
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3ffcf99-ab18-3fd4-9c36-0640da9ccdd7.roa
File: f3ffcf99-ab18-3fd4-9c36-0640da9ccdd7.roa (raw, json)
Hash identifier: abbmxeq8va6KK3TeIecefnAcGYcTxqGk+1AvemNub9c=
Subject key identifier: 5D:85:A6:B9:58:E7:20:62:68:D9:54:C7:A9:A4:7D:5E:02:80:55:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584DF4DB745CC36AD85C5B479700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3ffcf99-ab18-3fd4-9c36-0640da9ccdd7.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 396617
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:74:5c:c3:6a:d8:5c:5b:47:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=33158de3-56dc-4f67-8b50-4b5d09b0ae0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:db:4a:3d:fd:17:50:9f:51:d5:b6:c3:28:
05:e6:f9:c7:9d:4a:d2:a6:dd:28:45:e3:2a:85:f0:
d9:69:f4:7f:67:38:03:b8:d5:93:3c:a8:d0:85:83:
bd:88:96:70:4a:ad:88:0f:f0:82:98:bf:bb:4a:a4:
cf:25:a4:76:41:78:8a:76:a2:5b:29:d8:e9:74:ec:
db:5f:8d:2e:53:a3:2b:99:95:11:b9:06:14:d3:34:
86:5d:d6:94:d7:05:fa:5a:e4:b4:26:b4:0b:34:c6:
9a:34:de:92:82:8f:04:97:db:36:1d:f8:ee:3a:7b:
83:11:d7:d6:90:32:ce:ed:a0:fc:8b:c3:d0:4f:d4:
c8:58:1c:f5:7c:6d:cf:e3:90:d1:8c:0e:01:e4:24:
cf:0c:aa:e7:86:6b:08:bf:da:2f:8c:98:b4:29:8f:
93:78:ac:44:b8:6a:cc:e9:48:eb:42:c1:4a:60:06:
ac:be:54:34:0e:88:fa:2e:90:71:9a:1c:c5:7b:ca:
63:4c:e3:5c:b2:3e:94:62:ee:24:9c:d8:23:67:87:
c3:70:50:b2:e4:40:0c:e0:1b:02:4d:b2:70:6a:f0:
85:ae:00:6b:18:5d:d9:17:2f:8f:23:57:a0:6b:32:
68:76:67:04:87:84:76:9b:8a:56:7f:8c:b8:c8:b7:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:A6:B9:58:E7:20:62:68:D9:54:C7:A9:A4:7D:5E:02:80:55:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3ffcf99-ab18-3fd4-9c36-0640da9ccdd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:6e:45:cd:fc:7a:d1:3b:89:2a:57:e2:c1:e5:68:ae:21:2e:
3a:41:41:51:5e:86:60:12:a7:f3:97:ec:ca:cc:7f:f3:fe:3f:
f0:95:9e:22:d4:7d:8b:2b:f6:e5:1f:29:c8:a6:60:e8:89:ce:
47:70:7c:ce:b3:a0:74:1d:a5:63:48:1d:59:95:95:bb:69:6b:
92:69:5c:d3:55:8b:b1:fe:82:59:f3:0d:8a:5c:4a:cf:b9:2c:
fd:35:0a:2d:d2:36:4e:4f:0d:12:11:7c:0d:67:49:bb:1f:61:
d0:37:c4:92:21:7f:85:cb:18:af:0a:15:2f:96:6f:60:f8:35:
10:04:f6:b4:55:63:c3:98:8c:13:91:dd:63:78:40:e4:35:52:
7f:a5:f2:df:b8:fa:6b:70:28:e7:d2:f6:4a:e5:1d:55:a4:90:
4a:9a:30:7f:58:55:47:e6:db:0b:42:ac:93:89:e0:27:d1:02:
f8:84:83:b9:2c:0b:c2:8f:db:40:e0:14:da:90:ae:8f:4f:8d:
31:2e:48:8c:38:13:48:14:5b:8f:ab:f9:ab:51:41:42:b7:d6:
74:d8:ba:8e:4c:23:ef:5c:a6:7e:da:a6:5d:f4:cc:e0:8c:85:
ec:0d:fd:24:a4:ad:15:06:a0:c3:9b:7a:aa:6b:b1:ed:3b:30:
a8:fb:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:35 2026 by rpki-client