
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b33797-d06b-3989-babe-5dc8c0b288d1.roa
File: 85b33797-d06b-3989-babe-5dc8c0b288d1.roa (raw, json)
Hash identifier: 9h54L5KoYSJ3mA9TBueKDAvrp/4sl2Lsx/0gT4WN83g=
Subject key identifier: 2B:4D:5E:05:F5:7E:44:CD:CF:0A:48:D1:EE:23:D5:1A:67:C4:62:EE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F23C24D75CF65D9D2B54CC780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b33797-d06b-3989-babe-5dc8c0b288d1.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 40717
IP address blocks: 192.48.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:4d:75:cf:65:d9:d2:b5:4c:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=301c522a-0640-41ae-a3ac-744e1f56003e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:2c:79:de:1c:ea:a0:5d:c9:fd:4b:38:13:
19:56:52:e1:38:13:30:50:5b:a8:c8:fa:88:da:5f:
24:2d:b7:69:65:f0:0a:b3:d3:12:33:23:29:38:a7:
e1:80:ec:a0:2c:33:4b:ee:88:4f:0b:12:67:27:a5:
04:76:8b:2f:af:dc:9d:1e:99:73:95:5c:f1:69:9a:
2d:a1:47:17:4b:e6:78:af:7b:a8:0e:3f:67:4e:44:
c2:80:4c:cd:4e:13:24:59:2c:b4:41:c0:45:bc:83:
a1:c8:c0:0c:b2:dc:d9:40:17:22:18:8a:1e:aa:2c:
5b:60:ec:4b:0c:fc:65:9b:3e:e4:7c:59:d2:0f:84:
45:35:be:05:6a:f2:3b:1b:71:28:1f:bc:74:2f:29:
9c:7d:32:88:5f:ac:a1:1d:d2:ad:cc:8d:5a:3d:73:
4b:f3:0c:43:b0:cf:08:ef:7d:24:93:dd:ef:36:b6:
a8:65:68:8a:4f:be:b7:80:49:9e:ad:d7:34:5d:cf:
99:39:0a:5e:5d:0b:28:4f:a3:46:e3:25:11:35:3b:
ea:98:e7:5c:54:60:c2:84:69:05:6c:b1:d0:35:73:
0c:92:f1:3e:a3:fb:0e:51:9c:9b:d8:62:33:25:95:
83:6f:17:9b:d2:67:6b:c2:af:5d:8e:05:64:33:5e:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:5E:05:F5:7E:44:CD:CF:0A:48:D1:EE:23:D5:1A:67:C4:62:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b33797-d06b-3989-babe-5dc8c0b288d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:0f:1d:2b:10:b6:62:eb:a8:e5:70:84:d5:d8:0d:25:15:89:
65:de:cf:5c:63:1e:f6:8b:0a:57:42:c5:53:e9:51:ce:df:a1:
3b:54:02:b5:ed:4e:5b:de:da:a3:20:f3:80:d9:53:2f:7c:59:
b3:eb:2c:87:0e:48:a7:9e:a8:68:c1:3e:6f:ac:82:8d:87:57:
dd:14:aa:9d:ef:7b:ae:06:1a:46:38:54:2f:25:c0:06:19:eb:
d9:67:74:c6:37:cd:40:cc:92:4e:55:8f:a4:83:e8:5c:51:ad:
e2:10:1a:6a:f3:b2:61:9b:e9:f2:29:23:0d:9a:b4:4b:f5:88:
b2:7f:27:d4:cb:a4:01:23:52:7a:5e:26:3b:23:f3:1f:da:1a:
78:24:b0:87:1c:f0:50:d6:4a:70:4d:e5:f4:a8:17:96:30:84:
b1:54:a2:28:39:fe:28:fb:35:95:f4:9d:53:63:33:0c:8d:5f:
28:9f:1b:24:ad:e7:f8:e6:3f:34:94:55:f2:00:77:d0:3e:c5:
24:1b:d1:67:9d:42:f8:7f:09:01:36:7b:c4:c5:99:d7:86:0a:
f3:11:d9:67:9a:12:9f:37:a6:c1:bf:d6:96:c3:9f:fd:63:20:
e3:3a:4f:d8:96:83:d2:8c:a3:5f:07:92:2b:68:c6:0b:34:34:
a8:87:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:22:17 2026 by rpki-client