
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48c86953-86ea-3c7a-8721-455a48f34176.roa
File: 48c86953-86ea-3c7a-8721-455a48f34176.roa (raw, json)
Hash identifier: PoHYT6IbguiWWQNfjprmkGxr/y+ZvGk87Qa86r6QUS8=
Subject key identifier: D7:34:1A:21:F8:4A:20:A9:81:C0:D7:79:A5:96:F0:4F:6F:27:08:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D86B7998C9B43D88EF8B65C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48c86953-86ea-3c7a-8721-455a48f34176.roa
Signing time: Thu 16 Apr 2026 14:09:49 +0000
ROA not before: Thu 16 Apr 2026 14:09:49 +0000
ROA not after: Wed 15 Jul 2026 14:09:49 +0000
asID: 36625
IP address blocks: 192.42.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:b7:99:8c:9b:43:d8:8e:f8:b6:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 16 14:09:49 2026 GMT
Not After : Jul 15 14:09:49 2026 GMT
Subject: CN=04374713-92a5-46a3-9232-172dbb61cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:e5:1c:20:69:7e:81:fd:82:d9:1d:7a:5a:
9f:35:b6:5e:c6:83:1e:ba:4d:be:b8:0a:99:c0:1b:
02:8c:96:db:74:56:81:03:c8:8c:1a:02:93:ea:1d:
2a:03:6d:79:6d:a9:f4:a4:e0:99:f2:17:c2:50:9c:
69:ba:b3:38:39:93:6d:b0:cb:ca:6e:ee:b2:ac:2d:
a0:4a:db:a2:60:94:b5:c1:72:d1:e2:b1:bc:3e:b0:
68:4b:49:71:59:ec:fb:fa:e5:90:32:18:1e:62:1a:
af:80:c7:7e:4d:f4:d4:ae:de:af:58:86:ea:ac:6a:
cf:44:37:0d:33:ea:2f:30:31:74:74:0f:7d:39:e0:
80:7d:3f:c0:1b:01:c7:44:73:3c:f3:71:6c:50:6f:
24:fb:ad:be:83:5a:f7:34:48:ed:91:ba:27:2c:76:
c7:13:17:34:d7:21:7b:f7:a6:37:4e:99:2c:7c:e8:
94:cb:9d:fc:29:6e:3b:28:60:8c:4e:6b:4f:1a:c9:
5a:70:e1:09:9f:17:bc:fe:70:9a:37:fc:f5:16:ab:
e9:d3:8d:b6:f2:2f:56:9f:6a:3e:84:c1:1e:3b:88:
10:a3:ae:c2:ea:52:1a:20:ee:8b:e0:ef:8a:b8:18:
2a:aa:d0:4a:6b:03:4a:cc:25:62:54:3f:13:75:9b:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:34:1A:21:F8:4A:20:A9:81:C0:D7:79:A5:96:F0:4F:6F:27:08:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48c86953-86ea-3c7a-8721-455a48f34176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:92:d7:34:4d:c0:9a:0d:98:03:b5:66:47:2b:71:88:9d:6a:
44:83:b8:22:5f:55:a0:ee:58:65:1f:fb:5d:b0:1d:7b:13:2a:
8a:a2:40:98:d4:ef:51:a0:ab:fe:b2:2a:02:15:f3:71:d2:3d:
61:25:88:c3:10:3e:cf:62:1a:cd:2d:87:66:ad:86:1b:57:f3:
bd:e2:e8:02:9f:35:56:c9:47:29:43:6a:37:de:f8:be:cc:d9:
0a:1b:0a:c3:bb:07:17:9e:53:e0:bb:25:3d:ab:06:c0:70:43:
04:b3:f1:6c:e8:62:da:5c:ac:79:60:89:12:07:b5:a1:c5:59:
77:6d:97:ea:59:46:8d:e2:69:f9:b1:92:09:8e:ba:9d:cd:a4:
03:b6:ad:e4:fd:96:56:a3:48:90:57:19:d1:56:1e:54:fa:bf:
3e:6b:c2:2a:0a:af:0f:bb:a7:25:66:5b:fe:80:cb:6a:9d:50:
f5:02:a5:23:84:56:1a:25:ba:7f:70:c2:81:f8:ee:18:42:c8:
77:18:b9:98:bb:26:d8:aa:dc:f7:b6:0e:8f:cc:6c:22:aa:89:
e0:5f:24:64:bc:0a:b3:2a:cd:b4:85:b7:b6:4a:f4:1d:18:ce:
a4:ed:25:7c:5c:b9:d4:f5:ef:9a:3e:94:a2:fd:9f:b3:89:a0:
85:49:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:53 2026 by rpki-client