
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa
File: bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa (raw, json)
Hash identifier: DRNLuY1s5QKUDI8VaGIkrpXAg1a8yECSGvF7uCtEOwc=
Subject key identifier: 67:70:31:1A:E3:78:E9:D0:C0:B1:AD:21:61:48:73:54:42:A4:05:62
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F06729225F783C2C31420D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 396612
IP address blocks: 192.82.134.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:92:25:f7:83:c2:c3:14:20:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=a966c572-be6b-4567-a481-fd0d3de7fde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:6d:7e:a8:e3:d4:54:81:bd:2f:2e:21:18:
ae:0b:f5:b2:77:2a:f4:cb:e3:03:d7:ca:c0:33:7c:
a2:f3:f3:6a:1d:e0:99:8b:3e:97:4c:67:fb:9d:78:
cf:0c:37:8f:4e:eb:96:0b:c8:26:8b:fb:d9:83:4e:
cc:4f:a3:3f:04:ff:d9:ba:c0:9f:c9:ed:b8:ef:ab:
f1:32:c8:f0:1b:67:7e:29:40:9c:f6:61:c9:12:39:
4e:bf:b2:dd:30:82:1e:96:12:db:83:00:d5:b6:fe:
23:72:9d:2d:c7:f2:c6:79:b9:f3:c9:6f:26:c7:6d:
9d:38:e9:8b:8e:59:a9:08:6a:c8:71:c6:f5:47:aa:
a8:73:25:72:4c:8f:ff:98:3f:94:1e:c3:66:50:9f:
dc:de:0c:1a:5b:3d:6b:3f:32:f6:cc:9d:6f:09:eb:
92:90:58:29:19:17:67:9d:b3:98:48:bf:e9:c8:0a:
97:e1:a2:ad:d7:38:98:9c:4e:8a:49:8e:74:f7:bf:
9a:ae:08:ce:73:12:e3:e0:60:07:9f:fe:2b:25:53:
68:a8:fe:af:c1:a9:7b:c9:ce:44:84:6f:49:c6:07:
ec:8d:ac:77:34:56:e3:ae:5a:83:d5:a6:af:b2:2a:
7e:35:e1:99:f2:e8:e8:82:6f:fe:9b:8e:db:58:7a:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:31:1A:E3:78:E9:D0:C0:B1:AD:21:61:48:73:54:42:A4:05:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.134.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:8b:4e:01:26:4e:f7:a3:19:b2:50:c0:d1:32:10:32:be:f9:
ce:fd:a6:43:2c:9c:c6:89:cc:d6:b7:69:a4:f2:dd:41:97:5a:
f8:b0:8b:e9:70:e6:3f:94:73:8a:08:90:47:c1:78:44:a7:34:
cf:1e:27:90:14:6c:04:53:7f:79:c5:ac:40:5b:38:57:5d:43:
fd:06:0b:c2:d8:a5:68:c9:29:cb:d2:19:dc:ac:0d:ed:3d:b2:
bd:cd:dd:8a:b7:02:d8:fa:0c:35:e9:70:2a:c0:85:60:a4:e5:
b8:f7:44:0e:08:c1:e4:00:38:d8:d0:70:fa:68:13:bd:88:e2:
49:b8:79:5d:55:46:b2:b0:2c:b0:d9:04:14:f8:b2:bb:58:36:
58:63:ec:bf:12:5e:7e:0e:15:80:65:fe:82:b1:68:ad:24:a0:
6a:30:cf:d3:4c:46:26:f2:09:2c:7e:2c:64:23:6d:c7:14:33:
23:07:6f:04:47:69:1d:79:25:4d:f1:d7:39:25:79:99:61:59:
ac:a1:b8:12:44:2f:b8:f1:aa:2e:2b:0b:1f:c9:d5:26:a4:e1:
28:eb:13:d9:56:70:92:b3:42:8b:e1:00:aa:eb:0d:6f:4c:20:
ea:76:4b:d0:1f:8f:68:f8:74:b0:55:d5:d7:15:44:0c:7f:f6:
66:7e:1b:1c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcpIl94PCwxQg1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YTk2NmM1NzItYmU2Yi00NTY3LWE0ODEtZmQwZDNkZTdmZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLRtfqjj1FSBvS8uIRiuC/Wydyr0y+MD18rA
M3yi8/NqHeCZiz6XTGf7nXjPDDePTuuWC8gmi/vZg07MT6M/BP/ZusCfye2476vx
MsjwG2d+KUCc9mHJEjlOv7LdMIIelhLbgwDVtv4jcp0tx/LGebnzyW8mx22dOOmL
jlmpCGrIccb1R6qocyVyTI//mD+UHsNmUJ/c3gwaWz1rPzL2zJ1vCeuSkFgpGRdn
nbOYSL/pyAqX4aKt1ziYnE6KSY5097+argjOcxLj4GAHn/4rJVNoqP6vwal7yc5E
hG9Jxgfsjax3NFbjrlqD1aavsip+NeGZ8ujogm/+m47bWHrkUwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGdwMRrjeOnQwLGtIWFIc1RCpAViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZhYjljZDMtODQ1YS0z
ZTIzLWE5NzktYzBmZDUwOWRhY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQByi04BJk73oxmyUMDRMhAyvvnO/aZDLJzGiczWt2mk8t1Bl1r4sIvp
cOY/lHOKCJBHwXhEpzTPHieQFGwEU395xaxAWzhXXUP9BgvC2KVoySnL0hncrA3t
PbK9zd2KtwLY+gw16XAqwIVgpOW490QOCMHkADjY0HD6aBO9iOJJuHldVUaysCyw
2QQU+LK7WDZYY+y/El5+DhWAZf6CsWitJKBqMM/TTEYm8gksfixkI23HFDMjB28E
R2kdeSVN8dc5JXmZYVmsobgSRC+48aouKwsfydUmpOEo6xPZVnCSs0KL4QCq6w1v
TCDqdkvQH49o+HSwVdXXFUQMf/Zmfhsc
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:03:09 2026 by rpki-client