
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bfbede-1b15-39ac-b1b7-736d07697eb9.roa
File: 60bfbede-1b15-39ac-b1b7-736d07697eb9.roa (raw, json)
Hash identifier: rsz/Z2yzxUSm+foTbftvfHIeA35gF/RtdlYi10OKS2Y=
Subject key identifier: DD:46:BC:7E:1E:02:35:A3:7A:1B:4D:24:D7:A9:F7:9A:08:45:36:18
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F6828129FFF5266E3953B6780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bfbede-1b15-39ac-b1b7-736d07697eb9.roa
Signing time: Tue 06 Oct 2026 01:00:13 +0000
ROA not before: Tue 06 Oct 2026 01:00:13 +0000
ROA not after: Mon 04 Jan 2027 02:00:13 +0000
asID: 396626
IP address blocks: 192.33.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:68:28:12:9f:ff:52:66:e3:95:3b:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 6 01:00:13 2026 GMT
Not After : Jan 4 02:00:13 2027 GMT
Subject: CN=65a8617d-6777-42d2-b6dc-d6e54dfa7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:83:91:78:eb:84:5f:fe:7c:88:2e:cb:67:
06:86:95:fb:d6:bc:fb:33:95:9c:5e:d9:37:fd:0f:
a9:aa:64:3f:b0:a7:0f:ba:9a:96:c7:6f:b5:15:e0:
61:71:c6:c5:bc:1a:2f:8f:de:c1:86:f1:c2:d6:61:
b8:ba:9b:d1:46:91:2c:5a:63:c2:80:46:1e:49:ec:
30:b2:a6:b6:e6:ba:7f:b1:87:b6:47:5a:54:15:46:
21:e9:d8:bf:ad:44:74:d1:98:88:44:5d:71:67:57:
2d:6c:a8:a5:df:74:31:45:55:f7:34:1c:d4:47:6a:
b3:cb:0b:39:44:21:5c:68:f8:b6:e8:7d:80:18:f0:
6d:d4:2b:51:ba:4d:d7:26:41:e5:e9:89:92:b4:e6:
82:ec:e8:7c:86:8a:cc:11:01:f0:09:f4:db:b0:60:
28:23:41:a9:4e:b5:64:31:0a:f2:30:de:0c:81:74:
93:ef:ce:fc:cc:52:90:e5:74:f1:2a:d1:2c:0c:58:
0f:ed:ec:ed:96:f0:87:ae:05:c9:93:48:e2:d6:58:
b5:97:da:61:c7:3d:54:7a:94:2a:90:66:b0:fd:45:
b9:5d:50:dc:8d:fc:e1:2f:d2:0a:01:cd:a1:e2:1d:
d5:b0:03:58:fd:80:cd:ff:fe:b9:aa:8f:09:b3:5a:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:BC:7E:1E:02:35:A3:7A:1B:4D:24:D7:A9:F7:9A:08:45:36:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60bfbede-1b15-39ac-b1b7-736d07697eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:7a:04:14:e4:ec:a1:71:70:cd:79:ec:f6:dc:a4:54:57:f4:
5c:57:53:94:d2:4c:40:30:9c:03:d8:ba:74:61:dc:1c:95:ad:
5f:56:aa:7f:64:7f:a1:c0:15:38:56:6e:35:6a:dd:9d:84:c6:
e9:1d:ff:9f:b8:2c:a6:8a:ff:c3:dc:1e:9f:e8:e1:b8:82:38:
42:e6:56:d8:2b:17:5d:d6:87:ab:a2:ba:28:6c:fb:c7:ae:02:
9f:80:e6:62:2e:dd:f0:60:52:ce:7a:89:67:a1:7a:78:76:d5:
04:96:8d:d3:84:87:ca:46:10:94:fd:20:48:5e:4a:64:17:26:
6b:fb:0e:95:fd:cf:f9:8e:ad:ab:fd:d6:73:f3:2e:69:b8:c2:
d0:02:14:b8:16:af:7d:c5:9b:9c:93:95:aa:27:92:85:32:c3:
8f:85:86:25:42:6f:1c:09:45:0e:c4:5f:cc:99:5f:09:c4:ae:
b1:72:b7:24:d8:be:80:19:db:43:9d:69:23:a0:4d:25:3a:0c:
89:05:5a:99:a1:f7:a6:8e:20:3f:e7:a6:c0:22:29:91:28:6f:
fe:bd:81:39:5f:3c:47:62:07:23:a2:47:3e:22:fb:95:db:1a:
98:c5:c3:2f:69:17:9e:b9:7b:b0:bd:a6:f4:06:dc:65:f5:69:
0d:7b:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:55:58 2026 by rpki-client