
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43ea49af-9f62-3c53-9d15-36aef41882e8.roa
File: 43ea49af-9f62-3c53-9d15-36aef41882e8.roa (raw, json)
Hash identifier: 1uT4YRZOS6aZMpN0kHUPfBhd2s7FZzfLMYpYLg46J8I=
Subject key identifier: 79:0C:ED:7E:6E:6E:29:48:6E:61:DC:29:9A:C0:37:72:9A:9E:36:A1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D07AD12ACDCE2762687E72900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43ea49af-9f62-3c53-9d15-36aef41882e8.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 396616
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ad:12:ac:dc:e2:76:26:87:e7:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=f01f1576-f81d-4f51-ad5c-17764b45e4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:fb:36:06:39:81:39:7c:fd:a9:51:8a:ce:
4c:d0:42:f2:26:92:c1:3a:2b:f0:e5:a2:27:d5:37:
f9:57:ac:d2:fd:86:29:72:08:0d:5b:b0:cb:e5:25:
e2:6f:d5:c1:07:5b:f5:c7:c6:8c:28:f3:28:ca:93:
bb:19:42:00:2b:08:f3:b2:dd:89:84:c3:f3:e5:0e:
a6:17:24:e2:15:9f:2a:4a:d3:20:25:d9:38:df:ef:
b7:be:1a:30:7d:44:9b:79:fc:4d:ed:9b:40:76:30:
34:f6:03:98:81:4b:ed:bc:b9:c5:1e:59:23:43:bb:
26:a5:ad:97:6b:a7:b7:2d:c3:81:27:da:b9:dd:0f:
9d:25:13:52:fd:e2:35:41:df:d8:15:cb:b2:88:04:
cf:37:de:f0:d7:2e:1f:a7:ac:9b:15:6a:b6:b6:8f:
f9:b5:38:8c:ec:d1:52:a9:14:6b:5e:29:db:7a:27:
e7:a9:dc:e2:16:95:cf:17:38:37:9c:58:59:80:9e:
a5:5f:e9:b1:5b:5f:2d:06:89:ce:c9:8a:8c:ae:86:
9c:da:3e:c2:e3:d0:22:61:7a:db:4e:01:a2:26:b6:
76:94:f9:31:82:10:fb:12:00:36:02:04:b7:7a:46:
64:b6:de:06:fe:2c:a9:fc:e0:d6:b0:d7:42:36:47:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:ED:7E:6E:6E:29:48:6E:61:DC:29:9A:C0:37:72:9A:9E:36:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43ea49af-9f62-3c53-9d15-36aef41882e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:35:2d:b8:12:48:b2:c8:35:23:d0:bb:fe:98:19:48:7e:46:
fd:27:28:8f:54:22:6d:c2:07:3b:07:d5:9d:a0:5c:ad:df:c5:
e4:2e:ec:ab:56:b2:b1:8a:09:d9:49:da:34:55:cf:24:05:fa:
f5:c4:5a:93:84:86:3f:c2:64:4b:4a:a9:0b:9c:87:ed:07:6f:
e6:a9:1f:9c:95:aa:04:f2:16:40:22:57:5e:50:34:c4:6e:8a:
3d:98:b6:32:e8:19:9d:8f:66:08:05:5e:50:bb:8d:3c:f8:45:
9f:6a:0d:0b:b4:43:e5:e9:7a:51:eb:74:10:1a:1d:40:71:20:
cd:8d:f6:35:b1:42:1c:12:5d:19:07:14:cd:03:41:ad:79:f1:
3e:92:7f:10:ca:24:e4:fe:34:c8:f9:7e:f8:84:07:fe:27:78:
0d:6f:67:00:83:8e:dd:c1:ee:ec:c5:46:4a:a9:6d:bd:77:cd:
69:83:31:40:90:83:62:92:42:57:42:38:27:db:78:f9:1f:8a:
f7:9e:89:e4:fc:83:e7:d1:dc:b7:70:52:7e:21:f2:20:54:fb:
67:fc:6e:fb:58:bc:a8:09:2b:27:9b:04:b5:56:2d:2f:ba:a1:
7d:34:5e:73:06:3c:e9:10:6c:a3:63:28:b5:fb:d7:49:81:9d:
a8:b7:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:31 2026 by rpki-client