
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2525c4-3326-3f9b-8064-e16aa4072fd0.roa
File: cf2525c4-3326-3f9b-8064-e16aa4072fd0.roa (raw, json)
Hash identifier: s5/DvVQ86QZ5ekI5BOvWiSsTTMDwZaSDq2+vnXc34yI=
Subject key identifier: BA:43:F3:2E:D7:6B:DD:F3:2E:57:AA:88:47:FB:28:86:D8:01:C0:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D00B26695080473893D52B240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2525c4-3326-3f9b-8064-e16aa4072fd0.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 396573
IP address blocks: 192.43.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:66:95:08:04:73:89:3d:52:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=766f2d1d-d396-437e-8b17-44af9c1fb9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:0e:dc:22:44:60:b6:bf:d0:35:07:ba:d4:
f6:5e:d9:ec:d4:4a:4a:22:60:b4:47:33:71:c3:67:
b0:98:14:37:9a:39:87:56:99:cb:e8:fe:4f:7e:86:
0d:4b:8c:63:d8:2c:d2:52:66:f2:04:76:44:6c:2b:
46:4f:b6:d7:62:1a:47:29:0c:e8:de:e7:b1:2e:e4:
f5:e6:eb:45:28:b9:c9:52:5b:e7:06:f9:d3:7c:6e:
4f:66:74:f7:47:98:6c:9c:08:46:e1:c4:2b:87:2d:
a6:b9:0f:17:bd:a7:e0:ad:ea:7f:2c:de:dc:a4:c0:
b7:5a:08:7a:4e:10:45:15:1f:77:43:82:f5:b6:34:
87:9d:fd:95:92:7e:20:48:5b:e9:7f:f6:5d:dd:b3:
9d:5a:fd:84:f5:50:c2:8c:e2:c7:07:c7:1a:63:4b:
c5:3a:4d:a8:86:c0:7f:79:ec:d5:f7:6e:71:d4:a3:
34:1d:c6:0b:1f:20:d4:b1:a2:5c:a5:bb:f9:4b:01:
05:69:a0:fa:88:c3:fe:f4:ad:c5:3c:b0:ac:e4:28:
f6:ee:f5:1b:6e:a9:dc:f3:25:42:f5:c6:74:1b:aa:
9a:35:ab:35:9e:e9:eb:28:ac:2e:47:b6:32:98:fb:
97:26:d4:7f:e2:d4:98:e0:1e:f5:a1:54:d1:db:6e:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:F3:2E:D7:6B:DD:F3:2E:57:AA:88:47:FB:28:86:D8:01:C0:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2525c4-3326-3f9b-8064-e16aa4072fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d3:4d:58:3c:c7:56:89:45:dc:3c:68:21:88:a1:a6:f3:a0:
5e:85:bb:65:57:f5:58:70:a3:be:25:7c:ba:4d:8b:58:0d:7c:
dc:2b:08:4f:51:b4:de:7a:cc:38:dc:58:b3:8f:3d:33:a0:5b:
62:df:7c:f6:c8:8d:af:4c:62:8b:80:d0:78:9b:a4:4f:58:11:
08:7e:e7:e3:0c:c5:e3:f4:46:f7:cd:82:7d:55:5c:ba:05:a9:
77:3d:5f:c8:c3:41:94:b8:d7:88:bf:4c:e1:a3:8f:7b:1f:a5:
f7:89:b2:42:b7:c0:64:84:76:69:d0:a6:5c:fd:6f:dc:74:ec:
c8:7b:58:5f:0c:8a:05:e5:c7:59:d5:f0:0e:71:16:09:78:3b:
bc:ca:d6:50:55:fe:b2:97:28:63:c0:ad:83:43:36:a6:aa:84:
c0:a3:37:3a:37:55:39:c6:ad:38:fe:83:85:7c:7f:8e:2b:43:
e3:20:a5:bf:91:71:d2:3b:45:2b:c1:87:4d:b1:f1:f2:90:d4:
64:27:f8:21:f7:a1:79:c3:6b:50:8c:a3:9f:21:65:ff:17:0d:
ad:aa:f9:67:5e:11:c5:86:5a:32:50:e2:0b:e3:54:e4:5f:3b:
a6:de:65:67:a5:de:a4:da:fe:03:38:10:60:e9:5d:16:80:52:
55:01:f3:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsmaVCARziT1SskAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
NzY2ZjJkMWQtZDM5Ni00MzdlLThiMTctNDRhZjljMWZiOWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqEO3CJEYLa/0DUHutT2Xtns1EpKImC0RzNx
w2ewmBQ3mjmHVpnL6P5PfoYNS4xj2CzSUmbyBHZEbCtGT7bXYhpHKQzo3uexLuT1
5utFKLnJUlvnBvnTfG5PZnT3R5hsnAhG4cQrhy2muQ8Xvafgrep/LN7cpMC3Wgh6
ThBFFR93Q4L1tjSHnf2Vkn4gSFvpf/Zd3bOdWv2E9VDCjOLHB8caY0vFOk2ohsB/
eezV925x1KM0HcYLHyDUsaJcpbv5SwEFaaD6iMP+9K3FPLCs5Cj27vUbbqnc8yVC
9cZ0G6qaNas1nunrKKwuR7YymPuXJtR/4tSY4B71oVTR226aWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpD8y7Xa93zLleqiEf7KIbYAcDyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YyNTI1YzQtMzMyNi0z
ZjliLTgwNjQtZTE2YWE0MDcyZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHTTVg8x1aJRdw8aCGIoabzoF6Fu2VX9Vhwo74lfLpNi1gNfNwrCE9R
tN56zDjcWLOPPTOgW2LffPbIja9MYouA0HibpE9YEQh+5+MMxeP0RvfNgn1VXLoF
qXc9X8jDQZS414i/TOGjj3sfpfeJskK3wGSEdmnQplz9b9x07Mh7WF8MigXlx1nV
8A5xFgl4O7zK1lBV/rKXKGPArYNDNqaqhMCjNzo3VTnGrTj+g4V8f44rQ+Mgpb+R
cdI7RSvBh02x8fKQ1GQn+CH3oXnDa1CMo58hZf8XDa2q+WdeEcWGWjJQ4gvjVORf
O6beZWel3qTa/gM4EGDpXRaAUlUB86U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:44 2026 by rpki-client