
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc00b5f-42c5-3305-a498-7f478563374e.roa
File: dfc00b5f-42c5-3305-a498-7f478563374e.roa (raw, json)
Hash identifier: W2uECnW1KuwR5RiVBQisrozk2K7gH6TW19W6K76Yiko=
Subject key identifier: EC:C5:96:CE:2D:44:61:BF:F2:55:58:56:66:17:3B:1A:71:34:63:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA7889DCA24A26FF7FA3A8578
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc00b5f-42c5-3305-a498-7f478563374e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396547
IP address blocks: 192.42.173.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:9d:ca:24:a2:6f:f7:fa:3a:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9dd4dcfe-9d0c-4b7d-82ba-869e23f92950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:8f:01:47:5f:16:71:7f:55:45:64:35:d3:
f0:c0:ab:ab:ee:97:e9:a1:f6:09:97:62:d6:e4:98:
f5:0c:87:07:c1:d5:58:de:9d:8b:28:78:e4:ef:e8:
e2:d2:60:12:94:77:53:53:84:4e:68:6a:5c:3c:db:
86:a9:9c:14:82:5c:b8:26:73:77:99:cb:f5:74:2c:
d6:d3:94:fb:ed:19:51:21:44:ed:89:98:14:0a:ab:
38:96:6f:29:0c:48:39:06:2a:64:ba:2b:fb:98:30:
b1:ca:ae:2d:46:cc:f5:13:ef:e9:1d:d6:23:57:f3:
76:fa:c8:bf:fb:b6:e6:be:6d:dc:83:81:49:bc:34:
6a:9f:34:0d:36:21:4c:07:96:9a:c0:d7:17:50:b3:
20:c5:b3:dd:23:e1:3f:18:12:6d:9e:c5:79:12:63:
a7:14:89:46:4e:ff:af:3d:ba:92:7c:16:31:9a:38:
f6:5a:e8:c7:cf:fa:e6:32:22:55:a1:c4:c5:b1:f0:
38:74:88:73:ac:10:68:20:d3:8b:f3:87:80:21:9f:
7c:9f:79:ff:3c:c0:18:32:5f:f1:93:a6:c0:84:18:
b3:3f:93:91:bb:f6:b6:2d:05:44:8c:fd:4a:c0:34:
93:c7:cb:4d:d7:74:b0:54:ce:b2:3e:2f:aa:75:34:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:96:CE:2D:44:61:BF:F2:55:58:56:66:17:3B:1A:71:34:63:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc00b5f-42c5-3305-a498-7f478563374e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:5a:05:d9:2e:b9:f1:3b:e2:c3:42:8d:bd:38:44:42:8c:dd:
88:7c:53:cb:fb:d8:53:48:1d:bb:80:d1:27:4b:cf:26:54:90:
a4:55:2f:5e:c2:fb:41:6b:01:79:f1:90:46:d6:47:cd:96:b5:
5d:a3:41:fe:53:3b:eb:43:a0:c7:29:67:21:47:36:2e:a5:c4:
54:3a:08:e2:ce:33:89:ed:ca:cd:5b:df:b9:b0:56:ca:bf:5b:
d3:fb:0e:a2:09:da:78:02:5c:0b:44:85:3d:78:18:33:d9:5e:
62:b1:95:3c:f5:65:5c:4d:98:87:91:f0:16:f4:71:75:ca:19:
39:67:3f:74:7c:5d:00:e5:15:81:f1:d3:32:e9:91:bb:31:68:
7b:d1:b2:44:27:33:4f:90:d1:d1:31:8b:59:c1:37:89:49:34:
dd:0a:54:74:8d:db:46:61:04:d3:77:69:41:11:77:d8:43:4d:
93:11:a8:4a:3f:b6:b6:bb:49:1c:17:a0:a1:63:81:74:dd:bf:
d3:8f:7e:c9:d2:1f:41:42:bb:51:18:24:4e:d1:46:e0:38:6c:
5d:56:31:3a:3f:8d:eb:b9:db:dc:a2:26:24:d2:93:07:53:5f:
84:21:1f:d4:4c:8f:5c:09:06:49:1d:87:de:f0:a2:37:5f:5d:
8c:02:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:37:06 2026 by rpki-client