
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa
File: 355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa (raw, json)
Hash identifier: /NFAfOURC2af9ekXV1bkA9v295/jVCMJxI/+drURUF8=
Subject key identifier: 70:A5:54:61:6B:01:F1:3C:79:13:6E:FF:C6:50:A6:64:58:EA:4F:6F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A75E565670B3B258E6E700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 396630
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:5e:56:56:70:b3:b2:58:e6:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=d037610b-774c-47d0-9546-da5a9e109cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:c4:bc:85:7d:84:a5:e2:35:d2:fb:49:02:
88:75:2c:3d:75:ff:e1:92:3e:78:63:63:c4:0f:3d:
7f:23:77:0f:91:fb:95:50:67:fc:18:57:2d:b5:3a:
49:7f:1d:df:7a:d3:97:4d:70:42:6f:6e:8d:e3:30:
21:88:a8:cb:6f:7b:6e:b4:19:28:c6:61:ec:47:08:
37:aa:ff:e1:78:67:97:b6:04:7e:6a:b8:4d:f8:01:
be:6b:73:40:45:cb:7e:f2:d6:5b:00:bf:cc:bb:13:
c7:ba:52:85:e2:81:18:49:5b:d5:7e:9d:00:97:cc:
d8:65:e3:7b:fb:bb:b1:bb:3b:e2:d0:8a:9d:c7:0c:
e0:a0:48:5d:e9:39:d9:84:98:6f:9d:08:91:83:07:
64:0f:a4:35:81:f5:21:6d:ab:9d:25:fb:5e:a7:b1:
ff:40:c3:d2:37:ec:b6:a0:97:53:ad:6f:9c:05:86:
8e:8e:e3:0a:5a:0a:46:99:77:61:20:36:d4:4a:f4:
98:25:f0:03:2f:1d:c4:0a:0a:a9:a2:03:39:45:e2:
15:f3:b1:a1:79:5b:79:c7:a5:ae:cb:84:16:6f:a5:
93:d5:18:cf:b6:c2:fc:9b:7d:3e:d6:dd:ae:bb:02:
fc:0d:32:66:7f:7b:bc:a2:e5:c6:bf:61:14:57:87:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A5:54:61:6B:01:F1:3C:79:13:6E:FF:C6:50:A6:64:58:EA:4F:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:02:d7:1b:32:ab:3f:98:72:05:33:37:8b:1e:5a:2b:9f:a3:
c4:fa:b7:76:6d:3f:c9:24:72:1a:5f:4c:8d:1a:1c:6f:62:42:
0b:9e:9d:5a:d0:46:84:4b:3a:af:af:9e:89:0a:27:7e:f5:b0:
da:d6:f6:3d:5e:04:69:d9:1d:a6:e5:8c:83:f4:21:34:af:99:
91:61:b5:09:b7:65:7c:d1:c3:9c:6e:75:59:16:61:76:77:8b:
d1:b4:f7:a0:7d:e8:85:19:da:3f:3e:55:ef:6e:59:53:a5:ae:
0a:ef:ed:c3:c4:44:e7:69:e9:c1:aa:39:72:36:1c:41:c9:cf:
53:3c:78:3d:63:5a:7a:3f:71:72:dc:ea:f2:45:7a:6e:0a:b9:
3b:11:48:7a:79:d9:bd:37:cc:72:84:10:c4:ef:fa:a8:46:7a:
06:a0:6c:4a:27:a2:23:9e:f3:dc:b9:ef:af:6a:c1:42:fb:af:
d6:68:7a:61:0a:85:b7:00:ac:83:fa:9d:31:c8:e6:e4:4c:8d:
e4:b8:55:af:dd:3c:68:83:a2:17:61:aa:4b:5c:26:1d:22:4b:
1f:99:b2:5e:52:4e:34:fc:2e:00:dc:6c:29:45:f6:7c:fc:b6:
1e:6f:70:d7:df:43:7f:99:62:6b:5c:29:40:53:bd:ec:d0:3c:
99:7e:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:50:43 2026 by rpki-client