
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
File: f4a8e510-bc92-3110-915a-43642ba525fd.roa (raw, json)
Hash identifier: x/Mx9Hieriip6qtlUK7i8QV3+Tnq39hT+3gb/dXVtjM=
Subject key identifier: A7:B4:4C:02:A0:88:F5:BC:DE:1D:24:D9:1F:50:A0:08:72:5E:0F:9A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497301B2DFF9C9C1AE4D0040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36626
IP address blocks: 192.43.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:01:b2:df:f9:c9:c1:ae:4d:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7fd8b36a-af59-45ff-9938-3c30e11a6850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:00:10:0c:84:69:bb:fc:1a:eb:2a:b0:db:
c1:31:da:89:06:b1:b0:4e:05:c4:e5:8a:58:06:30:
0f:14:f4:eb:cc:a3:75:0a:2c:81:75:45:b1:02:09:
d8:8f:ad:d5:39:77:37:bd:3f:b9:19:37:1f:c8:9e:
08:79:16:2a:c3:5b:a6:ac:4c:0d:2f:f4:15:c9:96:
22:15:28:35:0e:a7:e9:b7:79:55:18:0e:27:98:66:
e7:3b:f2:a6:0d:d0:26:e1:46:72:0e:3f:93:c1:4f:
e3:39:54:49:b9:05:83:5d:79:ae:37:82:e2:82:4d:
2a:db:27:96:be:d3:95:94:e7:d7:b8:75:c4:bd:a4:
96:ad:8e:7f:42:4e:cd:20:8e:c2:3b:97:3d:d3:34:
47:75:5d:9e:3f:48:81:90:28:d3:88:0f:03:cb:4e:
d3:66:16:fb:38:e7:ef:a6:9d:52:87:b7:60:3c:31:
e6:0f:af:89:6c:06:30:5b:a9:c5:0e:61:3e:0d:5a:
0c:6a:bd:9a:bb:da:1e:e0:2f:55:17:71:9b:e2:48:
91:1c:6e:8d:d1:12:cd:00:e8:83:7c:9e:f7:80:8e:
9e:fc:62:72:c3:e7:e5:a7:51:5e:66:72:05:f8:da:
71:54:4f:b0:fb:b0:e2:e9:aa:0f:77:19:ac:8e:f7:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B4:4C:02:A0:88:F5:BC:DE:1D:24:D9:1F:50:A0:08:72:5E:0F:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:dc:70:ee:5f:d3:f2:cc:c6:17:4f:2d:22:69:32:ad:a1:e6:
88:aa:33:24:ed:a3:9e:b3:1d:4b:a8:e1:9e:72:ff:65:94:ec:
15:af:7a:ea:03:cb:61:9b:2d:17:65:db:bb:02:fb:80:ba:f6:
ad:2d:08:94:a1:59:84:83:89:8c:87:4b:0d:4c:3a:5f:bf:a2:
7b:f1:d9:40:91:da:4c:e2:44:f7:58:10:14:b7:86:f3:ad:e4:
63:4f:de:51:9a:b8:9d:50:ee:3f:65:87:ef:6d:19:69:28:30:
dd:72:bf:87:84:9f:14:5d:5c:d2:1d:f1:b8:4a:77:ea:b5:42:
89:59:79:6d:d6:4e:9a:1b:45:5b:dd:1f:73:00:3e:ed:c3:d4:
d3:00:55:b0:92:f8:83:ef:92:7d:cf:56:3d:9d:bb:b6:e4:c9:
50:55:d1:50:d4:11:f9:87:45:24:a5:70:a0:77:26:af:21:61:
e0:bd:e7:f9:8e:5e:0e:08:0c:d6:1c:1e:53:d8:4a:71:56:9a:
49:dd:a7:a6:e3:a3:a0:50:c4:9d:bd:01:23:9b:5a:78:a8:ee:
05:f5:a1:71:05:d3:bc:8d:a7:86:24:6e:10:0c:15:dd:be:33:
7d:17:e8:28:65:70:2f:c9:bc:38:df:43:9a:95:cc:79:db:39:
44:0b:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:51:47 2026 by rpki-client