
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa
File: 476ccef9-db67-314e-982a-f04e9cdec3b1.roa (raw, json)
Hash identifier: VK3tLBJZu1t0MUbauDhLasgwIS90/1gZqYbfPCCKffU=
Subject key identifier: 99:26:F4:68:76:F0:A8:D3:20:64:E5:FE:51:41:03:1D:55:AF:FD:B8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F497D8DF9619280E0399D5780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397194
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:8d:f9:61:92:80:e0:39:9d:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ace0f9d4-a297-4322-835b-e2a62b56dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:7e:e3:4c:20:b1:6c:84:c8:50:2b:7d:41:
aa:d5:ca:67:e7:fb:11:bc:3d:4d:51:b2:14:cc:41:
ae:9d:81:26:aa:2e:b0:e6:7b:e8:52:63:22:db:53:
88:b8:af:bb:a4:58:3c:f2:76:45:4d:38:19:70:f1:
b8:f5:0e:89:0e:f5:39:78:b0:3c:11:29:d5:14:6c:
93:0d:f1:cf:29:1b:c4:a7:5e:85:65:1a:c1:94:d3:
c2:79:f0:ec:e8:ac:2c:c9:73:b1:d4:66:e3:38:44:
86:73:02:73:b0:e0:cc:56:ae:7d:a8:df:1b:a4:14:
43:8e:ea:4e:a5:ed:89:a0:0f:63:d9:47:d2:4b:8a:
c0:c4:40:cf:7d:09:2b:93:16:96:c2:24:6e:b6:fc:
d6:39:ee:03:13:3f:ef:78:de:2e:e2:62:bd:a4:40:
f8:3c:ac:06:17:f4:0e:e8:37:64:db:03:a9:20:fd:
4d:20:77:16:89:d3:43:d5:e1:18:92:57:bb:55:76:
6c:3b:9e:d5:89:4e:18:e5:c4:30:74:87:7e:61:21:
bc:a7:c6:12:f3:92:dd:c4:ee:c1:b6:64:96:40:43:
59:05:06:9d:fc:dd:23:14:7b:c7:55:09:8e:6d:38:
b8:ca:c7:80:4c:25:a4:3f:dd:82:0f:82:ba:d2:3a:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:F4:68:76:F0:A8:D3:20:64:E5:FE:51:41:03:1D:55:AF:FD:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/476ccef9-db67-314e-982a-f04e9cdec3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:5a:41:2d:be:0c:37:eb:e5:8b:27:20:02:ce:38:ea:83:1e:
c6:65:73:c5:c8:53:57:f0:22:67:dd:ca:5c:69:1f:fd:37:58:
95:45:03:8f:e7:75:75:79:10:27:cf:07:7c:e7:66:79:8d:47:
ca:44:48:18:f8:d5:20:d8:bf:4c:3f:31:bc:04:cf:19:41:25:
53:14:af:95:68:21:69:60:9e:c3:6f:2c:39:78:d3:33:f3:9a:
c8:7f:52:2a:c9:45:4d:70:ef:0b:ba:78:bb:0e:db:b8:61:5f:
42:9a:81:6d:de:8a:a8:a7:83:c7:2e:ba:d4:4c:15:2f:16:a4:
ce:11:bf:27:55:10:81:2e:4b:4f:1b:52:cc:7c:a2:5a:f4:38:
dd:d0:e3:47:d3:f3:99:eb:93:5d:18:cf:41:64:6e:b9:c8:24:
31:29:e6:be:25:cb:19:af:8c:d4:a8:68:b2:0c:8a:e1:40:37:
0a:41:70:be:e0:18:ba:51:7d:ba:3f:e1:44:3b:55:ad:0a:e2:
a9:4c:5d:2b:b4:66:d1:ca:bb:0e:74:f0:5a:74:59:8c:dc:01:
fe:04:4d:17:2a:a5:73:b9:c7:f2:a3:d2:f6:0c:29:ab:c5:e4:
c0:3f:c5:02:ac:7f:08:88:74:0c:b4:6d:b9:b7:05:c0:f4:05:
21:4f:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:06:41 2026 by rpki-client