
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9749006c-3e9f-302b-a477-5f49543e58f8.roa
File: 9749006c-3e9f-302b-a477-5f49543e58f8.roa (raw, json)
Hash identifier: CjXgfKj5OS1pW4QGacoevb0RVpwIi6jpp6rZbeWciY8=
Subject key identifier: 9D:6C:D0:B1:68:9B:D4:F0:C8:B8:65:DD:2A:DE:7B:3C:48:AA:8C:C8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F682824B84636D0DB85FB7700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9749006c-3e9f-302b-a477-5f49543e58f8.roa
Signing time: Tue 06 Oct 2026 01:00:13 +0000
ROA not before: Tue 06 Oct 2026 01:00:13 +0000
ROA not after: Mon 04 Jan 2027 02:00:13 +0000
asID: 396546
IP address blocks: 192.33.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:68:28:24:b8:46:36:d0:db:85:fb:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 6 01:00:13 2026 GMT
Not After : Jan 4 02:00:13 2027 GMT
Subject: CN=c6db8612-ea30-4209-8fa7-294c4df1a9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:fc:66:8e:2a:68:de:2b:fe:b8:4b:69:0d:
ce:ce:ba:a5:ed:31:90:ef:fb:81:de:71:11:74:74:
f3:31:9d:ed:b2:2a:93:a3:41:ae:dc:54:63:56:88:
ac:6b:af:be:6a:dd:ce:e9:19:57:c0:c9:4d:fc:1f:
71:5b:8d:6d:35:ed:42:0c:f5:d6:05:65:62:c0:9c:
7c:d4:c1:f2:1e:ca:07:f3:bf:b0:c2:bd:a2:35:18:
5b:d4:12:04:17:45:29:d1:8d:d3:39:dc:ce:8a:0a:
b5:dd:d8:42:d5:79:9d:87:25:1b:bb:52:71:e7:88:
9d:8e:6a:0a:71:10:9e:16:30:70:39:6c:71:00:c4:
62:be:2d:3d:93:82:c9:29:22:86:e9:a1:e8:81:7c:
27:5c:f7:cc:10:4e:59:d0:dd:4c:0c:2d:e9:58:00:
d5:18:7d:cf:64:32:35:04:65:2c:05:18:9d:5e:4d:
2b:89:4d:49:58:a4:93:7c:63:0f:3f:fd:ea:ef:60:
4c:11:bc:a0:c4:31:d7:29:a4:3a:3c:a6:2e:2c:ac:
13:d3:94:7d:ec:29:48:87:c7:f2:44:78:fa:4f:dd:
cb:f2:a3:1e:74:d9:24:24:39:c6:6e:24:74:4e:3b:
fb:48:77:91:90:c7:ad:1d:d0:28:a4:42:5c:6b:83:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6C:D0:B1:68:9B:D4:F0:C8:B8:65:DD:2A:DE:7B:3C:48:AA:8C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9749006c-3e9f-302b-a477-5f49543e58f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:8c:e1:99:be:8c:fa:a2:c8:5a:41:1d:0d:2a:ac:5c:4f:e5:
f1:b8:2e:42:46:e2:34:40:f0:01:0d:43:e5:3a:0f:7f:b3:e5:
11:f8:25:89:15:a9:52:af:e7:ed:78:b8:78:38:9a:d8:41:eb:
5c:8a:1d:c8:77:df:1c:ab:6d:c5:5f:52:40:cb:c9:35:0f:cd:
a9:86:ab:4d:38:4f:08:20:59:b5:ee:cb:f9:e5:ff:3f:9a:be:
09:96:9e:0f:9d:10:c1:1f:ca:f4:a5:04:1e:fa:d0:28:62:2b:
b4:37:c3:0f:8e:fb:63:38:b1:04:77:29:e1:ce:b6:29:40:e0:
d9:d6:be:fb:9d:b1:ed:bb:d2:82:ba:5d:f4:3d:cf:00:2a:c8:
4f:ff:f4:be:9c:8c:fc:d6:fe:78:95:01:93:0c:fb:0b:2b:32:
09:e8:7b:dd:fa:0b:b4:79:90:c3:7b:eb:a1:2e:54:6c:52:6a:
e9:29:62:e7:58:f6:13:2d:60:ce:1e:15:e7:65:b9:23:54:13:
dd:d2:6a:d9:59:14:39:d0:b9:d5:f6:e5:53:39:29:c4:48:b9:
01:3c:c1:75:5c:a0:c5:68:46:d9:cd:d5:67:e6:0c:ee:49:a7:
6d:12:14:fe:94:d9:6b:15:20:02:97:1d:d3:7e:a3:94:48:dd:
84:c7:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:05:26 2026 by rpki-client