
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/533374f0-0920-3095-af72-2e19acd1932f.roa
File: 533374f0-0920-3095-af72-2e19acd1932f.roa (raw, json)
Hash identifier: 9eGmRdYRIruOI04BrrD5eIbAdn0iNhECA8Z3bebVW1E=
Subject key identifier: AC:5C:E9:1B:38:58:21:37:07:E4:AE:00:D9:A1:C0:EC:77:E7:A1:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA17AAAC76EAD34CDC13CD640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/533374f0-0920-3095-af72-2e19acd1932f.roa
Signing time: Sun 26 Jul 2026 21:00:11 +0000
ROA not before: Sun 26 Jul 2026 21:00:11 +0000
ROA not after: Sat 24 Oct 2026 21:00:11 +0000
asID: 396606
IP address blocks: 192.42.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:7a:aa:c7:6e:ad:34:cd:c1:3c:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 26 21:00:11 2026 GMT
Not After : Oct 24 21:00:11 2026 GMT
Subject: CN=38a6192c-a4af-4195-8f56-0e8a2e9a3e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:df:df:a3:40:3f:50:4f:b2:b0:26:e0:8f:
ec:75:3d:a8:b9:84:58:e3:b8:26:e7:a7:19:a7:38:
bc:a8:8d:e5:63:3a:ae:fc:03:64:c0:ee:5e:50:0b:
cd:ce:56:a2:02:73:66:5a:ab:92:d6:cf:3c:b8:37:
8a:af:6f:43:9b:64:43:4c:c7:4f:25:fa:00:7c:ee:
a6:36:22:f4:a0:fe:ee:ab:4a:b2:b7:1b:88:3f:93:
87:13:a4:07:15:f7:a8:ff:2e:7b:36:84:93:e0:61:
ca:2f:8e:68:df:44:d1:28:d3:96:e5:c3:3f:d0:9d:
e2:d4:9d:0a:2a:ca:f5:71:6f:0e:eb:c0:7d:c2:33:
03:54:63:f7:5b:6d:a2:67:73:f4:64:32:af:71:1d:
c3:fe:1d:21:da:e4:cd:f7:01:15:f0:2f:f1:39:de:
38:a8:65:60:20:f4:f7:9d:8a:2c:2f:5e:c2:ed:2b:
66:ae:82:5a:df:70:f0:8e:d3:a1:ed:66:e8:2b:34:
36:f9:b9:b8:77:41:77:1b:d1:ae:c5:fc:9d:30:a5:
ff:2a:07:ad:58:40:dd:cc:bb:b7:0b:3a:6a:2f:4c:
73:11:cf:95:e6:73:d2:53:94:94:67:69:5d:12:6c:
79:64:26:67:25:a7:67:a6:2b:51:13:c9:cb:59:bb:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5C:E9:1B:38:58:21:37:07:E4:AE:00:D9:A1:C0:EC:77:E7:A1:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/533374f0-0920-3095-af72-2e19acd1932f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:bc:53:49:44:5c:19:fb:b0:5d:d1:f4:2d:80:6d:8d:c4:c3:
6b:29:35:15:28:c6:3b:f8:7b:e3:e1:6d:51:3d:58:4c:08:30:
d8:bd:6d:8a:60:95:51:f9:e2:10:a0:d0:d2:12:07:dc:b7:d2:
d0:8d:03:e4:a9:da:a6:f5:09:14:ca:c8:f8:70:56:df:5b:e9:
a9:b2:84:11:72:cc:73:05:a5:37:40:41:46:aa:bf:da:e8:d2:
a9:da:27:7b:a2:2b:dc:fe:a3:85:58:a0:02:58:15:b8:ba:3c:
95:62:cd:96:b1:a9:b6:53:04:59:3b:7d:30:da:2c:43:cc:d3:
b2:63:fd:58:96:df:59:48:b7:bb:5b:f5:b2:15:98:a6:42:cf:
ca:87:dd:0d:c7:f0:49:1a:33:1d:bd:26:03:de:a8:6d:f6:67:
ce:37:ad:ff:d6:b4:95:dc:d7:35:69:d2:66:5f:d4:7c:fb:fc:
2d:d9:aa:0e:33:f6:74:10:94:23:57:bf:17:bf:84:9d:2e:e3:
58:f6:1a:ed:03:6e:a8:4b:50:6a:60:e6:c3:41:aa:65:9f:f8:
bc:3e:d9:89:4c:10:44:b3:1f:5c:94:5b:7c:34:2c:e6:73:8c:
78:a9:27:c7:6f:0c:bb:f1:28:28:a4:77:6f:fe:c1:cf:9c:cd:
2e:59:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:52 2026 by rpki-client