
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa
File: aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa (raw, json)
Hash identifier: BQZngQA/8UeYGds+mun7y9WS7OANvdRbkZptGR45/DM=
Subject key identifier: B1:D5:D7:20:D2:E4:DB:68:4D:D3:D2:7B:F2:B5:6A:C4:33:1A:7D:DB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CF9B78EB0F4ABD6CB7588FEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa
Signing time: Wed 25 Feb 2026 02:00:32 +0000
ROA not before: Wed 25 Feb 2026 02:00:32 +0000
ROA not after: Tue 26 May 2026 01:00:32 +0000
asID: 396610
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:b7:8e:b0:f4:ab:d6:cb:75:88:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 25 02:00:32 2026 GMT
Not After : May 26 01:00:32 2026 GMT
Subject: CN=ff98cf35-1289-4ce0-8862-148d71cc850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:3d:47:85:38:d6:91:e2:fd:8f:a8:f9:99:
86:b2:21:70:e4:2f:b4:93:e0:bd:26:16:65:1c:4b:
ae:7a:be:a5:c0:a5:33:1a:31:3c:a1:4e:e6:6b:dc:
37:81:f0:f5:a1:fe:81:07:3b:ce:a0:73:53:9d:08:
92:95:e7:2c:ac:d8:ee:c0:f1:4a:93:81:1a:d0:23:
ff:5a:a6:27:c7:6b:8a:ac:77:c2:63:53:73:09:85:
4e:bc:f6:79:71:24:13:26:96:60:32:83:73:5c:70:
dd:67:c2:d7:6e:86:70:a1:f9:5f:99:ce:63:0e:82:
27:4c:a6:a5:29:05:bb:6a:76:4f:9c:12:2c:4e:7b:
e6:6e:fe:37:fe:a5:2b:18:44:c6:51:96:21:19:e9:
d4:54:9e:bb:fa:10:4f:4d:42:24:c8:d5:fe:4b:ba:
6e:15:ca:f5:62:18:8b:18:c6:d1:ed:5c:54:db:cb:
ce:01:cd:9f:a5:f2:b7:41:73:1d:38:8d:cc:3b:14:
e9:b5:3a:61:32:b7:d8:ac:bc:47:cb:44:34:19:21:
70:e1:92:88:41:07:12:58:f7:57:3c:1f:46:b1:1e:
ed:f0:8d:fd:b1:3b:66:46:32:de:ec:9d:62:ea:b8:
f5:31:de:c5:38:03:ca:46:09:06:8f:59:3b:19:58:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:D7:20:D2:E4:DB:68:4D:D3:D2:7B:F2:B5:6A:C4:33:1A:7D:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2329a3-e38d-31ce-bf41-ce776461b6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:2c:3e:18:87:5e:8f:17:66:47:5b:5d:5c:f7:6b:de:6f:e0:
ba:72:42:9b:33:d1:af:d7:35:7d:22:b6:f1:24:a4:3a:34:d0:
03:ea:8d:7e:c8:6a:3f:99:7f:78:66:09:f2:66:95:c8:7c:cb:
c7:7b:8a:f3:98:43:03:8e:67:64:c6:b5:ad:be:78:f3:29:da:
60:a9:05:90:ee:3b:7e:ab:7e:0a:63:cb:86:44:54:b9:53:49:
b5:01:52:54:32:af:6d:d2:06:4e:d4:6e:f8:5d:2d:0b:a8:12:
e7:24:67:4e:7e:2c:c2:9a:33:4e:56:b4:4e:82:86:b2:7e:e8:
79:6a:72:1d:79:3d:2b:4d:01:25:9e:01:75:1d:12:fd:80:c1:
53:8a:8f:bd:6a:b8:fd:02:6a:86:f6:5f:e2:37:1b:16:6b:b6:
b9:81:01:cc:69:85:11:29:92:48:43:6e:e3:10:63:0e:d1:4c:
b7:be:0a:e3:6e:f4:5d:84:6d:31:cd:32:2a:c0:70:d2:59:6e:
ed:4c:23:66:70:63:8d:f1:b2:e5:fc:07:3f:27:f1:5c:30:d8:
65:35:8c:78:99:75:28:76:02:cb:64:63:a0:88:76:93:ed:65:
c9:d7:a7:d4:c7:57:14:e6:37:79:ab:a7:81:1b:31:59:60:21:
0e:5d:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:15 2026 by rpki-client