
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa
File: bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa (raw, json)
Hash identifier: lgthgIdlC7k8cTqrKsllfW4D6LKxyC3yB2OM3sHEAlY=
Subject key identifier: C2:B1:7B:CA:CE:00:54:31:CB:5B:0C:9A:C0:A0:88:2B:0B:97:27:AB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DF7A5C9D5DD016D04B8F5BB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa
Signing time: Wed 27 May 2026 01:00:14 +0000
ROA not before: Wed 27 May 2026 01:00:14 +0000
ROA not after: Tue 25 Aug 2026 01:00:14 +0000
asID: 36621
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f7:a5:c9:d5:dd:01:6d:04:b8:f5:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 27 01:00:14 2026 GMT
Not After : Aug 25 01:00:14 2026 GMT
Subject: CN=71857a3f-2dd1-4e65-9a43-93fdbc49a5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:e9:ca:34:25:1d:d9:b4:4b:af:69:c1:56:
39:4e:3e:8f:94:c7:3f:6b:8a:d9:21:da:a1:e0:b2:
ac:04:b5:20:1b:33:ad:a8:e8:12:31:d3:93:c5:62:
d8:34:ae:20:9f:2d:d6:38:b4:af:e5:34:07:f9:1e:
7f:4a:bd:66:fc:35:48:0e:cb:f7:29:19:30:7c:2a:
c7:32:f2:ea:00:ca:18:23:da:8d:43:d3:9b:d4:84:
6d:17:39:72:65:8b:da:7f:76:d0:a6:0e:10:b9:36:
35:05:f0:a0:30:3f:3b:ab:4c:b5:d4:c1:bb:6a:9e:
0c:b7:11:b0:d3:a4:79:49:68:ca:66:fb:5c:2a:84:
c4:a6:28:42:a0:c7:1b:60:0c:ea:bd:f2:16:ff:fe:
b5:7d:bf:39:88:ab:86:51:da:0d:dc:eb:ec:2a:4c:
16:37:7d:10:01:b9:12:0e:f6:e6:2d:bb:2a:43:67:
2b:bf:a5:08:a7:61:3b:66:52:ff:e5:fe:fd:19:cf:
b3:1e:dc:23:4f:a1:5c:34:b8:e0:52:fb:0c:a8:8d:
c7:79:8a:d4:88:b4:d6:e8:7a:6f:32:b8:a2:15:04:
a2:f7:e3:1f:93:29:91:e9:42:ce:f1:ea:d4:ab:d0:
ce:c8:c6:bf:7a:24:0c:da:06:9c:76:c1:49:91:0d:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:7B:CA:CE:00:54:31:CB:5B:0C:9A:C0:A0:88:2B:0B:97:27:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:68:8a:ff:58:ae:ab:85:08:a2:71:06:ff:7b:57:53:d3:35:
91:e1:0a:16:15:a8:2b:f3:51:72:0a:f2:0b:fc:c6:d9:1d:bf:
15:ef:9f:60:f3:fa:80:08:a8:92:a2:0e:dd:af:91:d7:97:3f:
6c:a8:bb:42:6b:5c:af:dd:f7:68:07:b8:b2:22:4f:e9:d3:4b:
c2:90:4c:38:b4:76:59:8d:68:f4:06:fc:68:51:6e:6e:f0:2c:
83:70:ac:8d:75:0b:77:65:5b:72:4a:dd:22:02:04:ec:26:9e:
d2:17:40:d9:4a:0b:2c:e0:bb:8e:b9:68:68:fa:dd:44:27:b4:
13:2e:a7:27:73:64:c5:3e:3b:98:55:69:ef:6e:89:f4:21:89:
20:a0:13:3f:e7:d9:53:36:96:6a:46:a2:8e:bd:1a:4b:12:83:
37:a6:e2:a0:f1:9c:c4:f6:42:5f:78:d2:ef:a6:29:2e:2d:a6:
ed:ad:7e:bc:f8:af:b8:1b:1d:ae:03:a8:ff:0f:90:4a:91:c0:
d2:d3:2b:96:54:f8:0b:1e:1b:42:4f:e1:0e:50:af:71:e5:2e:
7e:9f:2e:d7:e8:ba:26:f3:33:31:d3:0b:ef:71:ff:22:96:63:
98:f1:ab:e6:14:11:97:13:da:49:83:a3:11:46:08:f1:ab:6f:
10:06:6c:22
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE33pcnV3QFtBLj1u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk
NzE4NTdhM2YtMmRkMS00ZTY1LTlhNDMtOTNmZGJjNDlhNWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCDpyjQlHdm0S69pwVY5Tj6PlMc/a4rZIdqh
4LKsBLUgGzOtqOgSMdOTxWLYNK4gny3WOLSv5TQH+R5/Sr1m/DVIDsv3KRkwfCrH
MvLqAMoYI9qNQ9Ob1IRtFzlyZYvaf3bQpg4QuTY1BfCgMD87q0y11MG7ap4MtxGw
06R5SWjKZvtcKoTEpihCoMcbYAzqvfIW//61fb85iKuGUdoN3OvsKkwWN30QAbkS
DvbmLbsqQ2crv6UIp2E7ZlL/5f79Gc+zHtwjT6FcNLjgUvsMqI3HeYrUiLTW6Hpv
MriiFQSi9+MfkymR6ULO8erUq9DOyMa/eiQM2gacdsFJkQ387QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMKxe8rOAFQxy1sMmsCgiCsLlyerMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQyZjJhM2YtNjQwNy0z
MWU2LTg0NzgtOWE3MTQyZGI2ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCNaIr/WK6rhQiicQb/e1dT0zWR4QoWFagr81FyCvIL/MbZHb8V759g
8/qACKiSog7dr5HXlz9sqLtCa1yv3fdoB7iyIk/p00vCkEw4tHZZjWj0BvxoUW5u
8CyDcKyNdQt3ZVtySt0iAgTsJp7SF0DZSgss4LuOuWho+t1EJ7QTLqcnc2TFPjuY
VWnvbon0IYkgoBM/59lTNpZqRqKOvRpLEoM3puKg8ZzE9kJfeNLvpikuLabtrX68
+K+4Gx2uA6j/D5BKkcDS0yuWVPgLHhtCT+EOUK9x5S5+ny7X6Lom8zMx0wvvcf8i
lmOY8avmFBGXE9pJg6MRRgjxq28QBmwi
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:59 2026 by rpki-client