d7-4e3b-337a-8280-1bd314770677.roa (raw, json)
Hash identifier: Z+lTmsuycBAl+YHV/qTTNyitgJHrJ7jaEP6yegsvhaI=
Subject key identifier: 1C:60:C2:C4:A4:B5:D0:B8:A1:A0:C8:67:32:33:7E:17:B2:29:27:5E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D8128606922FE26B79BF7D360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f91b0d7-4e3b-337a-8280-1bd314770677.roa
Signing time: Tue 14 Apr 2026 14:22:12 +0000
ROA not before: Tue 14 Apr 2026 14:22:12 +0000
ROA not after: Mon 13 Jul 2026 14:22:12 +0000
asID: 36625
IP address blocks: 192.33.14.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:60:69:22:fe:26:b7:9b:f7:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:12 2026 GMT
Not After : Jul 13 14:22:12 2026 GMT
Subject: CN=9949bded-08b4-4f9d-bdf3-557b35c81d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:60:26:85:08:5e:39:80:ed:68:19:65:35:
2f:19:0c:7b:01:e9:13:34:27:fd:9b:88:21:f1:69:
64:83:78:32:ae:e1:18:5a:9d:a6:99:c8:d7:fa:ae:
9e:2c:75:26:10:27:cd:10:3d:fa:ff:f1:5f:e6:b7:
63:ec:0f:ec:dd:56:30:6b:cd:ba:13:42:7b:ba:f5:
9e:63:93:24:92:ca:b5:90:ba:5b:00:51:b2:ae:3d:
4c:8e:68:7a:c1:32:7e:c6:b8:63:58:30:cb:a3:40:
51:fc:56:8c:6d:dd:db:46:d7:fc:b4:c2:06:fa:12:
ee:44:b9:fd:7c:7e:94:64:55:1a:3d:35:f1:a5:9b:
36:df:d2:41:05:20:f7:ce:ea:22:c2:04:6a:64:57:
e4:78:ef:f6:a6:ae:a7:af:65:89:e7:f4:f4:c3:65:
e5:3d:70:4c:6c:a3:fc:57:d6:d9:d9:67:a2:e6:cd:
ae:44:ae:28:e1:a7:b0:64:8f:78:7c:81:ba:1e:53:
e7:45:33:09:87:b3:3e:c6:93:b9:2b:31:ba:5f:24:
50:50:39:3d:64:08:a3:2e:f3:98:b3:70:df:a7:a2:
08:9f:8c:7a:54:61:90:2e:5d:43:e3:68:47:a3:66:
ef:9d:f5:b9:00:a4:6e:99:fd:a0:5c:16:77:d1:8b:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:60:C2:C4:A4:B5:D0:B8:A1:A0:C8:67:32:33:7E:17:B2:29:27:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f91b0d7-4e3b-337a-8280-1bd314770677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:70:3a:e4:b8:5b:8b:97:5c:13:30:eb:39:b1:22:7e:55:a0:
2c:53:a7:4c:26:4e:74:91:25:fa:e9:9f:d4:97:f3:39:86:7c:
94:99:17:91:48:98:57:5e:67:df:e4:a8:1a:ba:5d:d0:37:ab:
38:ff:58:8b:fb:d9:af:08:77:f5:e2:87:07:83:06:02:88:dd:
4e:08:fb:9e:f1:3d:a0:a9:62:0b:8a:39:2e:80:47:92:03:76:
fd:c6:21:44:4d:84:ae:91:db:15:df:3d:c8:c8:92:ed:0b:f4:
6a:e7:5b:35:06:7f:0a:b8:60:dc:c7:9f:5e:f0:ee:32:96:e7:
69:95:24:b6:3c:6f:83:ab:6c:2c:fd:98:02:85:65:c3:58:11:
80:7d:01:d0:b6:85:0e:c3:ac:23:f6:31:89:0d:55:1c:be:d5:
40:1b:0f:88:07:8d:f4:f0:40:e3:cb:11:a4:30:f3:86:d0:5a:
c7:fd:ed:c9:27:ec:e4:19:00:87:6a:60:83:a3:02:9f:57:19:
61:77:aa:20:c7:75:f0:43:ca:02:9c:77:31:b2:69:55:26:aa:
00:82:5e:8b:71:a2:f5:f6:f0:84:79:35:c6:60:a7:52:6c:87:
d6:3a:51:52:de:e7:14:0b:ee:6e:e2:86:fd:59:f6:a8:f2:24:
2f:0e:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:24 2026 by rpki-client