
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa
File: ba097dde-442b-3ae4-95b0-305919764851.roa (raw, json)
Hash identifier: HsuulgIWGZLxAdUilOAGTz4CJIdCJCh4DmVEyQD5WTU=
Subject key identifier: 6E:5C:97:30:3C:77:02:75:08:D5:40:E3:75:46:65:AF:9F:87:78:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F4F082A8A111910ABE2D31700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 397209
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:2a:8a:11:19:10:ab:e2:d3:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=1fe0a48a-73fe-49cf-b17c-65cea22b6353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:91:17:53:67:91:24:8f:c8:c0:2c:40:f0:
85:30:ea:68:f2:30:a4:de:b2:55:a2:39:1d:2f:0b:
81:e7:0d:c0:4e:7b:7a:54:15:c6:a9:0e:24:b3:6e:
f3:ef:c0:65:7b:0e:1e:4f:fd:4d:9c:6f:63:d5:e1:
e7:dc:38:01:12:8c:d3:a5:9a:bb:60:f8:9d:74:55:
e6:22:3b:34:48:42:2d:0f:71:b7:18:c3:d6:ab:c6:
76:56:e2:00:8f:4f:fb:cf:f9:88:f1:16:5c:75:69:
25:ec:20:59:a0:65:2a:db:62:ac:db:bf:d8:ec:e6:
f6:ab:5e:8d:53:c1:99:41:b0:18:ad:41:a6:29:38:
b0:b7:ed:da:73:bb:33:0a:91:43:c6:11:74:9b:7d:
01:1b:90:2e:76:d1:87:7a:15:ad:57:27:f5:36:67:
07:86:7d:04:7e:15:09:77:80:a7:40:85:73:46:e1:
59:15:50:48:d7:48:48:e4:1f:db:68:99:70:be:51:
73:72:39:cf:60:15:1e:1e:70:ab:0d:9e:49:dc:ca:
a3:3e:65:12:91:9b:2b:e0:0c:79:fd:a4:6b:a5:39:
ea:ea:28:37:c4:f5:30:4d:1b:54:de:63:2c:f1:3e:
5f:b4:ce:2e:2c:17:5a:f9:b3:15:8c:30:4e:46:60:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5C:97:30:3C:77:02:75:08:D5:40:E3:75:46:65:AF:9F:87:78:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:21:ed:3f:fc:45:73:2c:27:3d:ba:26:d2:e2:03:2c:f2:b7:
b6:78:e2:d8:73:c9:da:77:ad:cd:51:1a:ea:c7:56:64:0d:82:
03:39:66:45:4c:de:22:65:8f:2f:7a:e2:b4:e6:b0:98:15:0f:
dc:07:86:a1:b9:a8:26:42:f9:e8:ae:f4:7b:b6:43:7d:58:f2:
69:60:3f:03:e2:67:91:e3:4e:71:6e:df:f9:35:60:ef:dc:e1:
a6:28:14:ac:be:86:9a:e6:24:58:7c:c4:16:b7:60:84:77:ce:
b0:c1:1e:d4:5c:55:35:8a:25:9c:63:19:5e:63:e5:1e:c7:53:
78:60:1f:d5:38:57:de:cd:70:24:b9:4c:90:59:ca:d2:67:be:
84:9a:07:55:d9:40:42:4d:03:4d:a6:9d:7d:4c:4a:57:a6:41:
63:8d:8f:26:68:9c:4b:17:62:37:ac:b2:6e:50:d4:83:e8:3b:
b1:79:68:3b:52:7b:35:cd:b8:87:c6:56:31:43:e1:41:36:04:
74:8c:b4:2f:57:aa:5c:4d:9b:dd:66:de:12:9d:4d:79:00:22:
31:72:b7:f1:2d:7a:76:ed:d9:d8:67:03:0b:e6:a7:7c:7b:a4:
4c:1e:0c:e5:d7:68:9c:00:3b:1a:3e:86:7d:b3:9a:1d:ca:43:
31:d7:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:11 2026 by rpki-client