
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa
File: d9dee4cd-e720-378c-ae57-f470d4345094.roa (raw, json)
Hash identifier: 3a5b9nGl44H6R4xtOG3ESgqOpZfIbcTdYZn8NVtsiU8=
Subject key identifier: FA:B1:FA:20:F9:71:97:5E:B9:7C:69:9F:DF:79:5A:B3:66:10:65:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DF4DB7421AF13F03F17E223C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 396576
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:74:21:af:13:f0:3f:17:e2:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=c93e419d-4221-465d-8e71-346f2217a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:1e:9f:20:aa:5d:0d:b1:c8:43:6a:72:eb:
71:19:dd:9c:38:31:8d:2c:b5:0d:73:7c:bb:6d:90:
81:a1:58:07:b2:61:15:08:9e:08:65:91:7b:f5:b1:
a1:e5:d1:85:f9:d8:b5:ec:cc:7a:2d:99:62:78:7c:
cb:b3:00:66:bb:0a:ed:a8:a6:e7:81:21:83:0d:bb:
85:bd:7f:70:ae:05:89:72:67:4f:c8:4f:14:51:17:
28:aa:a6:86:fe:fc:4d:76:f0:0e:89:76:3b:49:b4:
aa:6b:43:cc:eb:38:22:75:a9:13:e0:56:97:9c:92:
35:c8:0d:26:aa:38:25:88:c9:5e:27:74:8e:3c:27:
25:6b:e6:e7:c4:82:f0:48:5c:45:34:96:f2:9c:0d:
78:6f:17:87:86:5a:ab:52:7e:aa:ef:1d:a7:4e:b4:
63:b4:4e:9f:41:b7:eb:db:d1:bc:68:69:cd:97:41:
2b:2c:b9:63:d3:38:38:3c:61:3d:ab:58:52:59:cd:
90:72:2c:4a:42:3c:2c:6f:0a:d9:56:58:20:de:30:
ae:99:8c:ee:68:b8:4b:6f:dd:d7:99:33:6a:76:7d:
38:24:22:da:73:51:b6:c8:81:e6:70:33:06:35:4a:
c3:7c:d6:75:62:ea:b1:3f:f9:1b:dc:a3:ea:ca:be:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:FA:20:F9:71:97:5E:B9:7C:69:9F:DF:79:5A:B3:66:10:65:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:68:4b:6f:05:3b:7a:3f:82:1d:ae:37:1b:6e:a2:d3:49:29:
bd:03:7b:3f:86:5b:53:2d:67:b1:76:3a:f5:d3:13:a6:b3:41:
11:6c:50:f0:b3:f3:1a:85:d7:c2:64:f0:a4:e5:d9:39:24:cc:
67:fb:5d:3c:ac:b8:f4:87:ff:80:46:4c:78:31:38:f1:01:9c:
f2:7b:d0:04:60:b6:72:71:0b:96:fe:9a:88:66:3a:06:68:31:
a9:12:d1:ff:d8:23:6d:28:1c:65:a5:c6:86:3f:f9:55:fa:b1:
18:26:90:a5:be:13:c7:53:01:4f:7d:95:c8:23:ea:79:de:99:
9d:c6:60:a9:2e:ac:76:29:50:7a:7c:cd:99:a4:ad:50:4b:4e:
d2:51:e5:fb:aa:2a:a0:e1:71:38:be:8a:7d:9d:38:40:d1:ee:
84:c6:a8:ec:51:5d:25:7d:00:05:f2:44:8c:07:f5:f2:94:81:
04:89:71:e0:cf:6c:34:d1:6c:50:28:ef:67:49:86:1c:aa:1b:
7b:6d:fd:99:f2:1c:05:7d:ae:85:27:25:44:6e:7a:8f:06:fa:
70:95:5a:49:95:f4:ad:ee:6d:6f:7f:f9:72:0a:23:23:d9:62:
16:5e:96:a9:f6:90:bc:6b:6e:e6:fd:b1:b5:a1:d7:33:ca:a7:
33:a1:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:09 2026 by rpki-client