
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8b25650-789d-3e36-9d5f-ff5c18eae6c9.roa
File: a8b25650-789d-3e36-9d5f-ff5c18eae6c9.roa (raw, json)
Hash identifier: ASAvfyz+OjZcgT3ORoKRx/C/DykUvWpYk/mneqfeMhw=
Subject key identifier: 8C:27:C2:52:F9:68:E0:94:48:EA:C1:A6:D0:09:DE:0D:26:C8:BD:DC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F549D9FBC431B8A3458634830
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8b25650-789d-3e36-9d5f-ff5c18eae6c9.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 40647
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:9f:bc:43:1b:8a:34:58:63:48:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=a749d0eb-f484-4010-a839-4047aaab5647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:92:dd:2d:8b:d0:ac:d3:f5:7e:a3:e7:7c:
bd:73:66:a4:e1:10:fe:04:f1:df:a3:57:21:38:6e:
69:15:93:a1:aa:04:99:53:cd:3b:8a:90:5d:48:31:
88:9e:46:df:56:07:f5:a3:15:59:ee:c2:e6:bd:ae:
f4:ff:27:4e:be:a0:ba:ae:c2:76:6a:78:7b:78:21:
48:38:9f:47:00:fb:46:b7:78:23:e4:e0:a2:68:f8:
65:2c:ca:04:1e:cc:31:ef:7a:b2:4f:b8:33:f6:97:
38:d7:97:ce:9b:e9:22:29:b8:8c:d0:94:98:9d:b3:
f6:c3:ab:9e:9c:cd:dc:0b:43:57:39:6d:b9:00:27:
a2:38:70:40:dc:be:33:15:35:c0:3e:23:6a:d7:11:
9d:ce:5a:49:d8:f8:33:7f:80:42:16:db:e6:e9:80:
15:aa:6d:77:44:b1:d9:e5:b3:5c:b2:6e:aa:84:5a:
ca:de:da:4d:e8:97:2c:65:24:80:09:26:c9:fd:33:
a7:d1:88:b3:ef:b4:56:27:d7:77:9f:33:aa:7b:fc:
4a:1d:92:4a:7b:72:16:0f:71:a9:63:5d:3a:df:b1:
d4:65:97:f2:68:9a:99:02:e9:ef:31:40:aa:0a:b7:
79:bf:28:c5:55:21:07:c5:96:ed:d2:8e:f3:05:ae:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:C2:52:F9:68:E0:94:48:EA:C1:A6:D0:09:DE:0D:26:C8:BD:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8b25650-789d-3e36-9d5f-ff5c18eae6c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:66:7d:6f:59:a1:b1:f5:63:62:ad:10:cd:97:3f:b9:ee:3d:
cd:13:96:15:33:ee:00:2f:27:10:fc:22:e8:fb:77:a5:fd:72:
b1:e5:26:cb:c2:71:31:0e:d6:26:44:89:90:b6:fd:12:45:07:
45:51:3a:ee:98:fb:7d:d7:ea:9a:8b:de:9c:5d:b6:90:23:96:
fb:0f:81:bf:e3:10:43:a4:1f:84:b6:46:b4:5d:e8:9a:37:f1:
7c:dd:cb:04:4a:e4:5c:87:03:a1:b8:df:25:b9:32:b3:2f:8a:
53:be:e3:47:45:02:00:03:fe:df:73:6f:3e:b3:16:b9:f8:24:
96:f0:bc:f1:d1:5e:68:21:cf:4b:90:cf:6c:26:ed:e0:d3:03:
4d:9c:16:7c:e6:d3:1d:f3:fc:ae:9f:c9:55:2d:0d:d7:9d:f4:
80:98:66:47:06:f6:c7:aa:e4:43:76:04:f1:d4:0c:87:de:bd:
a9:4b:88:bc:d3:52:10:09:13:87:ee:08:af:65:c4:e4:d1:7c:
2b:fb:73:bd:db:2b:85:c0:c3:d1:79:94:b9:bf:87:5e:a8:ad:
72:0b:de:d1:05:a5:e1:ef:2d:ed:8c:59:eb:1b:df:83:02:be:
a4:43:d1:a7:42:c0:31:36:6f:d9:1d:e9:c2:d7:5d:d7:e0:73:
6f:5e:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:45:21 2026 by rpki-client