
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dba28fb-eb83-314b-b703-b0bd027e5056.roa
File: 2dba28fb-eb83-314b-b703-b0bd027e5056.roa (raw, json)
Hash identifier: VcQacTGDz1r7jOU7juB5BkAU6/7Ytcv55eeSf6PfL7Q=
Subject key identifier: D7:6B:C4:F4:FD:A4:8B:E1:56:A7:37:0E:E4:44:FB:67:6F:AD:CD:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549D459EA6DBB751445E6300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dba28fb-eb83-314b-b703-b0bd027e5056.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 396581
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:45:9e:a6:db:b7:51:44:5e:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=576eae51-c01a-4744-97fb-9f0ec21fdb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:05:a3:81:7b:a8:15:50:52:f9:b2:57:09:
38:09:b3:8a:76:f6:f9:ee:46:bb:ad:e6:0c:36:51:
4a:bb:e0:aa:12:38:6e:0d:54:47:47:94:8e:57:2f:
7c:de:78:de:56:5e:15:00:7d:80:08:a3:9c:eb:e5:
46:52:f8:3f:48:e3:96:88:bd:d8:05:ff:4e:11:b8:
36:45:e5:f1:e3:91:6a:bf:eb:00:2a:01:46:6d:ab:
4b:a7:c4:a0:f9:6e:fc:43:74:47:af:0c:d2:ad:ea:
96:28:48:3f:07:41:22:9a:92:5e:ec:fb:ba:9a:85:
84:80:87:14:e1:37:5c:31:76:78:0e:83:c7:e3:3c:
b5:5d:22:b7:13:2e:98:3b:35:95:c6:8a:4b:81:3f:
0e:81:65:cf:2d:49:b0:fe:c0:11:e6:4c:ea:4d:24:
cd:49:06:9d:26:fa:d8:2a:56:45:4e:0f:7a:b8:1f:
35:22:43:00:9d:77:30:a0:d1:b0:94:f9:cd:92:27:
0a:fe:5c:6c:81:8b:a4:e4:2e:09:c3:fe:24:64:8c:
e8:cd:db:77:c6:20:98:47:7a:46:5f:61:f2:ac:7a:
c3:37:ca:59:58:c6:40:52:57:48:3a:21:a9:d5:6a:
56:9f:af:f7:81:a0:3d:09:e5:37:72:5a:97:20:6f:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:C4:F4:FD:A4:8B:E1:56:A7:37:0E:E4:44:FB:67:6F:AD:CD:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dba28fb-eb83-314b-b703-b0bd027e5056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ad:d5:37:06:fe:d2:8d:ba:73:d1:68:8a:85:90:aa:b8:ef:
50:d7:8a:20:5a:93:e9:1b:1f:6e:c2:f4:14:88:1a:f9:00:34:
b6:c1:d9:d6:58:e5:a3:85:ed:8f:45:7a:70:ba:62:f6:5d:0f:
38:cc:73:4f:c7:d7:c5:e7:bd:a6:1e:85:63:bf:00:c1:8a:18:
4a:b3:84:89:1d:95:5e:20:6c:ba:55:49:e8:8c:0d:bd:25:bc:
93:c3:c7:4b:cf:d7:36:77:ce:0a:83:e2:38:f5:0a:0a:1d:41:
0f:ac:f0:dc:d3:0c:a5:a9:a8:83:1e:54:d1:87:1b:b6:a9:48:
89:36:2f:72:89:2b:d2:98:21:b4:d6:33:7d:c6:c0:ed:3b:c3:
dd:2b:93:f5:8e:0c:97:34:1b:12:f8:91:ce:2c:b5:d3:53:4a:
59:d2:14:95:d9:79:4d:09:d9:88:cd:47:69:8e:e4:fc:fa:23:
9d:c4:5e:a2:10:ca:38:09:1f:c7:75:92:52:2c:d0:f4:4d:20:
ed:78:82:24:ca:55:ad:ba:c1:f7:10:60:db:a7:23:c6:56:70:
3f:e2:ae:f2:5c:67:20:75:a0:72:fd:4e:6c:6a:92:e4:e4:05:
c6:96:08:a2:95:2c:a8:3a:e9:99:fc:1b:c3:0c:71:94:11:6b:
e6:18:b8:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUWeptu3UUReYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NTc2ZWFlNTEtYzAxYS00NzQ0LTk3ZmItOWYwZWMyMWZkYjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9UFo4F7qBVQUvmyVwk4CbOKdvb57ka7reYM
NlFKu+CqEjhuDVRHR5SOVy983njeVl4VAH2ACKOc6+VGUvg/SOOWiL3YBf9OEbg2
ReXx45Fqv+sAKgFGbatLp8Sg+W78Q3RHrwzSreqWKEg/B0EimpJe7Pu6moWEgIcU
4TdcMXZ4DoPH4zy1XSK3Ey6YOzWVxopLgT8OgWXPLUmw/sAR5kzqTSTNSQadJvrY
KlZFTg96uB81IkMAnXcwoNGwlPnNkicK/lxsgYuk5C4Jw/4kZIzozdt3xiCYR3pG
X2HyrHrDN8pZWMZAUldIOiGp1WpWn6/3gaA9CeU3clqXIG+KUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdrxPT9pIvhVqc3DuRE+2dvrc38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmRiYTI4ZmItZWI4My0z
MTRiLWI3MDMtYjBiZDAyN2U1MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyt1TcG/tKNunPRaIqFkKq471DXiiBak+kbH27C9BSIGvkANLbB2dZY
5aOF7Y9FenC6YvZdDzjMc0/H18XnvaYehWO/AMGKGEqzhIkdlV4gbLpVSeiMDb0l
vJPDx0vP1zZ3zgqD4jj1CgodQQ+s8NzTDKWpqIMeVNGHG7apSIk2L3KJK9KYIbTW
M33GwO07w90rk/WODJc0GxL4kc4stdNTSlnSFJXZeU0J2YjNR2mO5Pz6I53EXqIQ
yjgJH8d1klIs0PRNIO14giTKVa26wfcQYNunI8ZWcD/irvJcZyB1oHL9TmxqkuTk
BcaWCKKVLKg66Zn8G8MMcZQRa+YYuCc=
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:05:26 2026 by rpki-client