
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dc18e7b-a43a-3105-85a3-c5939744b957.roa
File: 5dc18e7b-a43a-3105-85a3-c5939744b957.roa (raw, json)
Hash identifier: jzEvBXE7NnYsaonePugt9PuoYGdoV5OIuDLsLjB4n2Q=
Subject key identifier: 79:1B:72:6C:D0:9A:6D:87:29:E7:C7:7B:52:A6:5C:41:A1:40:62:A5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F0672722B2995EADD5C72B900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dc18e7b-a43a-3105-85a3-c5939744b957.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 397204
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:72:2b:29:95:ea:dd:5c:72:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=663eb56f-aac9-4e1b-848e-3cb083db6b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:e8:c7:c5:4b:26:3c:f0:eb:ab:4b:e7:89:
1c:67:9d:2f:64:45:66:8e:7e:2d:7b:3a:39:12:5f:
e8:1e:ab:85:3c:50:69:28:4a:d4:e3:e1:50:11:5e:
ad:16:8c:2d:d9:78:2a:e9:83:e5:3d:80:2b:b9:0e:
06:01:07:9d:d4:0a:59:72:9a:48:66:ea:c8:90:27:
b5:3d:86:fc:f0:77:37:cc:7b:97:7e:f2:9f:6c:a1:
af:78:21:c1:97:c5:41:0a:2f:be:01:4e:39:f3:fe:
0f:86:f2:56:b5:9e:6c:e8:b5:3f:1d:5d:fb:08:c9:
13:d0:c8:19:e2:3c:a6:d5:4d:95:76:9d:8c:17:69:
29:64:2d:fb:b8:d3:50:d3:11:42:66:a8:b5:db:d1:
99:c4:cc:d8:c2:aa:98:cf:ca:fa:09:ac:0b:3d:11:
2f:e0:fd:92:68:31:58:43:7e:00:35:46:62:f3:ea:
e9:a6:ae:3b:dd:6a:7a:71:8d:5b:46:d8:46:1b:19:
69:7f:2b:b4:cf:16:99:d8:85:3f:ff:ee:2f:0a:d4:
c4:5a:48:9d:9e:67:a9:e1:3e:0b:13:9e:94:de:00:
02:85:3b:c4:90:4a:b7:a9:47:23:e3:45:e6:cc:b9:
a0:8d:86:e5:0d:75:52:ad:c4:b9:31:4b:e0:82:2d:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:72:6C:D0:9A:6D:87:29:E7:C7:7B:52:A6:5C:41:A1:40:62:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dc18e7b-a43a-3105-85a3-c5939744b957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:b6:84:83:63:db:1f:9e:58:07:9b:67:3e:6b:2e:b8:db:e6:
68:50:b7:08:8b:1f:80:f2:2e:0e:cb:87:6e:44:1c:20:6a:8a:
6a:44:1e:9d:02:6a:27:61:73:01:66:86:4d:9a:00:02:b0:4c:
f0:f3:48:fc:49:26:dc:a4:be:4a:98:45:1a:54:81:cc:96:5e:
61:b9:53:a4:09:4b:5b:34:df:a5:f5:be:6e:cf:f1:e5:46:ed:
2f:83:87:76:c2:62:f8:72:a2:c5:fc:3e:4a:98:c3:c1:20:82:
7b:55:90:61:8e:c9:bf:6b:23:36:f3:31:2e:ec:16:72:73:0e:
8c:a4:eb:e7:e2:fe:da:e6:4a:a1:21:b1:b1:e3:4c:14:21:87:
91:d7:6a:59:f3:96:ce:5d:d1:80:d5:a3:8e:20:a9:fb:53:4e:
41:00:f1:2e:0b:38:5d:fd:90:72:7e:43:fd:b3:83:70:ed:28:
2d:28:ad:e4:81:40:76:95:46:4f:b5:4c:2f:c8:a8:dd:6d:91:
fc:fa:df:ff:a5:03:73:1c:8c:19:45:f2:be:19:f5:ae:4b:80:
a5:b1:b7:ae:f0:ca:91:9d:04:fe:a5:13:3b:35:9d:90:73:84:
21:5c:0e:bb:f6:fd:84:f5:22:04:e2:80:0a:72:57:4e:20:c4:
8d:79:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:13:14 2026 by rpki-client