
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c553a58f-dc4e-346b-9d67-90973f0fbe06.roa
File: c553a58f-dc4e-346b-9d67-90973f0fbe06.roa (raw, json)
Hash identifier: vEUbEoKgthvWl+/ZUsvLv4kKOf9zjuJUSn0+1fuK4y8=
Subject key identifier: 45:15:6B:49:2B:33:E0:5E:45:CC:E5:B6:C0:C9:E8:EE:8C:7F:0C:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A75AA79D668F7EDCD52040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c553a58f-dc4e-346b-9d67-90973f0fbe06.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 32651
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:5a:a7:9d:66:8f:7e:dc:d5:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=c9b71514-5d7d-4afa-ad95-1e8c451a47ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:fd:03:68:b8:e7:99:ba:73:70:ba:b5:6f:
9e:df:03:f7:35:94:0d:ef:27:a7:23:fe:25:04:cc:
be:db:fb:33:c6:6d:5a:13:bd:67:70:35:b2:a3:33:
ac:dc:f3:09:20:88:92:7f:b3:98:42:a2:2a:9e:e5:
b9:70:27:5f:cd:93:9f:c1:5b:5a:88:d7:d5:88:2d:
0b:af:b9:ac:ae:ba:5c:67:7c:46:6f:2f:67:3f:ad:
e7:50:97:c1:fb:91:b9:da:f3:c7:c7:5d:f6:60:ef:
59:84:de:5c:95:23:b8:d5:77:b8:9b:04:a1:d2:7d:
0d:d7:46:6b:05:14:2b:fd:a0:6f:08:fd:70:b8:7c:
44:f9:8e:ad:0c:5a:78:14:9b:ba:60:48:98:6e:6f:
36:a0:da:4e:79:65:74:2b:f0:08:dd:5f:9b:32:94:
c2:57:08:c3:30:fe:9f:21:6c:90:6b:c9:7e:c3:ba:
f3:68:bb:1d:80:2e:0b:b4:5e:46:19:86:18:e3:58:
8b:8b:24:0f:4a:8b:a9:36:64:20:19:72:12:bd:21:
91:fc:ed:aa:cf:02:5f:36:f4:d7:65:25:ae:3b:08:
ff:03:c2:8b:19:83:66:1c:ff:74:c2:00:5b:56:e0:
00:40:60:3a:2e:ff:2f:b6:0f:63:b2:57:4a:dc:46:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:6B:49:2B:33:E0:5E:45:CC:E5:B6:C0:C9:E8:EE:8C:7F:0C:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c553a58f-dc4e-346b-9d67-90973f0fbe06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3d:82:8e:3c:3c:45:a4:af:e3:ab:17:af:82:b3:67:48:e5:
cc:ff:5c:41:b1:24:18:81:d1:1d:55:8e:d0:9b:e8:ed:ab:c8:
1f:9e:7c:20:dc:80:a6:41:51:b9:ca:a2:ef:80:e7:0a:ac:6e:
f3:c9:0a:76:59:c5:b4:ff:3b:3f:3c:e8:69:e6:1f:d5:3e:34:
45:e3:ef:b7:90:7e:5e:a8:22:e0:b4:63:8d:45:a2:97:dc:98:
fd:8c:4f:11:e4:f5:73:9b:41:29:c8:01:61:07:c9:63:f9:a6:
83:12:21:a2:83:34:ae:63:bc:ce:a9:59:2c:7c:fb:5e:d6:fb:
69:cf:08:84:67:0b:c7:ab:52:46:0a:e2:84:34:e6:04:82:af:
90:fe:5b:c6:72:86:5d:6a:83:86:3b:dd:ac:4a:9c:82:d1:bc:
cc:61:ef:13:f6:d7:e9:55:30:78:99:4b:ad:23:e3:60:33:ab:
b1:e2:ef:2a:6e:fe:b1:93:72:fb:00:01:67:2f:ad:0e:9f:c8:
e4:91:cc:07:5a:08:17:45:d3:1f:63:99:85:37:89:af:cf:98:
80:c3:bb:da:8e:68:8c:65:cf:4a:0d:22:05:4f:31:78:56:87:
1c:f1:ee:16:cc:09:d1:6b:a4:06:66:dc:39:bf:5b:5e:a9:77:
90:68:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:54 2026 by rpki-client