
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
File: 438a88ad-3d5c-36f4-8932-6a500a74e006.roa (raw, json)
Hash identifier: vQY/yYm85N50fqDIEtMLwVZlDGKZIHjVtybj3iEmDyE=
Subject key identifier: E2:39:80:B1:65:0F:40:D4:D4:36:9E:93:04:18:3C:DF:1C:C0:93:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D81285A14CE9A92655236F8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
Signing time: Tue 14 Apr 2026 14:22:09 +0000
ROA not before: Tue 14 Apr 2026 14:22:09 +0000
ROA not after: Mon 13 Jul 2026 14:22:09 +0000
asID: 396609
IP address blocks: 199.7.76.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:5a:14:ce:9a:92:65:52:36:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:09 2026 GMT
Not After : Jul 13 14:22:09 2026 GMT
Subject: CN=98a0f9c2-24bc-4a0f-8d8b-3820ea9d34c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:1d:a6:c9:58:81:ad:5c:d6:d4:f2:92:8d:
10:69:75:dd:d2:71:83:5c:23:f4:52:81:d0:92:39:
56:36:fc:38:06:60:0a:b2:cc:6e:58:e5:65:66:83:
2f:df:70:57:79:6e:62:9f:1a:6b:d1:5e:35:95:51:
81:f3:77:8e:66:d7:bd:cb:ed:04:33:f7:2c:03:cc:
96:d3:a2:14:9a:c6:3a:b5:2a:c8:5b:5b:63:40:d0:
74:4d:7b:27:36:f3:b6:07:9b:b9:b8:e1:51:e9:9e:
61:2a:63:18:9c:88:aa:08:d0:e9:0c:76:01:6a:24:
fc:21:16:d1:db:50:1f:a9:64:ca:fa:c8:82:41:7d:
ed:77:30:16:31:14:52:d7:32:10:87:3b:0c:3c:aa:
b1:d4:f4:9e:b3:60:c8:6d:bd:11:db:0c:06:2f:05:
27:21:32:c9:30:fb:26:ab:ab:22:93:24:9d:44:70:
d5:25:81:cf:55:bd:30:21:ca:e5:0d:81:3a:9f:bb:
d0:97:06:9a:68:1d:f7:a0:5c:4c:60:fe:b9:e3:c8:
0e:c2:13:c9:5b:65:f7:21:5c:3b:b0:be:1e:22:d9:
77:0c:f0:41:e5:bf:77:7d:42:b8:63:e8:13:61:36:
b5:a1:dc:a2:7a:53:dd:c8:52:e4:c8:2c:98:2e:0b:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:80:B1:65:0F:40:D4:D4:36:9E:93:04:18:3C:DF:1C:C0:93:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f1:f5:44:dc:1a:57:b4:03:c4:ed:b0:0e:2b:8d:cb:c8:72:
4d:0b:9d:03:73:87:77:0b:25:1c:82:11:49:7b:97:6d:49:aa:
dd:f1:82:3a:d2:56:6f:eb:e6:4a:e5:61:2b:b8:83:a1:41:74:
f0:f0:7d:0e:8d:d9:e6:7a:23:10:54:c7:00:b7:95:41:b9:aa:
e4:79:95:09:71:6b:ea:8d:dc:6d:fb:2f:52:33:d6:ef:df:63:
9d:49:29:1e:44:4b:21:a6:c2:7d:e4:86:f7:88:ca:64:08:87:
01:d3:df:f3:df:a9:2a:e0:10:6b:aa:71:12:8b:03:6d:94:21:
84:3f:10:0f:fd:4c:f0:09:c8:97:29:1e:82:b3:6f:b9:d7:37:
9d:8c:18:5c:b6:a5:70:57:45:af:c1:3b:00:7a:26:ac:3a:cb:
23:0e:83:d5:13:fb:09:a1:fb:7e:8d:33:de:7f:71:cf:35:34:
3f:93:c3:54:ab:83:ab:0c:4c:7a:bf:1d:e0:82:ec:7f:0f:fe:
2f:d6:b8:a0:75:8c:60:c5:70:c1:23:ae:1f:02:82:5f:47:ed:
2f:2f:7f:fc:8f:32:9d:9f:90:24:70:63:96:f2:c3:c0:2b:b5:
8b:d6:41:69:8c:52:8d:e0:2d:7e:6e:4b:54:0d:5e:30:6e:3a:
5f:1e:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:26 2026 by rpki-client