
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa
File: 8caf640c-3e1d-3441-a59c-1d937eb66080.roa (raw, json)
Hash identifier: T/jCDrjxMo+cIIamR2+O39LpQSnn2YuAI1OVMiw9d6Y=
Subject key identifier: C7:11:47:22:19:5F:1B:87:C1:7C:7A:08:EC:EE:A7:5C:13:73:19:06
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EAD1C693AA854471DEF18F240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 396572
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:69:3a:a8:54:47:1d:ef:18:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=553ab0b3-723c-47e2-b65e-4d824462bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:b9:0e:5e:e9:0b:ce:45:bb:f0:83:0d:05:
7b:b3:80:ae:c0:ae:e6:bb:27:c7:26:b3:e2:14:04:
e0:19:38:9c:4b:e9:c8:de:47:f2:99:c4:f6:ca:7a:
7e:77:9c:8c:45:d6:89:78:0b:d0:d2:03:65:ad:00:
08:41:b2:05:c8:e8:7e:17:cc:19:a5:8c:d4:78:40:
d3:0d:62:2d:13:7b:81:d7:07:ae:a1:ec:21:bc:e6:
d3:5c:cb:9f:6a:08:84:2a:5b:c1:25:65:75:f0:61:
97:6f:95:3c:97:8c:f6:67:e6:c3:a0:6a:4d:54:cb:
dd:37:7b:11:cc:50:42:e6:1d:d9:24:09:64:e3:9c:
1e:a0:16:81:1c:98:3a:02:19:b2:31:e6:ca:ca:18:
c9:37:fb:bb:0c:36:02:0f:67:ad:7a:0f:b7:98:79:
96:ce:fc:fd:c0:e2:4b:2c:b9:90:44:4e:8e:9e:97:
4f:5a:5b:9c:c9:b7:e2:a2:81:35:2c:47:4e:5b:e5:
75:db:60:17:ab:e0:15:ed:c0:9d:6e:60:31:49:17:
96:6d:3b:e0:30:d5:2d:aa:e6:dd:f9:96:46:ea:23:
a8:83:9c:0a:d4:56:d3:96:b0:0d:aa:cb:42:b3:78:
8c:fb:95:ee:12:b1:86:a2:ec:03:f7:fa:9f:88:74:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:47:22:19:5F:1B:87:C1:7C:7A:08:EC:EE:A7:5C:13:73:19:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ea:d0:a0:71:82:57:68:74:f4:38:2b:6e:6e:80:5d:22:fa:
bd:4f:5c:b2:f4:7f:83:2a:b7:1d:9c:8c:d2:94:5f:53:0c:11:
a4:ac:32:d6:80:0f:b7:88:fe:7d:71:07:8c:be:2f:7f:e4:47:
a2:32:c7:34:45:e8:74:f5:d3:91:e3:5f:b5:7b:9b:0b:de:f8:
65:42:6a:2a:ed:08:a1:e2:e2:d0:c5:bc:ed:ab:02:4a:fb:76:
fd:e0:00:4c:4d:6d:60:8c:e8:9c:66:53:59:7b:ec:b2:04:49:
a3:fe:f8:26:f3:4c:18:23:1a:b1:c1:1d:26:66:d3:f9:eb:30:
c3:43:05:5c:cf:a5:08:2f:cb:f3:53:af:77:be:a8:de:e7:69:
14:b4:c1:0c:3f:fd:3b:0a:d0:4b:ec:63:a7:eb:8b:3d:bf:fa:
e3:dd:88:84:92:a6:17:53:41:fa:46:bc:b5:3b:b0:02:01:f1:
28:02:6f:82:c7:9c:3a:f6:4a:e7:66:fc:f0:6c:4b:53:e6:f2:
11:1d:bf:fb:7e:97:0b:d6:40:d7:b7:a8:39:56:d9:fe:e4:8c:
48:dd:bb:2c:b3:36:a7:52:11:f4:49:9e:9f:43:ac:35:a4:a9:
b6:0e:1f:e0:2c:40:91:cf:44:86:96:6d:f6:a4:5c:35:02:bf:
c0:94:f1:ef
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6tHGk6qFRHHe8Y8kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
NTUzYWIwYjMtNzIzYy00N2UyLWI2NWUtNGQ4MjQ0NjJiYjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTu5Dl7pC85Fu/CDDQV7s4CuwK7muyfHJrPi
FATgGTicS+nI3kfymcT2ynp+d5yMRdaJeAvQ0gNlrQAIQbIFyOh+F8wZpYzUeEDT
DWItE3uB1weuoewhvObTXMufagiEKlvBJWV18GGXb5U8l4z2Z+bDoGpNVMvdN3sR
zFBC5h3ZJAlk45weoBaBHJg6AhmyMebKyhjJN/u7DDYCD2eteg+3mHmWzvz9wOJL
LLmQRE6OnpdPWlucybfiooE1LEdOW+V122AXq+AV7cCdbmAxSReWbTvgMNUtqubd
+ZZG6iOog5wK1FbTlrANqstCs3iM+5XuErGGouwD9/qfiHTnlwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMcRRyIZXxuHwXx6COzup1wTcxkGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGNhZjY0MGMtM2UxZC0z
NDQxLWE1OWMtMWQ5MzdlYjY2MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBb6tCgcYJXaHT0OCtuboBdIvq9T1yy9H+DKrcdnIzSlF9TDBGkrDLW
gA+3iP59cQeMvi9/5EeiMsc0Reh09dOR41+1e5sL3vhlQmoq7Qih4uLQxbztqwJK
+3b94ABMTW1gjOicZlNZe+yyBEmj/vgm80wYIxqxwR0mZtP56zDDQwVcz6UIL8vz
U693vqje52kUtMEMP/07CtBL7GOn64s9v/rj3YiEkqYXU0H6Rry1O7ACAfEoAm+C
x5w69krnZvzwbEtT5vIRHb/7fpcL1kDXt6g5Vtn+5IxI3bssszanUhH0SZ6fQ6w1
pKm2Dh/gLECRz0SGlm32pFw1Ar/AlPHv
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:28:59 2026 by rpki-client