
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d3c1c4-f482-310e-8b9b-7163cd2eebb4.roa
File: a8d3c1c4-f482-310e-8b9b-7163cd2eebb4.roa (raw, json)
Hash identifier: vr4fTobwZY3Ede7YzguVctCxm53vPm5GH0S5AR8zH+k=
Subject key identifier: B7:E2:1A:24:7A:1C:75:8C:C5:12:52:B5:10:B3:45:BB:BC:67:F9:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F03A7835FC39DA82FD04D6320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d3c1c4-f482-310e-8b9b-7163cd2eebb4.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 396573
IP address blocks: 199.7.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:83:5f:c3:9d:a8:2f:d0:4d:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=3bc9b338-5f74-4223-a711-a68d13da6e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:b5:31:52:08:27:02:75:69:6b:fe:b7:84:
b7:99:e6:0e:ca:d2:e9:f5:90:a6:b3:b9:6f:83:4d:
05:f1:8f:bf:04:69:e9:6a:9f:4b:cd:46:39:4a:21:
60:a2:b0:87:f4:e7:6a:af:c3:c0:21:7b:38:4b:c7:
21:fa:7a:81:02:be:2b:1e:76:9e:2c:8a:05:ed:b5:
9d:49:bd:57:71:fa:79:1e:f5:23:1e:8a:e4:77:87:
e2:18:97:62:be:da:8e:e4:c3:ac:7e:48:6f:a3:f4:
7c:e8:bb:f9:e9:f1:c1:eb:10:85:2c:33:6d:56:12:
a0:43:94:ee:21:aa:1e:c4:fe:c8:e0:ae:73:b8:6f:
19:1b:c4:9e:5c:e7:cb:8c:cf:a3:05:3e:48:8a:49:
63:8c:85:df:53:8d:96:75:d4:bc:ff:26:f8:2a:7b:
06:28:24:52:84:25:b1:96:24:99:b5:20:17:52:c6:
bd:97:7d:c4:c7:52:a7:1f:e8:25:ac:8e:0d:e5:2f:
65:19:d7:05:7a:fa:eb:5b:42:7e:26:d0:87:07:2e:
ad:28:d0:07:22:63:5c:ea:da:b6:9d:70:45:bb:8a:
6a:3b:16:4e:7d:4a:e8:56:7c:72:54:bc:b6:4f:12:
65:c1:cd:bd:4e:cc:f2:f8:38:5c:08:98:7c:be:e2:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:1A:24:7A:1C:75:8C:C5:12:52:B5:10:B3:45:BB:BC:67:F9:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d3c1c4-f482-310e-8b9b-7163cd2eebb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1e:c3:91:1f:45:1d:0b:7d:91:17:f8:09:fc:35:9b:c3:40:
8e:f7:18:59:b3:ac:22:28:41:0f:3c:b3:5c:f1:a9:31:01:ce:
6d:57:81:cb:11:aa:14:45:b5:18:38:a8:70:a7:89:6d:2f:e6:
87:9c:e8:35:b9:b7:44:1e:fb:f3:a8:45:66:53:11:4d:59:41:
1a:06:98:63:9b:f6:0e:2c:61:23:56:14:69:d7:68:6f:da:1b:
5d:2e:05:1d:92:1a:61:0d:bd:34:c1:13:c5:35:bc:d7:bd:b1:
c1:2e:49:ec:11:c1:8d:a6:1e:fb:2c:31:26:cd:23:8f:41:58:
ab:8a:ab:60:bb:90:af:96:11:7e:e3:bd:a6:ea:fb:17:d3:fd:
89:b1:79:69:09:a5:0f:51:b2:25:4e:90:c0:e6:c4:d6:c1:4a:
7f:b3:a7:da:d2:c3:38:cf:c6:41:e5:a2:03:6d:cc:5c:ac:52:
d1:4c:b5:fa:ac:56:b2:2b:7f:89:1c:dd:37:b0:4f:3f:d9:bb:
6c:6c:d4:ef:43:c7:8e:dc:30:72:c8:59:82:9b:dc:f8:3b:41:
95:76:aa:42:61:c0:70:c3:b2:f0:be:6d:2e:4b:8c:86:5e:f1:
85:73:c1:42:ab:f3:d2:3f:75:09:f0:12:f1:0c:5a:d4:9c:a0:
e2:76:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:38:17 2026 by rpki-client