
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa
File: c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa (raw, json)
Hash identifier: 84ftq6ual2+4f/lX6rqgvCdfBQfgjesCmi4E2j19ePU=
Subject key identifier: 5D:75:5C:CE:9E:95:8C:E4:44:FF:03:9A:6E:79:1D:5B:5A:EB:A2:10
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F49732DF0FF581622A8093E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396596
IP address blocks: 192.68.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:2d:f0:ff:58:16:22:a8:09:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=13dc2a48-7c61-426f-b2c0-378daf1130a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:06:5d:bb:ad:3c:1a:f6:73:62:48:77:05:
98:2a:56:00:4a:73:e2:64:77:30:8e:78:8c:0d:b6:
14:97:ea:f4:e4:46:e8:4f:ce:38:2d:ac:42:24:3f:
08:ab:14:cd:28:cf:4a:1c:33:a8:fb:e1:e3:af:7a:
03:ec:62:8b:9a:a7:e6:04:9f:1b:96:cc:f3:d1:0f:
bd:4f:ff:25:13:74:67:c3:ec:23:3d:87:83:98:c6:
09:3c:ba:28:22:43:27:c0:b7:75:a0:92:d3:06:aa:
f9:69:e4:a3:37:48:26:9a:bd:16:ea:7f:6c:f3:c2:
41:0a:c6:fb:48:56:76:33:09:92:f6:47:61:0a:1c:
51:f3:7f:ac:76:38:76:d1:1b:5a:aa:0d:96:e3:2a:
11:f9:9e:1f:da:db:27:e3:be:e1:d4:5b:b0:30:6f:
c9:97:e9:3f:03:0d:e5:97:ed:6c:16:db:d8:4b:b6:
5c:17:03:25:34:1c:9e:a4:f1:dc:b6:44:f1:4b:3e:
66:93:a0:08:55:8d:4e:6d:3f:f1:0c:61:de:0d:7c:
bb:a9:c9:70:b7:8c:b4:c0:fa:f2:83:72:7f:c5:b8:
59:5f:96:6f:03:e6:b7:ac:91:ef:0d:35:d8:1e:cb:
71:fd:37:6c:e5:84:b1:91:d1:de:ac:d3:d2:e2:d4:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:5C:CE:9E:95:8C:E4:44:FF:03:9A:6E:79:1D:5B:5A:EB:A2:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85bdeb7-480c-38da-b8d6-4ec2c54567ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:9b:a7:1c:4c:84:31:a9:5d:5a:b0:a7:a7:dc:f2:08:df:a8:
57:2a:9e:9c:9c:a0:0d:8a:5f:1e:6d:8a:f2:65:d1:b7:4c:07:
0d:c0:74:e1:cc:7e:b1:d3:2d:6a:19:34:b1:58:98:ec:94:49:
26:65:0b:ad:5a:6c:22:20:33:90:e7:a2:1e:a7:9f:ad:db:b8:
66:79:51:e1:4b:70:67:81:42:fd:eb:ec:ab:74:f9:bf:b3:6a:
3c:4a:b1:ee:95:d4:03:c7:90:96:35:a5:a8:66:90:74:d0:9e:
f3:d4:34:18:81:b0:ed:69:6d:93:c7:16:d5:da:d2:02:30:17:
9c:de:0a:6e:50:c9:8b:52:71:66:84:4b:de:cc:aa:bd:56:59:
36:7c:37:e2:a8:0c:ef:17:ad:24:a5:5e:a6:89:3d:7c:cd:5f:
28:71:26:c3:eb:9c:72:c8:e2:31:23:0c:0e:b1:d6:a2:a6:37:
fd:ff:1b:d8:ba:79:16:c6:d0:56:b6:28:5b:b9:c8:39:ae:98:
84:90:da:cf:85:3e:be:b6:9d:6b:3e:f7:63:11:a5:14:0a:30:
d2:ca:d9:60:50:53:30:b0:ab:6f:08:a3:15:e2:ed:2e:36:1c:
7d:53:4e:f3:51:9d:32:84:b9:a7:2a:ff:2b:29:fd:65:52:c4:
d8:b9:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:00:32 2026 by rpki-client