
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97aff76c-642b-326d-b7a0-d58a3c2b4155.roa
File: 97aff76c-642b-326d-b7a0-d58a3c2b4155.roa (raw, json)
Hash identifier: QNz3sfewc2olNm0a0dpSOWlt5wxrpf8mQw9919kROmM=
Subject key identifier: E3:60:25:37:75:4A:E3:96:D2:9E:74:3E:84:D9:03:69:E1:7B:CA:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA791D41612B8E64D30C30E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97aff76c-642b-326d-b7a0-d58a3c2b4155.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 25485
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:d4:16:12:b8:e6:4d:30:c3:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=78ea0a63-8035-4dfc-9ab7-669b969d7e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:10:6d:b0:5e:11:84:dd:fb:ef:2f:d9:47:
40:e7:52:2c:f4:87:81:8a:05:e1:a1:d2:55:14:8b:
65:70:91:be:86:da:1c:52:88:dc:35:df:21:9e:34:
96:29:43:9e:bb:cd:81:3f:74:b6:ea:0a:97:61:ed:
63:13:a4:f2:e7:8c:4c:f3:fa:e6:07:fc:88:3d:99:
61:5f:75:1a:79:e9:33:d6:e3:f2:dc:e3:20:4f:7c:
b3:1c:47:7d:ad:55:ea:f6:fb:48:cc:35:4f:fc:bd:
8a:7b:91:23:57:68:02:98:b4:9b:ef:ad:a8:c7:e5:
82:e0:ae:6e:22:e5:91:2f:09:31:22:0f:7b:13:37:
6f:87:4d:82:68:54:b7:ce:26:04:d0:9c:11:6b:df:
85:86:07:c8:c9:17:d1:90:4d:09:29:90:a5:b8:f7:
c2:24:4f:12:ad:d4:12:1a:e9:76:b7:82:24:2d:b4:
d0:b7:02:81:57:af:3c:29:50:77:92:90:73:22:e4:
87:dc:ab:ed:dc:86:70:30:c7:67:c5:aa:f2:88:2e:
0f:db:cb:b5:07:19:cc:ab:03:29:f2:c5:37:36:61:
b8:9d:ef:ee:3f:a2:80:72:57:09:18:2d:3e:ff:11:
ec:6a:1e:f2:03:0f:ea:a7:24:78:b1:9b:0d:c1:f4:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:25:37:75:4A:E3:96:D2:9E:74:3E:84:D9:03:69:E1:7B:CA:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97aff76c-642b-326d-b7a0-d58a3c2b4155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:de:0f:fa:6e:bb:4a:9e:2b:8c:50:b4:cb:6b:c1:fc:dd:5c:
d2:09:76:f1:ca:73:af:25:a9:ec:47:76:1c:39:79:20:a9:39:
e8:c4:ed:cf:d1:ea:10:c7:ac:2d:d7:8a:f8:f3:90:18:5f:1c:
05:00:7b:f6:cd:21:f2:f3:73:b8:3c:ce:1e:61:42:c2:1f:a5:
cd:e7:0d:44:d5:68:92:28:2b:77:55:06:4c:3f:b7:40:b9:d3:
70:c3:93:b6:dd:d6:18:0b:ef:69:22:4b:b2:b8:4b:8a:a0:a2:
84:05:85:9c:1d:42:04:d1:37:c7:3f:a0:1e:2b:e3:fe:82:1c:
be:f8:43:ab:13:47:5f:df:8d:ac:4a:48:e7:d0:cf:82:15:fd:
e1:b1:1d:0d:96:26:53:5d:20:ba:d0:57:a2:3e:54:c6:90:a0:
8d:5b:ab:c8:97:fc:af:95:db:6c:7a:46:c0:2c:3f:84:23:20:
24:36:36:a0:ee:cd:17:2e:45:17:65:15:7b:50:75:fc:52:51:
24:d4:2c:da:39:0c:b1:4b:87:fe:bb:f0:bc:bd:b1:93:e1:25:
e4:72:7f:95:17:0f:92:c1:d3:6f:5d:5e:5f:18:60:ea:f3:9a:
96:c9:ca:2c:39:6c:d9:c9:18:92:63:d1:54:69:18:53:d6:e0:
a3:96:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:28:13 2026 by rpki-client