
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa
File: fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa (raw, json)
Hash identifier: GKael6jdtX2zua8vkqjbUGOHpM2eE3xBFpanCo9B4u8=
Subject key identifier: 22:6B:FD:AC:11:38:E7:3B:79:3C:D5:7F:0A:B9:75:51:A8:08:05:A9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E2313823751B6F955AA2AC580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa
Signing time: Thu 11 Jun 2026 14:21:07 +0000
ROA not before: Thu 11 Jun 2026 14:21:07 +0000
ROA not after: Wed 09 Sep 2026 14:21:07 +0000
asID: 396587
IP address blocks: 192.33.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:23:13:82:37:51:b6:f9:55:aa:2a:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 11 14:21:07 2026 GMT
Not After : Sep 9 14:21:07 2026 GMT
Subject: CN=d6f9fd02-c98f-4124-9fd4-d6fc96c24e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:0d:42:a8:d0:67:49:19:57:7e:2e:3a:9b:
d9:8e:f1:7d:23:69:81:7b:eb:f1:78:af:93:b5:e3:
5a:40:df:c7:17:ec:b5:52:c3:15:ed:08:2a:dc:a8:
02:6e:d0:34:90:f1:cc:00:bb:b6:2c:62:22:24:3e:
f2:f9:d7:28:da:31:ca:8c:44:1d:b0:1d:a1:55:b5:
d1:c7:8b:8e:b2:1e:46:02:dd:9b:62:8b:b0:ee:50:
9f:7d:0e:53:21:9d:b9:61:3e:af:81:95:7f:1c:91:
57:3d:82:55:87:8c:61:45:9e:8b:f9:76:56:29:e7:
b9:76:61:fb:90:68:58:a1:13:43:29:f0:38:04:37:
60:3e:cc:bb:b3:5f:07:f2:b2:5d:eb:88:7f:2b:73:
b5:1c:17:e6:51:43:d0:17:30:94:40:86:ab:74:43:
ae:d2:81:16:45:ee:4d:a5:00:8b:7f:c2:92:7b:a1:
82:8a:0c:6f:76:c3:36:4d:79:9c:9a:50:d7:ab:fc:
f1:56:1a:be:a2:a5:c1:5a:96:0a:0a:4b:a4:69:c4:
b0:d3:ef:9b:d8:05:64:19:4c:25:e5:88:e5:8d:96:
28:4b:db:55:20:3c:43:7b:5d:88:2c:c1:cf:ae:7a:
53:e7:07:00:50:97:4c:01:91:8c:2f:e2:b1:e4:99:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:FD:AC:11:38:E7:3B:79:3C:D5:7F:0A:B9:75:51:A8:08:05:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:0f:c9:cb:15:a6:db:bc:d3:3f:b4:cc:2b:10:da:ff:5e:d8:
b5:ac:a6:c5:13:01:43:a7:ee:11:83:9c:1c:b0:ba:a1:fd:e3:
bb:6e:21:6b:69:80:6b:87:2c:38:0b:40:47:01:18:ec:20:3a:
82:17:f7:4a:8c:cc:d7:53:e0:b8:0c:54:41:88:de:15:81:e1:
05:44:58:9c:a9:06:d5:51:f8:6b:51:8e:70:0c:86:3d:1f:99:
a4:cc:a0:c9:59:06:fd:18:91:d1:40:e5:a9:be:89:ed:88:f9:
89:4b:17:af:e0:0c:c3:09:3e:3b:ec:78:b3:0f:02:40:de:2b:
69:28:3e:b8:39:70:f3:b4:80:90:b3:2a:b7:9f:fc:0a:55:22:
b2:34:32:6e:55:ef:ac:96:f9:96:97:a3:e1:ef:98:46:74:ec:
fd:3e:9e:18:ea:52:20:f2:26:0e:3e:9a:bf:7c:5e:43:af:89:
9c:60:33:a7:4b:a8:69:df:69:73:64:1b:7f:6e:f8:60:08:1c:
0d:7a:66:29:ae:43:d9:54:3d:26:b4:1d:a9:a9:07:d1:78:18:
84:f7:4a:20:8a:45:e0:c0:47:71:f2:28:a4:a3:3e:c0:21:00:
ae:8f:18:1e:95:f3:56:91:f5:e5:e4:44:23:ba:14:82:02:96:
9a:87:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:42:14 2026 by rpki-client