
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9204fced-874b-3b64-b6b6-3cdfca43d19c.roa
File: 9204fced-874b-3b64-b6b6-3cdfca43d19c.roa (raw, json)
Hash identifier: hwkLtFtmp08xSvGZsX7Yem84cmSPPwY9OA6UB8He8HI=
Subject key identifier: 55:92:87:C3:5C:AE:86:09:A3:13:C1:EE:35:4F:05:21:C6:74:9D:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D4C1B182424FCCE5ECA790580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9204fced-874b-3b64-b6b6-3cdfca43d19c.roa
Signing time: Thu 26 Mar 2026 14:17:36 +0000
ROA not before: Thu 26 Mar 2026 14:17:36 +0000
ROA not after: Wed 24 Jun 2026 14:17:36 +0000
asID: 396605
IP address blocks: 192.41.162.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 01 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4c:1b:18:24:24:fc:ce:5e:ca:79:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 26 14:17:36 2026 GMT
Not After : Jun 24 14:17:36 2026 GMT
Subject: CN=c8ed7287-0765-4005-896e-6ea21de31df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:e4:70:46:58:27:81:26:bd:85:67:ae:f6:
1e:56:bb:12:30:28:de:86:c2:dd:de:1c:bc:b6:33:
33:f2:37:6d:6a:a0:ed:bd:7b:47:dc:76:d8:d3:2e:
35:db:13:26:8e:db:d6:b9:5d:5b:7a:e3:b6:e5:8a:
e7:2e:75:77:35:7d:4c:bf:1b:c8:77:bf:25:d8:ba:
01:14:76:89:c0:f9:ab:d6:14:74:ba:0f:bb:de:88:
18:fe:a5:85:5d:6b:67:f0:5b:da:b0:29:08:77:05:
62:f8:37:27:05:f4:26:e3:fa:1e:49:f0:cd:79:5c:
67:10:d7:b3:19:28:6d:bd:c9:62:fc:dd:6c:b0:41:
31:f6:2b:ff:81:65:69:75:bb:22:1a:61:2c:ae:50:
76:27:66:ae:73:33:0c:3e:8f:82:c8:3e:9a:54:53:
56:c6:fd:c5:8c:7c:a3:48:b7:02:f1:ad:0e:43:c1:
61:36:ba:bc:28:1c:52:dd:5b:92:4f:17:7a:dd:53:
42:20:a9:d8:2b:13:79:5e:a4:cb:e8:8a:f7:e7:44:
98:40:20:13:30:ae:e1:e2:8e:d8:37:07:e9:13:a0:
bc:c9:50:c4:61:5a:b7:19:a9:86:d4:24:1e:6c:c0:
7a:00:9f:e9:ab:1f:4e:4d:4b:77:5c:2e:6b:13:c1:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:87:C3:5C:AE:86:09:A3:13:C1:EE:35:4F:05:21:C6:74:9D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9204fced-874b-3b64-b6b6-3cdfca43d19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.162.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:67:3d:e7:14:f2:3c:03:c0:6f:01:00:59:3e:42:46:30:0c:
16:77:ce:d4:05:61:86:e6:f2:ff:31:f3:53:fb:b5:db:2b:94:
a8:e3:f5:70:1d:d9:5b:19:30:c2:fb:9b:11:5b:87:c1:9e:6e:
85:92:70:0f:c9:1b:50:a2:4b:0e:90:bd:da:18:73:26:1f:e7:
6f:13:49:4b:cb:87:38:5b:75:80:70:47:5a:57:7c:2e:1b:0f:
91:a9:e6:86:92:a2:21:c2:88:3d:c9:6b:fe:d7:c8:7a:84:b0:
c1:3b:c6:88:78:c2:52:3c:45:08:38:69:76:b1:55:08:d0:8d:
b3:a6:2d:07:34:db:55:fc:0c:09:4b:ac:bb:fd:48:00:e2:b3:
3a:4a:e3:b0:32:bc:6c:22:ff:fc:86:b6:3e:f6:8b:48:8d:bb:
27:bc:19:3a:40:39:dd:1e:ef:f5:9e:dd:58:0d:d7:29:09:74:
ef:78:0f:65:96:70:64:24:a1:55:cc:8b:14:0f:a5:68:e0:ea:
02:33:6a:92:85:dc:eb:fb:42:47:e0:86:82:02:13:af:be:40:
36:e6:ce:eb:ba:3c:b2:70:3a:62:24:ea:40:29:a6:8e:2e:54:
8f:08:f2:b4:0c:f4:00:5f:b3:d0:95:1f:6c:7a:54:dd:f4:d2:
ee:21:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:36:19 2026 by rpki-client