
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf8250ea-cdc5-3ec1-8baa-59c236945f24.roa
File: cf8250ea-cdc5-3ec1-8baa-59c236945f24.roa (raw, json)
Hash identifier: yfZ+MwcjiDnZV3+v+sticAPdbiRguFzQSDNUAxMtg6U=
Subject key identifier: 22:D2:08:3F:5C:CE:53:E9:50:2F:40:3C:39:CD:D6:6A:79:76:64:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D00B29F8E42F17247CF541760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf8250ea-cdc5-3ec1-8baa-59c236945f24.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 397196
IP address blocks: 192.43.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:9f:8e:42:f1:72:47:cf:54:17:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=0f1a6dd1-5cdd-4db4-a9fd-1c8402bdf95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:c0:16:19:de:74:98:71:97:34:a6:5a:4a:
e4:0b:67:55:90:02:0d:e8:3f:8d:56:7b:af:1b:d2:
6e:6a:80:56:cf:dd:74:09:ca:cc:9b:1f:a9:fe:b7:
a5:5b:9f:6e:0b:47:84:ae:05:43:1e:56:03:ae:40:
08:b3:61:62:35:44:48:06:59:72:89:82:fe:ef:f2:
30:cc:e8:72:d3:f4:b7:c5:33:96:5c:aa:f7:fa:b0:
59:78:4f:5f:aa:b1:2f:7a:ec:e9:c7:65:7f:74:2a:
cd:d9:b3:91:08:e5:5c:c5:46:ba:34:09:16:e3:93:
d3:6e:7f:27:b7:c8:03:da:42:76:fb:0e:4d:db:0b:
a6:a8:a0:f9:40:08:bb:c0:09:84:c0:48:9b:d1:39:
3c:63:bd:71:dc:55:f0:f9:55:5b:9e:27:e5:0a:27:
f4:e2:0b:cb:53:0f:72:fe:6e:b6:c1:bf:28:94:22:
98:ba:e8:a3:b8:94:d2:8e:9d:ce:08:12:ab:a9:71:
39:fc:fb:fa:15:e0:8f:c0:f3:ca:7f:6f:69:ff:e8:
6d:bb:01:9e:ab:c7:5a:09:4f:47:60:dc:62:57:00:
fc:5d:f7:b2:27:db:9f:e7:e0:17:af:e3:89:cc:24:
56:6f:24:12:f7:d6:1f:c5:ed:31:2c:39:0b:17:eb:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:08:3F:5C:CE:53:E9:50:2F:40:3C:39:CD:D6:6A:79:76:64:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf8250ea-cdc5-3ec1-8baa-59c236945f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:18:08:d0:e5:eb:44:b2:4d:c5:06:41:26:55:03:04:aa:a9:
f8:38:db:0c:d0:ab:ab:79:36:09:ef:e9:3f:b8:3f:43:cd:3a:
77:bf:f1:2f:29:a3:f7:74:3f:c0:dc:2c:b7:9c:48:64:43:b9:
b2:8b:a1:af:9a:1e:43:ed:21:e2:28:b4:ff:e8:01:c3:6e:e1:
81:01:6d:3f:c9:cc:69:d5:d5:f4:67:0c:7c:ab:63:fe:29:a4:
8e:a8:c2:f1:1c:4e:ac:36:56:2e:69:db:b2:26:c9:7c:35:b8:
85:ff:84:ed:f2:24:45:ae:4a:83:29:fa:b4:25:5a:4a:42:dc:
42:fd:ae:7f:de:6a:22:de:f3:68:48:52:ad:4c:93:6d:9f:ec:
10:68:fc:f3:39:10:37:47:69:ee:36:47:12:03:fc:2c:e3:26:
48:b5:ba:08:ac:35:a4:81:b0:1e:38:a8:d7:3e:fd:92:19:69:
06:71:20:23:fb:10:f0:0d:26:b7:cc:d0:88:11:30:82:c3:0b:
0b:3c:6e:4a:cf:9c:00:ad:5a:c6:45:64:7f:bf:02:f8:65:76:
dd:11:2f:95:cc:be:0f:78:28:96:04:87:6c:b9:ce:12:5b:b4:
75:0d:75:85:54:08:20:cc:2c:a5:fb:62:63:26:34:c8:23:09:
f7:47:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:17 2026 by rpki-client