
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa
File: 6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa (raw, json)
Hash identifier: VKP8PsLDAN20QmiVI4bgr67YLsn+YZH7NP+KbgJ+gl8=
Subject key identifier: 8B:69:4E:71:68:75:07:24:44:88:CC:4B:E4:EC:51:6F:ED:69:A3:9E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F225D1DEEBFECD464069ADF20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 396573
IP address blocks: 192.42.176.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:1d:ee:bf:ec:d4:64:06:9a:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=ace438a6-3910-4c56-8f31-3f09f7dc9398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:0f:7f:41:ac:95:8a:0c:ef:a1:10:a6:15:
d6:1b:03:92:3c:71:51:62:09:fe:6b:73:67:f8:ef:
9b:47:a5:52:2d:c9:63:89:2e:78:62:3f:f8:75:25:
16:db:07:66:ed:ed:be:1b:ee:64:4e:a4:01:2b:f4:
0c:13:6e:3a:0b:e5:5e:6d:c1:9f:76:93:99:9d:4a:
bb:0a:88:19:bf:81:58:20:9c:c8:10:74:43:2e:02:
bc:1f:ff:68:bc:bd:c5:5f:e6:c5:e6:2e:54:43:0c:
1d:44:32:d8:ec:5a:42:ec:7d:03:1e:20:64:43:3a:
9f:e2:ef:6f:f7:bc:3a:cc:71:c5:c1:69:80:5a:21:
0b:c6:51:ef:fc:ec:0e:a5:2f:98:e3:5f:76:5c:31:
13:f1:70:4e:fe:76:c1:e0:5f:71:b5:05:93:dc:7a:
9f:4a:44:f5:71:5f:db:5f:7d:26:d0:9c:10:4a:da:
3a:f9:db:86:78:5f:e8:db:b3:37:a9:e6:8d:81:ec:
74:d5:98:0e:e7:06:29:5d:71:88:7a:31:30:67:a0:
0d:40:87:53:bd:00:97:9e:f2:1d:ac:b0:61:34:85:
3f:17:3e:9f:63:af:c8:3f:30:20:18:1e:d0:cd:8e:
91:3a:f5:83:a4:3c:5c:c4:0f:d3:66:87:2b:2f:db:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:4E:71:68:75:07:24:44:88:CC:4B:E4:EC:51:6F:ED:69:A3:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:04:ac:79:97:76:bb:12:28:dc:94:c6:0a:e5:e3:c3:f1:5e:
e1:4e:bc:d8:85:fa:d6:8d:86:1e:f7:17:73:d9:a4:59:88:4a:
d5:06:bb:bd:ab:7c:b0:1e:02:a0:a5:f5:5e:8a:82:6b:7e:6f:
33:63:0d:36:01:69:ee:86:7d:81:5d:0b:8b:c3:4e:98:d7:92:
ea:b3:89:bd:f4:ef:ac:37:61:8b:f0:b4:a6:fe:29:08:3f:89:
43:0b:19:22:c3:4e:b1:d3:e5:4f:4b:01:a1:bb:cb:f6:19:dd:
54:17:60:c3:86:d8:39:3c:35:c7:06:a0:83:39:51:38:81:d2:
94:24:84:c5:bf:83:00:45:3b:e1:48:b4:c5:35:58:f6:bd:e8:
2d:2c:92:ae:f4:d1:6b:5f:ab:5f:be:28:94:bd:d7:0d:0a:3e:
43:a9:3b:1c:d9:f1:39:ff:40:f4:58:5b:9b:94:e6:1a:14:22:
93:2d:b6:a1:32:47:80:e2:36:64:db:da:b0:24:68:40:93:ee:
6d:b4:0e:13:bb:0d:17:77:b2:1b:d7:ab:66:5e:cb:1e:90:a0:
19:04:36:84:57:07:36:32:51:10:71:06:00:68:4c:4d:4f:01:
e7:4c:2c:71:78:a9:42:be:5c:1a:9c:52:fd:2d:ef:da:33:f0:
4c:47:9c:7e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXR3uv+zUZAaa3yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
YWNlNDM4YTYtMzkxMC00YzU2LThmMzEtM2YwOWY3ZGM5Mzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30oPf0GslYoM76EQphXWGwOSPHFRYgn+a3Nn
+O+bR6VSLcljiS54Yj/4dSUW2wdm7e2+G+5kTqQBK/QME246C+VebcGfdpOZnUq7
CogZv4FYIJzIEHRDLgK8H/9ovL3FX+bF5i5UQwwdRDLY7FpC7H0DHiBkQzqf4u9v
97w6zHHFwWmAWiELxlHv/OwOpS+Y4192XDET8XBO/nbB4F9xtQWT3HqfSkT1cV/b
X30m0JwQSto6+duGeF/o27M3qeaNgex01ZgO5wYpXXGIejEwZ6ANQIdTvQCXnvId
rLBhNIU/Fz6fY6/IPzAgGB7QzY6ROvWDpDxcxA/TZocrL9uD7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFItpTnFodQckRIjMS+TsUW/taaOeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmJmYTFjYzgtZTRkNS0z
YzE0LWIzMDctNzRiZmU4ZjlmN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAfBKx5l3a7EijclMYK5ePD8V7hTrzYhfrWjYYe9xdz2aRZiErVBru9
q3ywHgKgpfVeioJrfm8zYw02AWnuhn2BXQuLw06Y15Lqs4m99O+sN2GL8LSm/ikI
P4lDCxkiw06x0+VPSwGhu8v2Gd1UF2DDhtg5PDXHBqCDOVE4gdKUJITFv4MARTvh
SLTFNVj2vegtLJKu9NFrX6tfviiUvdcNCj5DqTsc2fE5/0D0WFublOYaFCKTLbah
MkeA4jZk29qwJGhAk+5ttA4Tuw0Xd7Ib16tmXssekKAZBDaEVwc2MlEQcQYAaExN
TwHnTCxxeKlCvlwanFL9Le/aM/BMR5x+
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:51:39 2026 by rpki-client