
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ff64d56-a08e-380a-8d2e-c21127563906.roa
File: 8ff64d56-a08e-380a-8d2e-c21127563906.roa (raw, json)
Hash identifier: PIQNDEmoSR44Sv+f3zups1WXRZh7fSxI5KH9nVrFYOY=
Subject key identifier: 3F:EC:ED:80:BB:61:11:DB:3D:42:48:A6:D7:C6:ED:94:8E:52:2D:8F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D812859157AE5CED87F57DE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ff64d56-a08e-380a-8d2e-c21127563906.roa
Signing time: Tue 14 Apr 2026 14:22:09 +0000
ROA not before: Tue 14 Apr 2026 14:22:09 +0000
ROA not after: Mon 13 Jul 2026 14:22:09 +0000
asID: 396541
IP address blocks: 199.7.76.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:59:15:7a:e5:ce:d8:7f:57:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:09 2026 GMT
Not After : Jul 13 14:22:09 2026 GMT
Subject: CN=87dd6e81-39f8-4dcb-8b45-0497b178722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:6e:8d:06:c9:c4:7c:ab:ee:d5:22:ca:ad:
8b:ec:66:f9:1f:9c:62:f4:b2:ad:cd:58:df:62:9b:
78:9c:c8:8e:fd:f7:50:45:b4:8f:6e:13:f2:f8:94:
71:c9:3f:c3:98:0e:2f:63:5a:b0:2a:f3:3f:38:7b:
15:f7:44:7a:e8:4e:d0:c1:c4:31:c4:e0:f9:d1:3a:
11:82:dc:c8:95:b3:ab:a5:a7:e2:88:a7:78:3b:a3:
e2:40:49:4c:51:38:69:83:01:ff:c0:56:ce:24:4e:
df:80:d4:5a:70:b7:5f:28:8c:7f:60:1c:36:e2:71:
2f:86:96:8c:40:40:c6:69:55:3e:fe:35:9d:58:0d:
08:38:f8:30:d8:e6:c2:5a:14:60:40:a0:18:13:70:
fb:7e:ac:b2:5c:fd:ae:51:0f:5b:8c:6b:5c:3f:4b:
be:81:68:73:15:9d:c3:80:62:2d:33:c5:98:23:62:
a8:6c:86:0a:b9:7f:47:1d:42:a5:d9:e9:3a:2a:ef:
dc:a7:ac:3b:23:0c:4c:4e:9c:f1:b4:5f:f9:2a:da:
41:b1:f7:46:89:8f:27:ba:f0:42:5f:6b:2b:09:b3:
a2:20:2a:f6:8b:1f:28:a4:b4:d3:10:ca:06:a4:e2:
5e:ba:77:7d:57:8b:e3:db:21:ae:06:76:ba:07:fe:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:ED:80:BB:61:11:DB:3D:42:48:A6:D7:C6:ED:94:8E:52:2D:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ff64d56-a08e-380a-8d2e-c21127563906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:f1:7e:87:de:64:27:79:ee:57:bb:a1:d4:a2:72:68:00:da:
07:93:79:cd:8b:77:6c:59:df:f1:42:ed:c2:a1:28:f9:5b:7e:
cd:c0:3d:34:ab:74:c0:89:86:93:3f:85:18:c4:05:72:fb:ed:
28:2f:d8:0c:3e:cc:82:de:54:ba:7c:2c:78:af:7f:e7:73:8c:
f2:ea:1b:a6:4b:6e:0a:4e:7c:6b:41:4d:a2:a3:a4:59:e6:f7:
3f:43:af:35:eb:31:f7:fb:7c:50:c5:d4:a1:93:1a:df:e2:87:
4f:13:c4:38:b6:16:b1:0f:55:04:4a:f3:16:da:a4:7d:61:f1:
75:61:13:aa:06:fd:e2:80:56:72:2a:b9:fc:d9:46:81:0a:e3:
c6:a5:66:80:66:20:62:37:e6:2c:da:ab:f5:e6:3e:16:dd:90:
fb:1f:87:c6:94:01:a2:43:04:b2:ee:14:5f:f8:cb:7b:19:2c:
75:35:40:43:d6:09:7c:6e:42:20:7f:31:f8:1c:94:72:cf:95:
6f:b7:ae:de:37:03:ac:fd:da:34:33:d1:20:d6:8b:13:cd:0d:
72:37:95:f6:52:f0:91:7f:53:9b:0a:fa:ca:f6:38:6b:ce:ce:
91:4e:43:1c:34:f7:5e:c2:26:e9:74:04:e2:7d:b1:84:7d:c6:
01:28:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:52 2026 by rpki-client