
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32d62b2-363c-3a5a-8d67-c28709c2cbab.roa
File: b32d62b2-363c-3a5a-8d67-c28709c2cbab.roa (raw, json)
Hash identifier: hFig+xjadBnoOJ6u9XULbVIA62TPME+vwEv90LSbGjQ=
Subject key identifier: C2:F1:DC:F6:A2:27:00:B1:CD:D8:5E:1A:1B:E3:80:B3:0A:A2:2D:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06726E94D259B5D3B3158140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32d62b2-363c-3a5a-8d67-c28709c2cbab.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396609
IP address blocks: 192.42.178.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:6e:94:d2:59:b5:d3:b3:15:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=f1181d74-c163-4517-927a-02f130d7a2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:ad:d0:c4:c6:b4:e5:17:9b:7e:cd:74:c4:
22:e4:49:b4:6f:c8:cb:83:31:fb:a2:6f:8f:86:4a:
1a:18:cb:9e:d0:95:f2:5e:b1:a3:8e:ff:ab:39:eb:
bc:28:1c:09:3a:32:66:2a:60:3e:3c:80:9d:5e:80:
b8:c6:18:26:f1:a2:f3:29:cd:8f:81:29:bd:86:34:
9e:4d:c4:3d:b1:3e:47:f3:79:e3:23:aa:56:92:a6:
53:97:8e:96:9f:64:82:8c:97:43:54:12:f5:fa:3b:
99:8a:79:b1:a0:67:eb:1c:70:18:a8:85:a2:ee:f4:
51:4d:a0:35:ee:5e:d7:f7:89:3e:ea:3d:98:df:f5:
9c:b0:49:fe:65:03:b7:ab:50:a1:d3:d7:ec:97:37:
63:d4:09:1a:34:18:c6:24:36:73:cd:00:4c:74:5a:
29:86:9a:b3:45:e0:5b:3e:56:cd:78:d5:99:22:2c:
9e:db:83:34:59:19:1f:f5:7d:e0:58:95:9e:6d:64:
fd:97:bd:b2:67:04:44:03:de:66:c3:de:02:fc:b6:
af:74:c7:04:57:99:43:06:9d:9e:51:db:4c:31:ae:
d1:76:e5:e8:ce:6a:05:86:c5:85:04:41:01:dd:86:
40:6c:7b:30:90:fe:49:5b:39:c0:aa:63:88:d5:1b:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:DC:F6:A2:27:00:B1:CD:D8:5E:1A:1B:E3:80:B3:0A:A2:2D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32d62b2-363c-3a5a-8d67-c28709c2cbab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.178.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:71:7b:48:e0:e5:95:58:2d:a0:d6:43:ef:67:ec:2a:30:4b:
a7:bf:47:89:b8:be:41:c9:91:b2:fd:59:cc:59:56:4d:5b:e0:
c0:91:8d:07:6f:c2:3e:37:6a:c8:53:7c:b6:30:ad:29:2b:fc:
ac:77:df:2b:4f:12:f7:7d:de:11:d5:5c:6c:58:f9:6f:23:0f:
d5:ce:42:2c:9f:8b:01:08:c4:ea:70:85:33:98:cd:e2:42:0e:
01:1a:b7:7d:1f:0b:e6:86:89:a0:a5:cc:65:9f:c5:c0:0c:26:
57:02:16:a2:2c:f4:92:00:56:ee:a3:56:29:95:e7:46:dc:5f:
da:c3:88:87:bb:e1:c5:35:fe:67:4f:dc:98:1c:a6:f4:95:24:
d9:d8:a2:38:ba:57:f5:f4:f9:b8:30:93:5e:4f:24:33:90:8f:
df:b1:85:cf:12:45:72:64:85:3f:81:be:ca:3c:07:58:d8:fb:
fe:b7:09:19:d0:5b:46:83:95:86:04:0b:aa:95:36:e9:1c:a9:
d6:01:95:15:b3:8d:ab:79:f0:29:8c:de:a0:e0:c3:da:04:bc:
93:e0:fd:dd:86:88:18:9b:e9:9d:82:a2:1e:f6:7c:f8:d7:63:
f7:fb:30:82:98:67:d8:80:31:cc:dd:50:f3:09:0a:fa:29:d9:
c0:f0:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:03:17 2026 by rpki-client