
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6569a16f-ac16-327e-bb3f-648f0850baa7.roa
File: 6569a16f-ac16-327e-bb3f-648f0850baa7.roa (raw, json)
Hash identifier: a57Qe1okGeg3/OPisdeTB2dSNdQpVyrSQpbimRFsYg4=
Subject key identifier: E8:BD:AA:4A:D9:8F:7B:A6:33:7E:FB:C2:64:7E:33:70:4F:AB:6D:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D812859BD880971009BDFF580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6569a16f-ac16-327e-bb3f-648f0850baa7.roa
Signing time: Tue 14 Apr 2026 14:22:09 +0000
ROA not before: Tue 14 Apr 2026 14:22:09 +0000
ROA not after: Mon 13 Jul 2026 14:22:09 +0000
asID: 396563
IP address blocks: 192.33.14.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:59:bd:88:09:71:00:9b:df:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:09 2026 GMT
Not After : Jul 13 14:22:09 2026 GMT
Subject: CN=d0666d90-f58f-42f9-acdb-ee2840bcc613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:cf:20:ef:fa:4d:26:c5:51:37:f4:46:e1:
21:ca:f4:05:62:c4:fd:dc:62:f4:f2:d1:b3:a0:cb:
d0:27:a2:84:10:ee:00:0e:6f:11:05:1b:8f:eb:a7:
e1:53:92:11:a6:15:cb:5e:5b:58:94:3c:90:d3:15:
e9:26:6a:a2:b7:33:79:a3:49:51:12:e6:e9:82:9b:
a1:d7:7e:f7:e0:84:bf:76:a7:09:3d:e3:de:31:68:
cf:2a:aa:6d:5d:69:d1:30:5e:6c:92:4f:09:28:22:
d9:44:f3:91:6f:ef:03:c6:5d:ac:3d:79:4b:ba:73:
d9:99:a3:bb:da:fd:7a:2e:bf:d3:a2:11:b8:bc:42:
c9:64:e4:76:e5:7d:c9:e9:4f:74:ac:83:cc:18:79:
42:f5:99:d3:d5:26:83:e7:2f:07:e8:c1:5f:81:e1:
16:56:79:fa:b6:53:18:a0:7f:00:ab:b1:17:bf:d6:
59:1e:0c:da:16:3f:47:e0:f1:f6:5e:f1:fe:9d:8c:
41:27:18:e1:fd:36:56:c9:4b:d7:4d:61:6b:3f:24:
7f:ca:bd:80:13:ee:b4:59:85:5a:1e:3d:ae:b6:7a:
9f:dc:7e:4c:15:13:89:96:c2:1d:36:ec:f0:4b:c3:
2d:98:3c:77:4d:5f:4b:d8:0c:fa:58:97:21:30:1d:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:AA:4A:D9:8F:7B:A6:33:7E:FB:C2:64:7E:33:70:4F:AB:6D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6569a16f-ac16-327e-bb3f-648f0850baa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:83:c5:40:5f:b1:e0:d6:84:9b:26:38:e9:75:2a:e0:f8:ee:
aa:89:79:19:0c:fb:7d:7e:af:b3:9b:6b:ab:36:84:07:60:6d:
e3:b7:c1:cf:44:56:e7:e6:24:d9:3a:99:c9:e0:59:90:cc:d1:
c1:52:98:62:2d:af:04:43:dc:58:2c:7d:0a:7f:92:fc:67:0f:
c8:6e:f6:ee:b2:81:4d:b2:63:ba:0e:fa:a8:b0:44:d3:54:a3:
a7:36:68:3f:3f:cb:3e:ae:83:bb:8b:a9:84:24:f9:64:4e:4b:
3b:0a:e8:7f:e6:84:87:50:2e:77:e2:ed:54:31:41:66:38:e5:
32:e0:96:fd:3a:92:bc:7a:63:dd:eb:4a:83:23:21:3c:3d:1d:
32:22:e5:24:ee:56:c2:2b:51:04:1f:71:3c:39:99:bb:b8:ae:
af:9b:a0:62:10:15:39:60:c6:15:a8:5d:c7:1f:69:bd:67:f9:
51:bd:17:59:d7:88:8f:ca:60:e1:c5:a3:eb:47:73:92:4d:6b:
73:2a:b7:c6:4e:fa:d2:b4:03:e2:46:4c:2e:9f:9f:6e:ed:93:
15:4f:d8:b9:33:ed:ca:2c:37:63:bf:e6:43:b6:aa:ef:b8:d0:
c9:b6:ae:05:dd:85:9f:a3:0d:4f:d9:bf:f2:be:ce:c4:04:59:
42:41:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:59 2026 by rpki-client