
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa
File: fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa (raw, json)
Hash identifier: yQ7bbbg4WbBTXgniyojebrb0DzozmacymhJ5hz8Nhes=
Subject key identifier: 88:2A:11:F7:C3:69:BB:E5:E9:90:58:F4:EB:3D:02:07:FD:0F:64:2E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E104F28B6392E076999781C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 397211
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4f:28:b6:39:2e:07:69:99:78:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=a42b290b-2f66-4d83-8d9d-1d3cb731e2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:1e:97:53:58:c7:b5:61:1f:f2:3f:ac:d1:
81:95:c8:94:b4:7e:5d:e3:f2:78:47:e2:4e:76:6d:
5b:d0:b5:ce:8e:22:e9:64:a2:8e:79:35:2c:d9:85:
a1:fa:bc:9b:b8:a6:a4:f0:ff:85:9f:4b:f8:65:8c:
ce:d6:c3:67:7f:c2:52:32:d0:04:22:9c:ff:2e:34:
ee:a2:76:f0:c5:4a:f9:42:ac:a0:59:1f:d7:dd:7f:
f9:d3:d1:41:c5:a0:4a:d7:59:4f:e5:02:91:b8:ee:
1f:3d:a9:53:82:4b:47:82:f8:8a:2c:7b:e1:1c:aa:
66:3f:1d:6b:61:dc:6a:d2:63:b8:28:db:51:be:38:
fb:f0:b4:cb:78:de:57:74:9a:e8:54:d0:26:e3:32:
94:0b:ba:30:dc:0e:37:29:02:ef:03:43:41:64:f1:
94:24:37:94:a3:d3:75:49:0c:0c:b9:cf:d1:48:5b:
96:33:4a:2b:c6:74:4d:ed:85:4c:d3:7c:de:97:46:
82:36:a6:b5:99:32:c0:90:2c:d4:fd:a0:c7:4c:f9:
c3:de:2b:c4:1c:51:77:21:8d:f1:3f:a3:82:cd:1c:
58:75:fa:3e:07:d0:1f:3d:f1:0c:b4:73:95:94:30:
0c:6a:7a:86:95:f0:1c:b4:3d:1a:0c:70:5b:69:99:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:11:F7:C3:69:BB:E5:E9:90:58:F4:EB:3D:02:07:FD:0F:64:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8ebb64-b098-33d0-a3db-845f0a8e5311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5d:a1:19:ee:b6:ea:5c:57:c6:96:0f:72:7c:44:e0:dd:f7:
31:7f:4d:df:8a:6e:f8:75:e7:63:c6:49:e3:fe:46:6f:11:ba:
66:c1:3e:60:a3:17:d1:02:5d:3f:30:ac:8d:a2:8b:6f:aa:72:
c3:94:05:23:10:c3:23:b1:8c:09:e6:11:2f:80:21:c2:e7:19:
8a:ca:7b:a1:4f:a2:80:86:3d:48:0d:57:1c:21:df:c7:89:28:
6b:e4:df:a3:1b:b3:ec:40:c4:6f:45:05:61:4e:34:4f:28:c8:
5e:0b:38:66:7a:96:54:8b:8e:67:a3:8a:b7:8d:18:5f:0b:4f:
70:53:ad:0a:57:c6:c7:3c:57:c2:49:ec:42:6f:23:0d:18:5f:
48:e0:c9:87:e6:01:62:df:80:a6:0a:ad:4d:99:c7:4b:8b:77:
3d:da:a1:9f:70:c3:cd:eb:21:09:5b:47:67:d4:0a:b2:4c:82:
e5:a2:64:17:88:9a:00:4d:ca:40:53:a9:1d:f6:97:d1:17:7f:
4a:c1:37:7d:89:10:93:6d:09:9f:6c:51:d7:e8:c1:48:72:66:
f9:a9:78:a0:70:ef:9a:90:97:42:a3:65:70:35:4c:ef:80:74:
10:ee:18:89:e5:44:42:3b:74:17:d9:00:20:c2:c6:d3:40:68:
fe:b0:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:52 2026 by rpki-client