
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa
File: e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa (raw, json)
Hash identifier: eCL/AApGWcDeIFswGjOH0UXq2c1oVkefLPXVdnfwVp0=
Subject key identifier: B1:AA:CD:49:92:14:DC:17:78:97:B7:CF:79:5A:F6:67:07:D2:33:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D6AAA7DC6F64AB8035996D6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 396593
IP address blocks: 192.42.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:7d:c6:f6:4a:b8:03:59:96:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=1ddc8d46-623d-42a1-bdb3-39ae0d9b8251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:1a:99:3c:65:f1:cb:7e:6b:f5:ee:c8:69:
fa:e5:74:aa:a1:82:c4:52:9b:a2:00:22:fa:7c:a7:
34:97:13:59:38:4e:6a:a1:31:85:51:c7:85:f1:c2:
b3:07:c7:cf:7a:e6:04:71:dc:50:c9:f1:df:42:2d:
0a:0a:8e:00:32:00:8a:47:d5:bd:b3:3b:e5:55:e7:
9d:ef:34:58:03:70:1b:bb:1c:0c:c8:43:e2:9c:e0:
74:68:f7:9c:f1:d4:ea:74:ac:b7:c8:3d:56:f3:98:
07:b1:86:49:71:74:db:39:3d:34:d9:f0:2a:ce:57:
1b:40:dd:c2:ee:96:a3:60:f5:0d:e0:8d:1e:c3:9d:
ad:1d:99:d0:b6:9c:8b:83:3a:2e:20:56:37:da:6f:
f1:11:a6:9d:9c:c3:ed:e9:72:56:43:fd:21:08:cb:
c6:54:a0:83:de:d9:9f:51:d3:3c:45:58:4c:01:91:
cf:21:93:cb:ee:4f:56:2c:41:0c:44:48:8a:e2:ff:
0b:d0:d4:1d:82:d5:69:b4:4c:af:e5:f0:6f:71:2f:
c4:d5:9c:c8:ba:b7:43:db:41:60:69:10:3d:bb:5c:
32:04:f0:f4:b1:d7:e1:ee:7e:27:b8:40:9e:3c:96:
6d:2a:a4:8b:c4:22:86:59:84:64:2a:d9:79:e7:c7:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AA:CD:49:92:14:DC:17:78:97:B7:CF:79:5A:F6:67:07:D2:33:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:6c:1e:84:6e:d1:94:f7:16:4e:3c:94:97:fe:0d:75:7b:c3:
af:18:8f:96:8f:cb:92:93:92:8e:d2:12:fc:eb:56:52:5d:30:
75:73:81:73:45:21:46:5d:0e:1d:21:a0:69:36:e1:bf:89:f1:
91:ff:36:e8:0a:bb:a9:ce:9f:0f:5e:d7:14:3c:51:e1:a9:ee:
23:c3:d3:39:57:99:13:81:03:27:79:54:8a:13:c1:5e:97:89:
4f:69:da:70:e8:36:67:e4:1e:a7:39:6c:bc:ef:7c:5a:f9:5d:
e3:7c:be:f4:76:65:c5:32:d9:2a:88:d6:82:f7:1c:ab:b0:72:
cf:ef:fe:f2:cb:0f:51:60:73:00:b3:29:fd:9d:2c:fb:f3:69:
a4:f6:7b:35:3e:25:e8:66:f3:0e:42:64:78:80:12:71:0c:2d:
e7:51:08:8f:71:8f:68:f8:3b:98:33:d6:29:eb:dd:16:4e:db:
f3:c3:ce:d2:82:91:27:6a:6b:2a:1c:f5:83:e9:bf:c5:8c:95:
24:c1:b1:82:ad:ab:27:1c:80:1a:39:ad:f5:67:5a:1a:c8:07:
60:83:7c:52:d0:54:07:15:6e:fa:58:ee:34:2c:13:49:15:9b:
59:88:b6:62:2e:f8:1a:d8:c0:3d:eb:8d:49:0c:7c:15:8f:a4:
ca:7b:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:04 2026 by rpki-client