
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3fef0b-eff3-3364-ae53-ea5e4f894a1a.roa
File: ff3fef0b-eff3-3364-ae53-ea5e4f894a1a.roa (raw, json)
Hash identifier: l6KEqwzf4pO6hoVMXWzx8Sr3UG2PCy5X6qUIR153XLY=
Subject key identifier: 79:80:44:6E:FC:F4:0B:E0:0F:54:56:99:42:73:AE:34:86:C1:54:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F19FD005DCE9CBB4467372900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3fef0b-eff3-3364-ae53-ea5e4f894a1a.roa
Signing time: Tue 08 Sep 2026 01:00:12 +0000
ROA not before: Tue 08 Sep 2026 01:00:12 +0000
ROA not after: Mon 07 Dec 2026 02:00:12 +0000
asID: 396550
IP address blocks: 192.34.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:19:fd:00:5d:ce:9c:bb:44:67:37:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 8 01:00:12 2026 GMT
Not After : Dec 7 02:00:12 2026 GMT
Subject: CN=2c73d062-cce2-413e-8de6-7cdad58627f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:fc:ca:7a:82:e2:e9:90:4e:be:2f:de:9b:
1d:87:c1:ae:10:d4:e5:31:e3:d5:89:e7:00:45:77:
dc:b8:e6:85:fd:a7:8d:dc:ae:ab:71:f9:7c:30:23:
c1:99:e6:d8:06:2f:a7:0b:e9:a3:dd:d1:e8:8f:c2:
5f:ba:c2:af:96:d8:73:e9:ec:97:bf:86:76:19:9d:
0d:2b:de:54:3f:53:e4:8a:2d:7d:f9:e7:54:59:28:
6c:4f:7f:62:82:fa:05:81:ac:4b:94:14:88:fb:51:
69:fe:af:f3:6b:cd:7d:47:94:07:91:3e:eb:d8:62:
26:69:13:8c:57:cb:13:c1:28:61:65:00:b2:61:1f:
58:4b:2a:b0:35:a6:fc:6a:cd:47:0f:28:47:59:a6:
f1:72:58:7c:68:c8:9b:93:38:a9:d5:79:98:ee:e4:
3d:53:34:4d:ab:14:4c:4e:a0:a5:14:42:8e:91:78:
70:81:44:85:83:8f:19:25:7c:c7:67:b9:8e:a0:be:
a0:55:f9:fd:e3:ef:fd:53:46:cb:4d:76:63:9e:3a:
c1:95:a7:9b:d8:ab:25:d2:8b:26:db:87:18:fb:6d:
d4:0a:35:70:a4:5e:47:f2:d8:41:14:f4:8f:f7:26:
f1:9f:09:bb:e1:c8:e8:bd:ee:72:52:43:26:28:e6:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:44:6E:FC:F4:0B:E0:0F:54:56:99:42:73:AE:34:86:C1:54:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff3fef0b-eff3-3364-ae53-ea5e4f894a1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:3f:92:e3:2e:f3:4b:af:49:1c:48:9c:a2:1c:c6:84:3d:17:
f5:d5:18:b8:29:fc:1a:64:d1:43:ad:48:2c:02:2d:e2:e1:e4:
69:87:a8:ca:85:03:e3:46:79:b8:72:22:ca:3e:b7:27:a4:0b:
81:ec:3e:3b:66:b2:08:75:50:5c:35:02:e0:19:5f:67:7f:72:
f9:2f:70:f3:43:2e:c2:d4:0c:9e:cb:02:fd:08:d9:ec:5d:11:
58:fa:52:5e:90:2e:3e:c7:37:05:54:56:9d:9c:b6:99:42:38:
e4:e8:15:7a:2d:00:86:d6:9a:53:a0:17:8d:f9:82:3e:50:0e:
b4:36:2d:54:43:e3:06:35:85:6e:de:09:0a:c4:d9:3e:c9:3a:
77:cb:25:e2:a4:da:b8:d4:5c:48:69:2b:52:50:e9:0e:98:f6:
12:e2:28:d5:8f:50:cf:34:f1:5f:40:4f:71:15:de:47:9c:c1:
b4:c4:d4:9a:0e:56:bc:d6:6b:5e:87:25:c5:af:2f:97:ed:4c:
14:ff:de:e9:10:f3:79:b1:3b:c2:23:9f:ad:55:80:d0:e8:2f:
08:79:e9:54:9d:f9:05:42:44:6a:c2:a5:ba:f7:85:e4:dd:77:
21:44:fa:14:13:f9:76:48:ca:74:00:8c:55:75:b0:8d:e3:77:
b9:c9:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:25:48 2026 by rpki-client