
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
File: 192d6f3e-49fb-3200-81c1-507ad761ee89.roa (raw, json)
Hash identifier: V+C9dtftXzU927ScReuRaOi8+M27daKjAy9XEDgubac=
Subject key identifier: A6:C1:20:3D:64:0F:A7:15:64:FB:C4:3E:E7:22:C1:D0:6A:9B:88:5B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA791CE844F5B773E9D53ACE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36629
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:ce:84:4f:5b:77:3e:9d:53:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ff2199bd-2942-45d4-a799-887dd5c7aa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:43:d3:b3:ea:b7:91:c1:5a:cf:ab:fc:19:
64:5e:fb:39:17:c8:26:ca:05:81:da:50:d0:ba:7f:
50:a8:6c:cd:49:fd:39:6c:ec:f8:39:4c:69:f6:e5:
5d:ed:9d:eb:60:fa:1d:3e:90:9f:fd:c3:a8:5e:73:
be:ad:d7:32:f4:68:ae:8e:51:e1:30:a0:05:e5:a5:
7c:19:0c:af:fd:b7:0d:4a:1b:a0:33:64:08:c4:dc:
f3:a3:d9:ad:33:57:5a:d3:e5:a6:51:74:69:a7:61:
3b:09:6c:de:49:4a:9c:b4:53:7a:b8:b0:ca:a8:b7:
66:ed:59:f4:1f:c4:05:6c:08:20:f2:23:c8:38:ac:
b3:f4:d9:24:c8:65:46:85:c0:e7:12:e6:e6:49:56:
a6:40:49:72:58:e2:eb:85:b4:9e:1f:cf:35:06:5f:
1e:23:46:52:2f:ec:26:63:cd:ed:1e:bc:fa:50:fa:
16:a0:4a:3c:3e:dd:eb:00:12:99:91:b9:51:42:20:
56:c3:2f:29:1c:f9:49:48:10:8e:22:65:66:33:70:
ad:c5:53:83:ef:aa:3f:8c:a3:7e:a0:b6:57:9d:7c:
07:4e:06:31:87:c1:09:fa:27:51:ac:54:ac:0e:d0:
6d:21:1e:ba:b1:b6:ae:e5:50:61:a9:3d:56:33:2b:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:20:3D:64:0F:A7:15:64:FB:C4:3E:E7:22:C1:D0:6A:9B:88:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/192d6f3e-49fb-3200-81c1-507ad761ee89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ed:f8:b2:73:a8:25:68:43:5e:ae:f1:ea:80:42:f8:fa:b5:
03:de:bf:b1:21:e8:da:13:fd:46:07:0b:0d:2d:33:01:40:ed:
35:8f:46:a1:46:04:55:2c:57:58:68:45:a7:9d:62:0e:66:c7:
f2:10:93:86:b6:bb:f2:32:e0:68:6c:1b:4a:c2:18:54:c2:79:
62:76:c2:a5:35:3f:12:c1:c2:c2:7d:ca:d5:57:e6:21:fa:4c:
4a:d6:40:5b:26:d5:c7:ba:9b:33:90:a4:0e:0a:93:8f:cd:28:
e2:9c:eb:88:ec:f1:93:2d:a4:1c:04:e1:97:46:17:94:51:48:
4d:c5:3c:42:f9:31:af:b3:59:b1:1e:35:01:84:1c:93:a6:d1:
b5:9f:ff:71:52:db:2b:38:ea:25:e2:5b:15:4c:59:e2:fd:bf:
46:51:6d:9f:cc:d0:b8:97:3e:02:ab:62:47:f8:94:7c:fb:b8:
8e:71:94:2e:10:65:2b:df:b9:3d:3f:0c:47:8c:3d:fc:dc:91:
36:b2:d4:29:3b:cd:37:4b:53:b9:0f:6f:12:b5:9d:da:ab:4c:
5c:6d:59:d5:2b:fc:81:88:6e:c3:ff:c8:14:66:fd:32:60:07:
06:83:03:6b:43:e7:5a:ef:b9:36:40:31:06:e4:fd:f6:29:05:
25:48:b1:05
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkc6ET1t3Pp1TrOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmYyMTk5YmQtMjk0Mi00NWQ0LWE3OTktODg3ZGQ1YzdhYTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvJD07Pqt5HBWs+r/BlkXvs5F8gmygWB2lDQ
un9QqGzNSf05bOz4OUxp9uVd7Z3rYPodPpCf/cOoXnO+rdcy9GiujlHhMKAF5aV8
GQyv/bcNShugM2QIxNzzo9mtM1da0+WmUXRpp2E7CWzeSUqctFN6uLDKqLdm7Vn0
H8QFbAgg8iPIOKyz9NkkyGVGhcDnEubmSVamQElyWOLrhbSeH881Bl8eI0ZSL+wm
Y83tHrz6UPoWoEo8Pt3rABKZkblRQiBWwy8pHPlJSBCOImVmM3CtxVOD76o/jKN+
oLZXnXwHTgYxh8EJ+idRrFSsDtBtIR66sbau5VBhqT1WMytzuwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKbBID1kD6cVZPvEPuciwdBqm4hbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTkyZDZmM2UtNDlmYi0z
MjAwLTgxYzEtNTA3YWQ3NjFlZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAW7fiyc6glaENervHqgEL4+rUD3r+xIejaE/1GBwsNLTMBQO01j0ah
RgRVLFdYaEWnnWIOZsfyEJOGtrvyMuBobBtKwhhUwnlidsKlNT8SwcLCfcrVV+Yh
+kxK1kBbJtXHupszkKQOCpOPzSjinOuI7PGTLaQcBOGXRheUUUhNxTxC+TGvs1mx
HjUBhByTptG1n/9xUtsrOOol4lsVTFni/b9GUW2fzNC4lz4Cq2JH+JR8+7iOcZQu
EGUr37k9PwxHjD383JE2stQpO803S1O5D28StZ3aq0xcbVnVK/yBiG7D/8gUZv0y
YAcGgwNrQ+da77k2QDEG5P32KQUlSLEF
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:07:04 2026 by rpki-client