
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf889996-c788-35f6-8099-bf31a15ee6fd.roa
File: bf889996-c788-35f6-8099-bf31a15ee6fd.roa (raw, json)
Hash identifier: d6PRMjaK2tREt68B51KWAAsKp6C6DF4gna1hJUIGLIo=
Subject key identifier: 19:14:54:74:9F:D7:53:8D:5F:57:7B:0D:AB:BA:B8:FA:92:80:28:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E23138CE868A3B6314A799980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf889996-c788-35f6-8099-bf31a15ee6fd.roa
Signing time: Thu 11 Jun 2026 14:21:12 +0000
ROA not before: Thu 11 Jun 2026 14:21:12 +0000
ROA not after: Wed 09 Sep 2026 14:21:12 +0000
asID: 396604
IP address blocks: 192.33.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:23:13:8c:e8:68:a3:b6:31:4a:79:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 11 14:21:12 2026 GMT
Not After : Sep 9 14:21:12 2026 GMT
Subject: CN=4dec4630-3237-4347-8c92-d94343e1b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:01:1d:41:a1:12:6c:21:73:d1:a4:3f:73:
92:58:7e:05:96:1e:4a:7f:2d:9f:9b:43:58:c0:50:
22:5c:13:fd:66:59:c7:61:ab:48:dd:ec:bc:2b:d2:
c6:ba:01:cc:29:0f:12:1a:d2:16:a5:3c:97:98:07:
50:dd:61:d5:58:c6:e4:7e:30:8f:68:fb:b3:60:29:
1a:25:04:41:ac:19:87:12:7c:9a:f0:d3:33:4d:d9:
90:ac:90:60:9a:e3:46:d5:ab:2e:67:cf:f9:d7:61:
41:9f:73:b7:e1:cf:2d:d1:ba:2a:d0:9d:6e:31:9a:
4d:20:e5:dd:91:30:9c:68:e4:45:7e:4f:6f:27:94:
93:34:61:19:53:c5:75:b1:50:86:77:a8:4f:40:b1:
82:71:34:5f:c3:92:4b:91:14:31:e6:0a:78:04:a8:
8f:c3:59:6d:07:e5:92:7d:d7:1d:16:82:e3:cd:64:
af:7f:03:fb:2e:ca:f2:f9:b7:d7:4d:94:3f:19:73:
01:ba:b5:81:2b:32:72:f9:76:fb:f8:25:c1:c3:b0:
64:56:1b:29:5e:b4:7a:a8:82:f4:73:9f:a8:db:1e:
01:60:c8:a4:ca:b1:32:4e:99:01:95:1c:fc:68:45:
96:cf:1e:7e:3b:b3:6c:99:b4:73:35:79:de:95:04:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:54:74:9F:D7:53:8D:5F:57:7B:0D:AB:BA:B8:FA:92:80:28:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf889996-c788-35f6-8099-bf31a15ee6fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:97:54:6f:4c:37:8e:78:11:dd:61:f7:74:64:c7:a2:ff:8b:
33:50:bf:1d:0f:62:8a:b8:db:0b:30:2b:eb:f9:ae:0b:6b:86:
4c:4f:f9:57:52:16:22:b9:27:67:7a:bf:d5:5c:10:ed:2d:4e:
0d:16:5b:45:d9:1d:fc:26:a3:fb:5c:a6:73:99:c4:95:e1:82:
77:a2:8c:fa:1a:94:b2:d5:8d:fa:20:f0:e8:af:86:c1:9e:be:
cf:b6:83:55:9d:d6:76:41:78:8e:fc:ec:d7:97:f3:32:2c:12:
f8:49:38:6b:d8:31:08:80:e7:c1:64:19:9a:07:a2:b6:04:89:
bd:c6:ae:87:44:ef:d4:54:ae:cd:44:1f:d8:20:95:fd:32:03:
db:19:51:4e:a0:2d:74:3c:cc:9d:06:b0:86:c2:22:cc:d7:91:
53:33:88:a1:78:b6:83:c9:32:3d:9a:83:fb:82:12:71:80:1c:
26:da:57:55:75:6f:39:81:75:d9:48:4b:f4:ed:37:bd:a4:91:
48:63:4b:7c:cf:3f:ae:e0:42:32:9f:70:b7:1a:25:46:59:9e:
f7:c8:39:23:52:1b:8b:b7:8b:1f:42:bd:80:4d:9f:ef:03:db:
91:b9:22:d9:d3:93:e5:b5:ad:52:de:59:3f:41:ef:f5:20:2c:
92:76:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:34 2026 by rpki-client