
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa
File: 4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa (raw, json)
Hash identifier: Rvk+zKeK4P7ULx8xp2tdp5xH13d+I/2zoV3Kp3DoP8A=
Subject key identifier: 06:54:BC:6F:FA:98:49:B6:5F:E5:47:B8:1F:14:93:C1:D6:53:8D:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D81285C680E47DA15EC32E900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa
Signing time: Tue 14 Apr 2026 14:22:10 +0000
ROA not before: Tue 14 Apr 2026 14:22:10 +0000
ROA not after: Mon 13 Jul 2026 14:22:10 +0000
asID: 396565
IP address blocks: 192.33.14.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:5c:68:0e:47:da:15:ec:32:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:10 2026 GMT
Not After : Jul 13 14:22:10 2026 GMT
Subject: CN=bd0578ee-1b7d-4e62-8ec8-d17e3c40e9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:dd:b1:0c:cf:9d:e2:1b:5b:37:34:f9:2c:
d7:8b:04:d0:df:85:bb:1b:9a:c9:88:35:db:31:39:
61:94:10:8a:38:9f:99:fe:10:5a:0e:87:49:83:3c:
16:50:fc:28:9f:2c:07:db:0c:58:71:68:18:70:38:
3b:de:9a:29:01:91:21:6c:88:54:95:4d:9a:87:5c:
d3:1b:9f:f1:64:71:a8:ca:95:38:83:9f:c0:8e:58:
ce:aa:dd:dc:5d:d1:51:72:75:94:04:6c:07:de:76:
50:97:e5:70:57:52:cb:fe:81:ae:68:12:ca:35:71:
88:25:e7:76:61:57:ca:8f:f5:82:d7:41:7a:a0:23:
a2:a8:a5:37:85:36:96:b6:9b:a8:54:7d:d6:bc:74:
80:20:4a:b8:5c:6b:50:8f:ec:bf:9f:de:3b:9b:11:
50:56:5e:1d:b6:9b:e7:6d:ab:3f:0b:83:4a:e4:c9:
74:22:ea:c1:26:7d:7e:c0:64:79:24:8e:ea:42:0c:
76:9c:8d:c8:89:ff:ff:1b:47:2c:9a:f0:db:9c:73:
d2:05:51:53:cc:ed:fa:a3:65:2f:39:0c:a0:41:cd:
c1:af:7c:65:f2:00:15:29:9e:94:24:60:b8:3e:67:
3f:f3:15:4c:f4:6a:55:3f:ba:34:9c:31:7d:8e:51:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:54:BC:6F:FA:98:49:B6:5F:E5:47:B8:1F:14:93:C1:D6:53:8D:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:12:33:fc:2b:25:4e:5e:fb:47:01:fd:a7:2a:84:19:1f:39:
e6:e6:4c:57:1c:e5:b9:4b:f2:ec:15:3c:f5:e6:09:1f:5d:f9:
0b:df:ac:9b:2a:04:34:03:94:de:f8:2d:38:ff:e8:af:68:b7:
7c:6d:88:84:e9:5e:56:fa:56:fc:df:a3:1b:cc:19:61:34:19:
f7:95:4e:80:bc:d8:d5:1b:5b:68:ce:49:c5:c3:97:5b:d0:16:
6f:74:8f:79:9f:a4:ef:dc:50:e7:a7:e3:7c:4a:34:44:41:d7:
f9:91:7f:ac:3f:4f:64:bd:54:79:dd:8a:05:8f:34:15:71:8a:
1d:94:bd:f2:05:17:69:f3:24:39:a7:01:60:90:25:91:eb:58:
7c:be:6a:2f:08:6f:ce:15:21:da:60:a1:33:b9:97:ca:8e:2f:
21:9b:fe:13:a7:3d:07:69:0f:d3:41:34:c2:36:86:58:c6:01:
8a:b7:e1:bc:c9:8a:ba:84:c7:a8:a4:ce:7b:34:0e:a4:ea:d4:
5a:85:1b:b1:c9:21:a6:19:77:54:c4:eb:7b:94:48:17:62:90:
ff:4b:06:60:48:c4:b6:31:c9:f0:65:5e:18:74:49:16:4e:85:
fd:e1:fd:86:e4:16:61:86:34:3b:da:a7:11:1a:91:4b:28:9f:
3a:fc:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:47 2026 by rpki-client