
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdeac5d-582b-3eaf-bade-16c99399d0d9.roa
File: 3cdeac5d-582b-3eaf-bade-16c99399d0d9.roa (raw, json)
Hash identifier: AB48aD9n+zrOrgax/bXToxJJ+SZWK/QkId2YKkJCs4E=
Subject key identifier: AA:18:1B:20:B5:60:94:59:C1:3C:FF:A7:2E:94:B3:64:0E:94:8A:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549D4A02648A3C8D074D01C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdeac5d-582b-3eaf-bade-16c99399d0d9.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 396606
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:4a:02:64:8a:3c:8d:07:4d:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=f6368da2-6e64-4a3f-bd05-5533e76ca1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:69:98:33:ab:3f:e0:63:c9:c1:8f:2b:78:
ec:cc:13:47:8a:28:06:5b:a6:28:2f:fb:bc:a3:00:
8c:fc:24:56:b9:e4:4d:3f:6e:87:eb:4b:97:57:7f:
11:36:2b:d8:03:58:e2:c2:2a:d9:66:c7:14:02:7c:
7b:d5:8d:30:c5:87:a7:68:89:2a:66:18:ec:d9:8b:
f1:a7:c9:6e:7e:81:95:41:9f:01:2f:07:bc:40:53:
5c:15:69:7c:3e:ed:e1:d5:ae:11:43:48:3b:15:d0:
98:97:71:fc:5a:02:33:95:60:91:9f:71:01:a4:b6:
3f:49:ff:9b:9d:f2:c8:27:71:6c:da:35:82:86:78:
cd:bf:fe:d3:67:c6:f7:b2:6d:63:30:df:a7:50:eb:
39:df:13:31:29:54:fa:89:a4:b0:02:5f:f0:d5:93:
87:23:3d:12:82:5f:0f:4e:2b:fd:92:7d:ba:ef:63:
67:e5:94:fa:9b:4c:44:cb:fc:b5:9d:20:97:b4:9a:
41:79:0c:88:df:22:9e:3f:7d:25:bf:98:ff:b5:64:
1b:f0:f8:3f:6c:26:49:0e:9e:22:c6:73:56:4a:0f:
5f:b1:24:1b:d8:1e:2f:73:02:6c:be:93:53:d6:28:
b8:37:75:21:52:9c:17:81:88:b3:04:40:31:63:db:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:1B:20:B5:60:94:59:C1:3C:FF:A7:2E:94:B3:64:0E:94:8A:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cdeac5d-582b-3eaf-bade-16c99399d0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:2b:2c:2d:14:3c:a9:f7:c5:5d:16:f0:a6:75:8e:fe:ca:3d:
13:92:b9:cd:3b:81:9d:e2:ac:3e:7d:c9:fb:f7:e2:c4:82:15:
cb:08:f9:6e:0a:38:35:c3:37:61:1d:66:59:20:3f:f5:d7:f5:
76:e9:68:15:3c:52:7d:a8:0c:5b:95:54:97:d6:99:91:03:a1:
82:d7:32:17:80:95:ba:8c:4e:21:bb:9c:d3:94:83:29:cd:e5:
6e:71:02:5f:01:3c:ab:ea:cc:73:77:37:f2:e0:fb:ac:c0:bf:
52:39:ab:e7:4a:6b:9e:9d:44:88:84:85:35:4a:e2:66:73:8a:
30:2f:cc:fc:04:37:14:a2:dc:bc:37:15:fa:1a:28:e5:9a:b3:
fe:1a:dc:3c:9d:dc:db:65:f8:b2:49:73:80:e7:28:f4:70:af:
d6:12:8b:20:0e:33:0b:2d:38:b0:0f:4c:8a:5c:de:08:ae:ed:
38:67:51:d7:72:21:f4:0d:5a:4d:d7:9e:10:03:e7:32:4d:d4:
60:e1:c4:27:1f:b8:b1:e6:e1:2e:2c:18:7f:8f:74:2f:b9:87:
78:48:42:0e:9c:43:05:b0:7f:1d:08:bc:d2:0d:d7:7a:1c:02:
44:57:70:44:b9:cd:b7:e8:c4:42:c6:09:a7:c4:9d:92:dc:42:
4e:e5:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:34:33 2026 by rpki-client