
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
File: bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa (raw, json)
Hash identifier: v8wOc9XTqN09djBT+AsN9XJ3UFxBeMgkRiKLeKk2lBk=
Subject key identifier: 8B:26:93:15:14:8D:BE:C8:B1:CF:62:76:33:4C:A3:55:68:0F:58:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584B477C848024FD5FEA2A425B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
Signing time: Mon 22 Sep 2025 13:00:42 +0000
ROA not before: Mon 22 Sep 2025 13:00:42 +0000
ROA not after: Sun 21 Dec 2025 14:00:42 +0000
asID: 36624
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:47:7c:84:80:24:fd:5f:ea:2a:42:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 22 13:00:42 2025 GMT
Not After : Dec 21 14:00:42 2025 GMT
Subject: CN=bee662b2-c38e-4eef-ad12-058657ccc9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:45:7e:37:9b:72:0d:4e:f0:98:8d:16:98:
1e:bb:93:5e:00:ce:02:9b:60:c9:fd:6a:26:c2:df:
59:c3:bd:44:88:26:ef:dd:c3:cd:7e:4a:e5:c4:25:
b8:7d:4e:fc:41:82:8c:e5:d8:b3:16:46:41:6c:38:
d9:a7:4e:96:63:49:8f:09:37:14:8e:8d:6f:49:34:
09:9c:dc:67:76:e6:1a:6c:7d:c9:08:52:b7:d1:5b:
be:e5:15:2c:5c:89:76:65:54:b2:58:39:e9:8b:d3:
7c:0a:b9:12:36:5a:b5:3d:4e:13:0d:0c:15:2b:a5:
5a:37:c5:dd:28:9b:cb:ba:5d:b9:62:e9:a8:92:e9:
8c:59:09:da:4a:99:aa:b5:9c:9a:01:18:a3:da:fc:
ef:5e:91:c5:20:ba:cd:f9:8f:e8:88:09:00:26:07:
ad:30:fc:22:da:71:6d:1a:34:d1:0d:c3:b6:ed:33:
ca:8d:a2:92:68:de:8b:dd:6b:6b:5a:1d:4b:62:78:
55:3f:a8:d7:1b:68:72:23:ee:3c:d4:8b:2d:ee:96:
73:22:56:23:bc:2f:df:42:a9:ac:e6:dd:e7:02:ca:
20:d9:dc:65:14:06:fc:5b:ac:e0:10:44:8e:60:9c:
5b:11:5a:49:80:44:1b:80:7a:5e:86:07:bc:26:cd:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:93:15:14:8D:BE:C8:B1:CF:62:76:33:4C:A3:55:68:0F:58:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:bc:89:63:d0:2a:3d:5c:8c:35:41:8b:b8:fe:cf:16:b1:1d:
77:84:e5:24:cd:4b:64:9c:08:31:55:3d:9b:15:66:4d:32:a8:
66:e6:68:36:9c:ab:c5:a5:14:45:83:5d:45:7a:34:5d:1c:03:
16:1d:7c:fe:24:d4:bc:74:b8:0b:b5:d8:4b:ce:a5:06:b7:b0:
40:c8:2e:6a:86:cb:28:7d:c4:4f:1c:80:43:aa:49:3a:e1:16:
db:81:04:a9:ce:ba:08:a4:db:8d:07:63:51:67:f7:37:ff:db:
51:70:40:91:26:12:e2:74:a3:ba:60:af:72:07:6c:af:8f:76:
8a:be:ff:c5:c6:ff:5a:7d:50:ed:0a:14:0f:b0:a4:d2:17:bc:
3d:f4:4a:a4:73:72:ed:09:22:f8:4e:83:9e:18:ed:c4:ad:c2:
12:2b:27:f3:f9:92:58:98:c9:1c:c8:ad:56:f6:09:58:57:45:
06:70:34:06:4d:e0:c2:d9:54:b7:c3:ed:23:64:9a:f3:fa:58:
bc:f6:11:de:b1:3c:41:e2:1b:e8:72:d8:2f:9d:cf:51:df:cc:
e5:c5:07:5a:ad:0f:fe:c2:8e:b8:93:94:1c:15:66:05:5a:b1:
fc:4b:af:b5:a6:03:43:22:bf:bb:ef:4c:a7:02:84:31:5f:88:
15:33:a9:6c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfISAJP1f6ipCW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
YmVlNjYyYjItYzM4ZS00ZWVmLWFkMTItMDU4NjU3Y2NjOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgxFfjebcg1O8JiNFpgeu5NeAM4Cm2DJ/Wom
wt9Zw71EiCbv3cPNfkrlxCW4fU78QYKM5dizFkZBbDjZp06WY0mPCTcUjo1vSTQJ
nNxnduYabH3JCFK30Vu+5RUsXIl2ZVSyWDnpi9N8CrkSNlq1PU4TDQwVK6VaN8Xd
KJvLul25YumokumMWQnaSpmqtZyaARij2vzvXpHFILrN+Y/oiAkAJgetMPwi2nFt
GjTRDcO27TPKjaKSaN6L3WtrWh1LYnhVP6jXG2hyI+481Ist7pZzIlYjvC/fQqms
5t3nAsog2dxlFAb8W6zgEESOYJxbEVpJgEQbgHpehge8Js2cXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIsmkxUUjb7Isc9idjNMo1VoD1iYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMTBhMTYtN2VkZC0z
OGI2LThjODktZTUwODhiN2E3ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCSvIlj0Co9XIw1QYu4/s8WsR13hOUkzUtknAgxVT2bFWZNMqhm5mg2
nKvFpRRFg11FejRdHAMWHXz+JNS8dLgLtdhLzqUGt7BAyC5qhssofcRPHIBDqkk6
4RbbgQSpzroIpNuNB2NRZ/c3/9tRcECRJhLidKO6YK9yB2yvj3aKvv/Fxv9afVDt
ChQPsKTSF7w99Eqkc3LtCSL4ToOeGO3ErcISKyfz+ZJYmMkcyK1W9glYV0UGcDQG
TeDC2VS3w+0jZJrz+li89hHesTxB4hvoctgvnc9R38zlxQdarQ/+wo64k5QcFWYF
WrH8S6+1pgNDIr+770ynAoQxX4gVM6ls
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:17:32 2025 by rpki-client