
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ef5ebf-de28-377e-a2f6-1dd8417acdcd.roa
File: b0ef5ebf-de28-377e-a2f6-1dd8417acdcd.roa (raw, json)
Hash identifier: bEZOU3jhQI5+P0fkypwFAG8In/LAkkdw7wuYDMj8+6w=
Subject key identifier: FE:A2:A1:74:42:2B:6B:A3:0B:44:33:44:C4:F8:B3:74:33:37:F6:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F1E2CF29E8DC38C147B930740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ef5ebf-de28-377e-a2f6-1dd8417acdcd.roa
Signing time: Wed 09 Sep 2026 13:00:11 +0000
ROA not before: Wed 09 Sep 2026 13:00:11 +0000
ROA not after: Tue 08 Dec 2026 14:00:11 +0000
asID: 396573
IP address blocks: 192.54.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1e:2c:f2:9e:8d:c3:8c:14:7b:93:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 9 13:00:11 2026 GMT
Not After : Dec 8 14:00:11 2026 GMT
Subject: CN=323a8d23-afa0-45f0-a4c9-5896a1d07ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:11:39:04:7d:73:57:2f:d1:94:45:b6:01:
f8:bb:43:50:ae:c0:72:ef:28:3d:52:a5:63:66:dc:
66:bf:f5:b5:8a:3d:3f:7c:73:9e:17:ce:f7:8f:35:
25:19:a0:2d:e0:32:37:9a:71:34:ed:5c:70:67:d4:
f9:cc:a2:f0:00:68:be:6f:e3:f8:01:3a:4a:0d:9e:
36:e2:d7:30:98:99:b8:3f:42:12:a1:54:ca:7a:3c:
57:b6:1a:54:8e:a8:fe:ac:e7:77:ad:96:f5:ec:03:
db:f3:e6:e2:9c:33:18:5f:2e:ae:14:04:13:52:f5:
4a:4f:f9:62:7e:e7:4d:a8:e6:f4:8c:a5:85:52:17:
62:1a:c8:30:dd:9a:8e:cf:27:0d:32:1a:36:12:88:
98:d5:3e:fa:61:2e:21:f1:db:ca:78:5c:5a:8b:03:
a1:7d:85:20:72:12:3a:ac:fd:66:53:d6:b0:98:c3:
fd:b2:eb:64:18:19:53:17:39:bf:58:ae:53:aa:a3:
b6:a8:f1:49:e2:6e:a4:8d:f4:62:21:5d:c4:68:d1:
42:db:70:a6:13:5c:5f:34:06:f9:1e:f7:a1:77:b8:
85:98:b4:5d:ac:24:38:7b:40:17:c1:52:55:5f:b0:
4f:b8:2a:34:70:0d:60:87:a6:de:8f:8c:ec:8d:14:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:A1:74:42:2B:6B:A3:0B:44:33:44:C4:F8:B3:74:33:37:F6:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0ef5ebf-de28-377e-a2f6-1dd8417acdcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.54.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:cc:77:85:10:51:0c:d8:f2:cb:e5:28:3f:d5:1c:f1:c2:7d:
4d:e9:15:ac:45:4d:0d:3a:e4:45:04:a1:5c:23:85:5b:87:9e:
29:4d:67:7b:54:ee:65:a3:0b:25:1d:07:7c:b5:8d:7c:09:1e:
e4:2d:5e:34:9a:09:93:4f:77:77:0c:63:8f:49:5d:16:fe:02:
7f:bb:95:05:1b:38:a5:ce:34:55:79:36:3c:e6:c2:04:74:4a:
ad:c2:e9:bb:5d:b3:3a:61:50:56:65:48:21:ae:7d:70:8e:c2:
c1:f3:93:95:49:df:cd:d3:8b:f2:5f:8a:04:05:4b:29:9a:31:
54:90:01:5c:60:15:a9:db:8a:37:e6:ea:0f:d1:ae:ad:27:83:
82:1c:3b:fe:78:db:12:f2:85:aa:26:8f:d1:bd:c5:75:7a:e2:
61:7e:b5:68:d4:1c:f0:40:5e:e2:d5:09:eb:89:ff:e3:04:8f:
2a:2a:f3:8d:57:ca:91:74:56:15:4c:13:0d:f5:f6:53:2b:a9:
b6:4f:fb:fb:ed:30:43:dc:96:03:6d:48:59:93:15:19:56:b1:
65:c9:d1:7f:9f:d8:27:6f:e2:34:66:a6:77:9d:23:ca:cf:00:
e2:de:9d:b0:9f:a3:54:a8:b0:6f:51:8b:7b:69:59:83:b8:9b:
32:3b:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:24:18 2026 by rpki-client