
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cbe391e-dd27-3b05-a3fe-68ddbcf96e37.roa
File: 8cbe391e-dd27-3b05-a3fe-68ddbcf96e37.roa (raw, json)
Hash identifier: KXb1veU8oRqoIjSBDtppn33Y0HTbZaSELif1OValNeQ=
Subject key identifier: 10:2C:9D:68:5B:2D:57:54:A6:FA:D1:90:92:53:4D:DD:3A:A9:41:EA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4974E43605A10E1C8AAD5FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cbe391e-dd27-3b05-a3fe-68ddbcf96e37.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396567
IP address blocks: 192.68.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:e4:36:05:a1:0e:1c:8a:ad:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=241c41c1-7b90-49c9-8f0e-204509973c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:a0:13:45:92:fd:49:61:12:41:b3:e8:88:
72:8f:c1:9a:1a:15:01:58:d4:d9:1e:d4:85:45:2e:
7d:9c:da:98:81:a1:93:1a:44:59:69:39:dc:18:11:
3a:8a:de:0f:c0:91:72:e3:f7:52:f8:ad:1a:e6:85:
eb:e6:11:6f:d4:30:ca:b6:67:a9:d8:77:7a:d7:29:
6b:f7:75:3c:02:25:68:ed:fe:d8:38:15:33:cf:ba:
d2:f7:b1:32:f6:e6:2a:c4:d4:3c:79:15:dd:e1:1d:
6b:45:69:3a:08:de:b3:61:73:95:f6:53:73:14:94:
e8:21:94:38:6c:14:54:44:66:69:37:48:f2:00:b1:
9a:72:ce:26:a7:e3:28:76:89:1a:73:a8:19:d2:a7:
17:be:fe:c0:7f:bb:b3:99:23:0c:6a:22:9a:ef:a6:
52:02:21:13:b2:cf:13:d6:41:80:00:bd:07:c5:cb:
3f:b5:72:87:38:67:ff:29:7e:76:40:9f:99:b3:20:
50:0c:18:34:11:6f:b1:06:a0:cf:a2:51:15:c2:3e:
2e:46:d0:10:f8:47:b3:8b:b1:75:3c:a7:ee:36:f6:
b7:ec:1a:6b:1b:22:0a:8a:7b:8c:1a:1d:35:48:54:
e0:8d:28:3f:1a:29:15:81:7a:3a:f6:22:98:97:61:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:9D:68:5B:2D:57:54:A6:FA:D1:90:92:53:4D:DD:3A:A9:41:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cbe391e-dd27-3b05-a3fe-68ddbcf96e37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:1d:f5:d7:d2:86:3f:ea:46:71:2f:be:73:19:12:41:76:23:
0c:33:96:9b:4f:f0:9b:6c:f4:b0:fb:72:a6:cd:2b:46:81:e9:
8a:32:d6:0c:25:2e:55:38:05:c5:82:40:31:13:0c:69:2f:69:
70:29:5f:49:5b:db:54:19:f9:2c:d8:65:1c:e0:d9:66:35:24:
14:bf:47:a9:ca:db:d1:cb:4d:af:96:8d:33:82:11:f7:05:07:
b3:e1:b6:ec:30:7b:8a:63:85:56:53:ac:c4:ed:53:b3:6b:69:
c1:a5:16:4f:6e:52:86:0a:f3:72:aa:80:09:60:4e:21:16:75:
b2:1d:23:50:aa:b2:e6:40:fe:eb:43:4d:c0:07:50:7a:03:c9:
f8:1e:34:10:ce:90:22:1d:d9:26:d0:39:4a:94:7d:95:81:1f:
32:5c:33:5b:c2:7d:96:5c:aa:e6:8d:6b:6a:19:36:86:51:10:
4d:2b:20:d1:66:3e:a1:16:75:3a:7c:b8:1f:7a:32:6a:ff:31:
48:93:1d:73:4f:57:51:97:1c:c1:9a:d6:ab:08:8f:d4:6d:a2:
b7:7f:1b:91:43:89:a9:b6:be:7c:69:00:c0:98:6a:8e:da:44:
8c:ed:a0:9c:cc:b1:22:91:72:be:6a:d0:3e:e1:c1:81:e4:84:
95:92:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:18:00 2026 by rpki-client