
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa
File: 2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa (raw, json)
Hash identifier: jNeFDkeDNKs2nNbcQ3uRJvL8HpFkyikbgrtPej2hJ4I=
Subject key identifier: 20:3A:50:76:47:50:2C:A7:09:21:34:B0:DB:BE:7C:6F:CC:66:EC:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A7126B746E153481128580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 19836
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:12:6b:74:6e:15:34:81:12:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=c89a228d-0e39-450d-b3f4-a406321bae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:a8:13:99:09:95:1a:b1:07:bc:31:d4:0a:
3a:b0:c3:b8:c4:d2:a1:e3:75:c4:77:8c:0d:b5:88:
e3:44:bd:4d:77:48:82:b7:ef:8b:67:39:a0:0c:c7:
01:9d:3e:00:be:e3:f9:81:59:cf:9e:21:0d:a1:82:
87:fa:32:29:26:3f:e1:2f:f0:f3:b3:0c:7b:8b:7d:
03:00:8a:07:67:ee:f2:81:1c:cf:40:41:6b:ff:1d:
77:90:47:94:bc:43:2a:56:2d:7d:55:a3:49:e5:17:
d0:d6:42:4c:95:6c:fe:a2:d5:ce:09:b7:bc:8f:52:
8a:e3:52:40:b4:a0:89:c2:ef:22:b2:35:30:f8:41:
e1:67:ee:7b:42:67:b7:5a:d4:b3:6b:aa:19:56:22:
5b:9a:98:30:ad:1d:cb:af:c6:e6:7a:72:d6:15:e8:
83:00:eb:af:28:1b:11:11:92:2b:c4:3b:13:79:06:
01:8d:73:36:07:33:26:39:62:d5:85:e9:dc:d5:dc:
18:a2:62:9f:f0:76:31:ec:93:59:5c:2a:7e:26:e3:
10:13:19:a8:fb:71:a7:f1:a3:51:6d:bd:e9:9a:f2:
28:52:20:cf:60:b0:bb:dd:22:1b:fb:75:e7:d5:4b:
b6:0f:63:51:60:21:ec:88:69:3b:45:85:4b:5f:02:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:50:76:47:50:2C:A7:09:21:34:B0:DB:BE:7C:6F:CC:66:EC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a298bed-f619-3c13-81c0-fb9ebdb5b2f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:e6:1f:b8:dd:6e:60:b5:4f:8f:19:4d:2f:06:31:03:00:86:
7e:d2:81:d8:a4:63:5f:56:9d:e6:3e:16:59:fa:81:4a:87:1d:
25:72:37:49:44:0e:76:df:1d:7c:6d:29:16:67:6c:ab:1e:7f:
4a:63:4c:cc:e7:d6:ba:67:2d:61:78:56:09:34:d1:89:a6:7e:
46:94:91:40:a3:ee:cf:4b:88:45:08:b6:e6:d7:6b:d0:41:1b:
d1:68:4b:a3:da:5d:8f:6d:60:a6:fe:2f:b8:56:a2:ac:7b:e5:
8c:65:ba:92:82:23:85:bd:01:e2:82:90:e8:f7:9d:bc:af:7d:
1b:76:c0:65:b2:7e:d7:66:37:77:40:ab:19:7c:62:ee:f0:64:
11:f5:c6:33:18:f5:0f:d5:e6:70:89:c5:89:19:bb:d6:a3:d5:
e2:d7:63:f8:89:33:ff:ee:6a:97:ab:31:8b:01:09:1f:b3:26:
81:07:96:88:20:3e:66:10:ac:74:c6:00:d9:5a:55:0e:8e:fe:
0b:ea:fd:d7:77:54:7f:97:c3:f2:67:96:a2:1d:0d:85:84:43:
2f:83:52:5a:da:6d:6f:7e:7e:78:a8:da:fd:fb:b0:2c:e7:34:
24:01:d7:13:07:68:f8:05:15:f4:34:40:2e:8a:a8:80:4b:f0:
6f:17:7b:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApxJrdG4VNIEShYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
Yzg5YTIyOGQtMGUzOS00NTBkLWIzZjQtYTQwNjMyMWJhZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbKoE5kJlRqxB7wx1Ao6sMO4xNKh43XEd4wN
tYjjRL1Nd0iCt++LZzmgDMcBnT4AvuP5gVnPniENoYKH+jIpJj/hL/Dzswx7i30D
AIoHZ+7ygRzPQEFr/x13kEeUvEMqVi19VaNJ5RfQ1kJMlWz+otXOCbe8j1KK41JA
tKCJwu8isjUw+EHhZ+57Qme3WtSza6oZViJbmpgwrR3Lr8bmenLWFeiDAOuvKBsR
EZIrxDsTeQYBjXM2BzMmOWLVhenc1dwYomKf8HYx7JNZXCp+JuMQExmo+3Gn8aNR
bb3pmvIoUiDPYLC73SIb+3Xn1Uu2D2NRYCHsiGk7RYVLXwKQbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCA6UHZHUCynCSE0sNu+fG/MZuxsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEyOThiZWQtZjYxOS0z
YzEzLTgxYzAtZmI5ZWJkYjViMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjmH7jdbmC1T48ZTS8GMQMAhn7SgdikY19WneY+Fln6gUqHHSVyN0lE
DnbfHXxtKRZnbKsef0pjTMzn1rpnLWF4Vgk00YmmfkaUkUCj7s9LiEUItubXa9BB
G9FoS6PaXY9tYKb+L7hWoqx75YxlupKCI4W9AeKCkOj3nbyvfRt2wGWyftdmN3dA
qxl8Yu7wZBH1xjMY9Q/V5nCJxYkZu9aj1eLXY/iJM//uaperMYsBCR+zJoEHlogg
PmYQrHTGANlaVQ6O/gvq/dd3VH+Xw/JnlqIdDYWEQy+DUlrabW9+fnio2v37sCzn
NCQB1xMHaPgFFfQ0QC6KqIBL8G8Xe7U=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:07:19 2026 by rpki-client