
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa
File: d948cd7c-dd3e-3991-922a-683b9d77f25d.roa (raw, json)
Hash identifier: dRilpoZzba1wfFRYnNX5dCl7rCXAaCrUmayrL4LxVFc=
Subject key identifier: 59:51:55:06:06:7A:08:DC:19:F4:FA:22:05:9A:A4:CB:68:06:5C:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A7212878A626E23845E300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 396550
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:21:28:78:a6:26:e2:38:45:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=644ccd61-e4e4-4105-b780-acf47ca9685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:f6:d3:75:0d:65:45:73:f9:0d:e6:8d:0f:
b7:8c:aa:58:5d:04:8c:45:08:4c:18:ba:ee:59:67:
9b:83:85:6f:da:f1:58:44:6c:92:9e:a0:e5:b5:cf:
ad:57:af:3c:03:82:7b:4c:4e:8b:42:34:e6:41:98:
1c:ea:ae:05:19:42:ab:93:ab:76:31:b8:01:d9:5a:
f8:f9:3a:82:48:82:da:69:4b:d3:f7:47:c8:0c:a3:
8e:2a:49:45:4c:ea:b8:bf:9e:17:e5:06:8c:45:43:
34:c1:62:e5:6d:ae:97:0d:19:e4:4d:5d:ce:b1:69:
44:94:11:15:db:6f:04:38:27:99:89:9b:00:c6:39:
fa:95:3a:e9:b7:cf:d6:10:cc:64:5b:00:6e:c6:94:
a3:95:d0:60:1b:c0:51:d8:a0:21:c6:37:b5:85:2b:
1f:79:84:b0:77:f9:48:da:88:29:8f:fb:75:f8:c2:
39:e8:4f:84:28:c8:2f:9f:ab:4b:83:2c:c9:54:43:
84:2b:86:95:ed:a5:02:0e:b9:2d:54:fe:22:10:ef:
f5:bc:13:5a:f8:5c:82:8b:8c:54:96:03:5e:9d:c7:
d8:23:d6:77:b6:97:62:71:64:ce:fb:f1:18:3b:ba:
cb:c8:a6:91:55:d2:59:1b:be:dc:d4:67:97:53:75:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:55:06:06:7A:08:DC:19:F4:FA:22:05:9A:A4:CB:68:06:5C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:5c:26:50:bc:96:82:ac:24:f1:1c:47:70:e4:02:e7:64:d1:
6b:ff:19:74:4a:c9:ca:18:98:d9:fb:e6:67:f3:48:8e:bf:1f:
11:5a:67:c3:f0:61:72:de:7f:c9:c6:7c:e4:e6:71:e0:f1:54:
6e:55:c5:82:51:1a:be:ef:63:b1:d7:21:69:4d:bf:30:97:66:
01:41:2f:fb:ea:10:d5:af:fa:c2:b1:ab:cf:ee:85:e7:a4:cd:
b3:fe:da:40:87:e2:69:d9:9c:66:9d:99:ea:1d:07:b1:f2:32:
30:3d:7b:6d:ae:82:c7:cc:37:c4:cf:b0:c6:3d:e8:10:df:a7:
15:34:69:33:46:e9:d7:02:69:82:42:68:55:e7:eb:6f:8c:c8:
a1:69:8b:cf:c1:51:1f:84:56:c4:e7:c6:26:0e:ec:8d:92:b8:
6a:48:a9:b8:d7:67:9e:60:de:7f:5f:12:5d:db:ad:c5:77:06:
2f:0d:54:83:9d:ed:fc:d2:df:c5:0a:84:dc:c3:a8:93:e0:2e:
08:85:66:4a:c6:a5:63:be:47:f3:19:a1:37:f6:f9:47:ae:88:
1c:0b:8f:97:5c:9c:d6:a9:a8:12:0b:e9:a3:42:0a:6a:23:a2:
27:78:17:72:35:23:87:8d:6e:e2:d6:be:44:c0:da:87:b5:43:
cd:f4:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:38 2026 by rpki-client