
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
File: c358bafc-dd64-36da-99f4-9718f68a72a3.roa (raw, json)
Hash identifier: jTS1R9e+jYxKpyGSlH9+vG6iw/Nv9bwC5Ailkym5i/I=
Subject key identifier: 4B:BA:B4:5A:78:FC:54:61:13:E8:6E:01:B9:30:48:6D:DC:69:72:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D810059A66137904BE4EFB000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 396595
IP address blocks: 192.34.234.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:00:59:a6:61:37:90:4b:e4:ef:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=67ade145-e86b-446a-82b9-9870d6be7f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:1f:bf:5b:23:24:16:a2:13:09:9a:6b:b4:
62:5a:e5:23:f0:07:61:f1:6d:35:19:ee:af:92:a9:
85:0b:1b:1a:7b:ce:26:b6:d6:ca:23:55:d5:64:41:
06:da:b5:1e:07:c0:16:d8:12:24:88:f3:56:61:ca:
98:f3:76:09:82:cd:f6:ab:98:1e:24:df:72:09:4f:
a3:d5:27:69:67:3f:47:5d:7f:ea:de:13:33:c4:ab:
2e:bd:52:b5:ee:bd:2e:31:ac:2e:e9:bf:13:04:4d:
ad:b5:a9:f3:ce:9f:bf:6b:aa:6d:db:82:20:f9:88:
1c:56:a9:20:6f:b8:9b:67:22:9c:bf:05:91:18:36:
df:a1:f2:b1:55:61:37:ed:50:01:68:ce:07:74:8c:
eb:97:0c:cc:d4:4c:f2:6b:a3:c2:4b:a0:bc:a7:c6:
d0:a5:7a:6e:17:01:9c:d9:e0:2e:6a:8a:bc:3a:f1:
9d:a8:f1:0c:9c:23:18:d5:5a:27:41:bc:f9:e2:83:
1a:19:ad:31:9d:3f:0c:b3:b9:52:46:7d:0a:89:17:
13:77:21:57:7c:68:13:cb:ae:0e:e2:3f:0b:7a:a4:
db:36:ff:96:73:fe:a1:06:60:82:65:71:83:74:a3:
9f:e3:b7:5c:3a:17:16:bd:f3:7a:4c:88:91:4c:16:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:B4:5A:78:FC:54:61:13:E8:6E:01:B9:30:48:6D:DC:69:72:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:bb:2a:1e:ce:e2:34:92:b0:99:1a:7e:fe:60:82:a1:b6:b0:
34:4a:4d:16:26:77:20:29:2a:de:06:1a:6a:b0:70:79:1b:70:
67:27:04:61:55:7d:2d:e4:26:fa:81:da:b9:cd:94:8d:60:65:
ce:01:d2:58:d6:64:46:6c:99:a9:3f:70:90:c7:b0:d9:eb:6c:
b3:34:35:55:e8:0b:24:b5:24:c9:a0:c3:b5:6e:53:8f:58:8e:
c6:d5:ab:4d:af:d4:67:6b:e1:5f:44:99:08:4b:0e:80:f3:0d:
43:0e:29:9b:b1:7d:7e:94:7a:74:ff:34:50:f4:99:c0:4c:92:
f2:9a:ed:8c:4d:ab:91:e4:ec:c3:13:77:d4:bf:c4:cf:15:b4:
f0:ff:1e:32:30:c4:51:9d:a5:57:7a:8e:c4:96:66:f3:7a:5d:
7c:db:99:c7:98:a0:ea:fa:f3:66:7a:20:f3:f7:20:37:54:d9:
02:ca:23:fb:b3:11:53:56:f2:ec:64:d0:37:27:e2:f3:a2:f6:
89:c1:0d:dc:ae:b9:6b:03:e0:35:79:9a:87:a3:af:ee:0b:90:
be:74:48:61:ee:5e:d9:bc:08:7e:b3:aa:4d:4d:e2:0c:63:c5:
f8:4a:8e:74:05:77:ab:8f:d1:f0:a5:3f:0e:1d:e6:13:42:c8:
e2:2a:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:45 2026 by rpki-client