
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a646c40-26be-313a-aa95-97648987f73d.roa
File: 9a646c40-26be-313a-aa95-97648987f73d.roa (raw, json)
Hash identifier: Sc5pM1Fn7rY2KgUxg4xfxrZEeN/SgIXrR/h23XHQwCc=
Subject key identifier: E9:90:78:72:B4:9A:AE:98:31:C3:9D:EB:63:28:BF:71:C2:A4:0D:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC63C6728EB7970C543A94680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a646c40-26be-313a-aa95-97648987f73d.roa
Signing time: Sun 09 Aug 2026 01:00:12 +0000
ROA not before: Sun 09 Aug 2026 01:00:12 +0000
ROA not after: Sat 07 Nov 2026 02:00:12 +0000
asID: 396564
IP address blocks: 192.33.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c6:3c:67:28:eb:79:70:c5:43:a9:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 9 01:00:12 2026 GMT
Not After : Nov 7 02:00:12 2026 GMT
Subject: CN=ba4db7ec-1eeb-4fa1-8b39-39a53521f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:76:e7:fc:42:79:a1:8d:79:8a:65:24:f3:
3f:6d:67:e5:4f:7b:a3:63:13:22:e4:7d:79:3d:8c:
71:2e:1f:5a:ec:a7:99:70:3a:9b:e2:b0:ad:c4:cf:
e9:8f:9d:09:41:3f:80:bb:30:f9:14:69:6f:b4:bd:
83:b0:33:22:cd:70:af:fd:71:f3:32:69:ac:97:ac:
40:ef:66:1c:bb:88:ad:9d:01:53:2c:86:d9:dc:ca:
08:48:83:68:1e:f9:ef:e1:0e:b7:15:04:d7:e0:24:
8f:84:28:f9:a0:c7:85:18:93:b3:f7:2d:8b:8f:1e:
66:d5:65:9c:74:2d:aa:4a:51:5e:8d:ce:ed:f0:36:
89:19:37:6e:40:87:12:4d:60:ab:a6:67:a9:b2:b1:
93:9e:c0:de:8f:e6:b5:be:7c:40:74:77:6a:db:c5:
71:8b:67:6b:f8:f4:fe:9e:94:a8:5d:bf:5d:60:f5:
eb:ff:94:f9:f8:9b:8a:ef:5d:34:7c:d3:cd:a3:cf:
41:b7:a3:2e:7c:d2:23:6a:f9:37:76:23:97:d5:16:
5b:d9:45:d9:c9:07:a3:0a:ef:b3:07:69:49:74:d7:
a8:f2:8f:81:9d:1b:79:cf:8d:c1:66:67:0c:8d:9f:
59:ea:7d:9b:86:a7:93:6c:89:c4:ae:e2:39:e8:d3:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:90:78:72:B4:9A:AE:98:31:C3:9D:EB:63:28:BF:71:C2:A4:0D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a646c40-26be-313a-aa95-97648987f73d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:80:09:6a:38:56:b1:65:80:51:50:0b:2b:12:4b:be:ee:b7:
fe:1f:05:d1:47:49:d5:b3:7c:48:5c:e2:4a:8b:35:44:66:04:
bc:ec:46:32:14:26:b9:ab:d4:e2:3e:c1:61:7c:e2:e4:76:3b:
35:0f:94:81:65:f5:77:33:9c:11:e9:43:c2:d5:9b:cc:21:3f:
56:70:2c:eb:4d:de:a0:5b:19:f2:19:84:82:b4:13:01:05:b9:
4c:fc:0e:b6:d0:ea:e3:58:5a:97:d3:16:6c:d7:af:75:72:a8:
71:b2:83:31:49:31:27:9a:97:b4:35:e3:3a:91:78:a5:ae:ce:
f2:1a:8d:13:1b:77:9b:66:ed:3f:24:41:4f:34:68:42:9d:e4:
f8:a8:70:2c:ec:de:a0:f8:56:8c:21:6b:dc:17:45:f5:f2:fb:
3b:60:ff:9e:ca:0f:1f:8c:8e:a1:7c:71:0f:c4:76:bc:69:86:
ac:9d:7d:89:78:f6:9b:cd:6d:ca:d1:f1:63:66:fc:ea:73:bc:
40:73:7d:ae:2a:dd:6b:8c:e9:52:48:db:8a:a9:9f:2f:b3:e3:
b5:03:c7:6a:3d:82:78:27:13:2e:39:19:a6:5e:40:83:6c:0f:
0f:de:c9:2d:28:d5:d1:dd:80:08:d1:6d:1b:5d:94:76:f6:85:
91:cd:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:34:51 2026 by rpki-client