
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a77a07d-c9d8-38fa-863e-cebfbb65fe22.roa
File: 4a77a07d-c9d8-38fa-863e-cebfbb65fe22.roa (raw, json)
Hash identifier: 9MWrn21D/R3zisvI6z+nuS59kqJBq0OQRjJGo5B3GpM=
Subject key identifier: 52:70:23:A2:24:C4:50:F7:A8:68:7F:95:C6:08:33:61:CB:DE:C3:88
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F2ABD288F2D5600C19FCAD200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a77a07d-c9d8-38fa-863e-cebfbb65fe22.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 396593
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:28:8f:2d:56:00:c1:9f:ca:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=856b950a-852b-4b3d-a81f-f23719ea96b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:58:db:33:64:02:7a:4d:c3:af:da:6e:3d:
97:27:ef:bf:3c:76:8b:55:19:7c:85:4c:73:23:9f:
3a:c0:9f:f2:cf:08:cd:20:87:8a:36:b3:ad:8d:2a:
b3:63:62:03:6c:d5:98:85:ac:e7:fd:44:35:4d:b1:
bc:b8:7e:1f:31:73:57:e4:14:1b:b8:d1:4b:24:1b:
ba:09:77:e6:cd:52:c2:78:a6:0d:13:ab:69:15:19:
a5:ec:b1:93:a7:a0:5d:ab:ea:c1:cb:4b:7b:02:b2:
2c:4e:eb:a6:e8:49:c0:f8:8f:4e:0e:c0:e9:ce:21:
5b:12:45:31:cf:36:fb:4d:62:d9:f7:b5:bb:3c:e8:
d8:11:45:b5:ad:f2:c5:cc:1f:a1:01:13:f8:33:14:
34:0a:f2:cb:20:69:f3:99:1a:3a:e9:cc:4e:2b:41:
9e:8c:12:c4:5f:48:cf:83:13:8e:55:00:72:38:93:
e8:01:e4:12:ef:7a:0d:4f:c6:5d:25:fa:5c:7c:a3:
bb:dd:35:30:cc:77:89:d5:ee:44:82:69:07:c8:24:
b8:cd:0a:e8:38:14:22:07:58:d8:0c:83:54:ff:e2:
5d:ba:bd:d7:86:ff:9b:ca:9a:f5:93:52:d0:81:54:
01:cb:b0:42:8b:0e:94:c8:4e:b6:27:7e:e3:8f:53:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:23:A2:24:C4:50:F7:A8:68:7F:95:C6:08:33:61:CB:DE:C3:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a77a07d-c9d8-38fa-863e-cebfbb65fe22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b8:56:ad:21:64:f3:d0:77:72:4f:41:54:47:a1:0f:1f:5f:
89:34:f1:6b:5a:e3:db:ed:0b:ff:5d:bc:bd:61:ef:78:bc:95:
2d:4b:37:49:5d:77:a0:d9:46:15:47:dc:14:60:88:e5:e3:79:
dd:75:6a:e6:86:f1:e5:d0:83:47:21:7f:4c:10:72:ce:af:84:
ab:8a:ca:af:0d:bd:24:e0:b8:a5:d6:71:d7:8a:5f:b7:75:8d:
f4:33:e5:56:19:59:9d:02:a7:42:70:e2:f0:71:08:b5:a3:e0:
02:a6:c2:f0:3e:84:bc:b3:24:5c:5a:b2:8e:4d:11:ab:fe:d1:
29:97:52:d3:92:a4:a1:0b:1e:13:01:41:58:c8:6b:b8:4b:93:
6a:db:ca:90:5b:a7:ba:4f:37:93:28:b5:65:7c:d1:73:69:ff:
60:39:93:06:d8:44:ac:dc:15:9c:5d:b4:0b:82:03:ac:d1:c7:
70:43:fc:91:d1:00:08:a3:d2:83:31:72:aa:e2:19:88:80:4e:
a8:37:f6:3a:29:2b:ae:52:9d:a0:36:7e:b6:cb:49:f4:c1:f1:
16:e2:9f:b2:08:7b:42:38:97:25:0d:a5:5c:26:81:da:b1:be:
ca:88:69:27:82:92:84:d6:41:bb:93:2f:f3:c5:a8:53:c1:55:
47:95:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:22 2026 by rpki-client