
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa
File: e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa (raw, json)
Hash identifier: tldm3qY66RbZrzhqt1rePnWuJvcXFgjMHxgbdDdvnbw=
Subject key identifier: 81:30:81:8F:44:8C:F8:58:2F:ED:06:D8:D5:EE:F1:0B:A7:5E:60:CA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F093CE10212BDF7A000724180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 40647
IP address blocks: 192.42.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:e1:02:12:bd:f7:a0:00:72:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=fdea8e67-1da9-46cf-b85c-9003fc864b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:11:06:a7:f0:3a:dd:89:a5:e4:79:2f:e3:
8a:7c:2f:3b:72:ad:57:7c:37:c8:b4:79:e3:14:06:
d0:db:56:b8:1d:e3:db:0a:e9:46:62:81:87:5b:8c:
ca:6e:30:41:6c:03:8f:2b:03:2b:88:43:32:c4:84:
68:9f:0f:a2:59:a8:4a:2c:6b:f9:4c:dc:80:df:f6:
10:ab:66:d2:c1:1a:fd:ec:d4:cc:f6:62:ad:ab:36:
d2:e7:80:da:21:d0:08:d7:9f:1a:2e:a5:cf:10:06:
38:6c:4d:47:ce:d2:ff:07:96:3b:3d:85:9c:7b:e1:
de:25:2a:ab:51:38:ce:0f:fe:e7:aa:8c:b2:4d:66:
6e:65:2a:b3:a1:c6:76:6b:b7:c2:4c:47:46:d9:e1:
66:77:8e:d9:70:97:06:8e:e9:ef:ea:d3:26:47:a3:
bc:12:3e:31:17:28:ec:af:1a:00:2d:d8:80:f2:d2:
55:73:23:11:65:ad:d8:eb:6f:c5:6e:3a:04:a1:54:
75:72:93:83:bc:2a:e1:83:5c:f9:43:59:13:ca:3e:
d9:7b:97:78:5e:5c:ef:22:e6:4c:48:de:48:ae:15:
4f:af:c9:53:9d:b0:0d:94:f1:8f:1e:70:b0:70:7f:
ae:ae:c8:2a:6e:19:f6:e5:93:f9:e1:f0:b8:db:b1:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:81:8F:44:8C:F8:58:2F:ED:06:D8:D5:EE:F1:0B:A7:5E:60:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8328903-7ca7-3aed-b3ee-92d8f5f434ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ed:ef:a0:21:86:24:a4:63:d0:0d:1e:45:3a:c4:ff:8a:4a:
8e:a0:62:5c:89:56:f6:06:06:47:ed:7b:ee:c0:77:83:eb:50:
07:5b:a9:7a:91:02:69:00:4b:dc:a6:e5:d0:28:ba:48:66:e1:
22:d6:ff:d5:c1:43:39:9f:44:72:55:27:ba:a9:ba:8e:bb:4a:
f5:ce:42:27:17:55:62:16:51:7f:8e:43:de:93:4c:50:1f:2a:
3e:ae:18:00:f0:04:35:e3:14:4a:0d:a9:a6:8c:5a:35:92:a8:
16:38:7a:04:ec:af:b6:66:74:57:80:f4:5e:b6:af:1b:f7:70:
14:90:6f:d6:10:69:b0:ca:86:c2:f8:d5:4a:38:fc:21:89:57:
ca:b1:2d:88:37:05:53:1f:48:c0:00:76:78:e8:1d:7b:1f:d4:
f4:f5:b1:01:a8:4d:b2:f1:43:60:2c:aa:d5:2b:e0:7d:94:f9:
88:c0:b3:31:57:31:b5:3a:b6:ca:55:38:c6:94:c4:4b:d0:9c:
ed:fa:ea:91:b2:9d:aa:8f:a0:82:f3:a0:87:b4:f3:04:dc:09:
95:a4:79:de:93:e9:ea:01:8a:07:ec:05:02:74:0c:7a:00:50:
94:8d:47:e8:46:ef:d7:8f:4a:7c:f7:9d:0e:92:bb:39:5e:b4:
6a:b0:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:47:29 2026 by rpki-client