
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1dd69bd-882b-3881-a60b-e8aa60add848.roa
File: c1dd69bd-882b-3881-a60b-e8aa60add848.roa (raw, json)
Hash identifier: joZ9ml7gGf8m9kvxrNn7zUpSOCAJYdhywIEme6S0Ra8=
Subject key identifier: D7:C7:B9:B6:2F:4F:76:2A:0D:BC:05:41:8A:54:07:AC:16:16:08:77
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49879BA209CEAF769F2D6500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1dd69bd-882b-3881-a60b-e8aa60add848.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36617
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:9b:a2:09:ce:af:76:9f:2d:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=92ed9333-b0b4-4968-bd56-8e0044c38d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:3d:9d:f0:c8:09:fb:62:c5:c2:ef:51:2a:
fc:d5:22:11:bc:ef:61:a2:ad:e9:da:1d:35:2e:de:
80:48:3b:1d:dd:76:c4:81:0f:9e:3c:e9:fa:d9:f8:
95:d3:ef:0d:c9:f3:c6:e1:32:8e:67:eb:43:c6:4c:
fd:8e:68:89:b0:f4:d7:b1:83:3c:00:e1:9c:8a:f7:
c2:81:47:ec:a8:82:c8:01:83:41:6d:e5:12:8c:f2:
9a:02:a2:eb:e5:65:8e:73:30:79:d8:ca:c3:9f:92:
25:d7:45:30:f0:1a:39:d7:9a:6c:7d:c7:3b:a7:c1:
63:83:45:b6:85:4c:ed:70:5f:d6:e8:b1:3d:af:d1:
06:38:54:48:90:b0:83:d9:90:5d:58:72:bc:82:df:
e0:87:8f:42:69:88:30:c9:8b:a1:cb:de:60:57:65:
e9:8b:63:a4:d3:0f:20:67:ec:cb:cc:e5:b4:9c:25:
dc:9c:9b:c8:36:08:73:50:f9:d3:a1:bd:26:82:dd:
53:4f:ba:e4:3e:a8:9b:af:df:7d:4b:84:aa:ed:87:
74:46:c1:e9:18:fd:e1:3d:fb:d2:c5:f5:36:56:dc:
37:1b:13:67:d3:b7:ee:d2:f3:6d:a0:ed:49:28:d7:
c0:dd:97:ad:d7:94:d6:99:3b:26:e9:e1:cf:65:db:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C7:B9:B6:2F:4F:76:2A:0D:BC:05:41:8A:54:07:AC:16:16:08:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1dd69bd-882b-3881-a60b-e8aa60add848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f3:63:07:ca:56:cf:0e:6a:4d:0c:67:f0:f1:aa:bf:02:4c:
e2:39:a8:0a:90:81:35:9b:b7:e3:f6:96:e5:71:23:6f:a2:2b:
5f:4f:ee:17:07:65:31:24:60:b4:d9:61:b9:cd:cb:86:49:cd:
cd:04:1e:41:ea:3c:f2:f9:88:ce:45:9f:f2:0c:b4:3e:14:21:
82:c3:d7:f7:b0:11:8a:6e:0e:b4:b9:68:0d:74:62:89:ed:2c:
59:e3:ed:44:3d:20:29:60:a2:13:1c:a7:26:b4:73:06:13:43:
a6:47:9b:fa:83:2c:ad:08:e4:e7:5a:0e:6e:37:a6:48:12:bc:
4d:91:5d:14:87:bc:f9:6a:63:92:c6:cd:d2:fe:54:2a:47:0a:
67:44:f8:3e:93:3c:14:8c:f2:a6:e2:e5:67:00:7b:da:00:38:
00:3b:ea:4b:5e:96:13:c9:c0:2d:47:09:18:6d:20:d6:c6:f4:
09:39:f7:e1:ac:9c:9b:fa:0c:72:f8:a7:5c:86:a3:87:f6:6a:
f9:98:df:6e:2f:44:9d:ca:0f:cd:20:40:8f:75:cb:80:bf:c7:
63:db:c5:81:bc:f0:2e:30:03:03:1d:cb:6d:18:c2:7b:e6:85:
42:cf:e4:5e:42:f8:3e:f6:78:a4:93:99:1b:31:ac:8f:dd:c4:
8c:7e:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:32:21 2026 by rpki-client