
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa
File: fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa (raw, json)
Hash identifier: /NxICs6LTLyGi6tL+tEnPEY/mZAXW3Y7q/Pi+Ih+AVY=
Subject key identifier: D7:6C:0B:1D:07:80:ED:8A:91:BC:58:76:A9:E6:11:B2:89:3C:A1:25
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F68281C44B5ADD5EFDBF5B8A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa
Signing time: Tue 06 Oct 2026 01:00:13 +0000
ROA not before: Tue 06 Oct 2026 01:00:13 +0000
ROA not after: Mon 04 Jan 2027 02:00:13 +0000
asID: 396587
IP address blocks: 192.33.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:68:28:1c:44:b5:ad:d5:ef:db:f5:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 6 01:00:13 2026 GMT
Not After : Jan 4 02:00:13 2027 GMT
Subject: CN=9ef18f58-9a30-4677-875b-5cb48c0b9892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:f9:82:36:38:8f:6f:e2:a4:a7:ef:cc:58:
d7:f9:55:f7:21:62:eb:96:09:55:56:c2:2f:15:6b:
6f:7e:af:54:b8:5d:d9:75:c2:73:37:14:a3:88:cc:
c1:7b:ba:0e:09:a3:13:b4:40:d0:07:28:0f:2e:47:
b4:47:0b:37:69:8f:cf:4c:65:8e:d6:78:54:ff:60:
f4:7b:01:25:07:80:08:33:a5:01:cf:7c:b9:ca:78:
ca:78:a2:a2:fb:43:96:fc:90:29:5d:ef:84:0d:54:
9c:68:1b:eb:50:67:c0:fc:b8:f5:90:b5:3d:a4:f0:
8b:97:51:0b:d0:85:2a:a1:2f:14:a3:8f:cd:59:72:
a9:91:b6:c7:85:64:93:34:7b:44:6b:a3:b3:a1:40:
c7:ab:34:e0:09:50:b6:2f:63:f8:8e:36:06:e2:01:
be:bc:9b:83:da:81:c5:d5:56:22:7c:f6:7f:dc:c8:
c0:22:c2:d3:b5:5d:c0:42:2d:99:8b:64:21:e4:94:
40:cb:06:07:68:bf:1f:77:dd:4f:b1:35:6b:ec:aa:
0a:95:8f:0e:51:93:c4:9a:ae:c4:ac:2b:f9:88:c1:
1e:54:6a:28:03:4c:70:7c:66:af:0c:b9:b0:27:92:
e6:eb:af:ae:50:5f:d3:ce:c8:74:28:cb:f6:89:82:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:0B:1D:07:80:ED:8A:91:BC:58:76:A9:E6:11:B2:89:3C:A1:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa023d97-640a-3dfa-94f4-36d0b2d3d8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:c6:0c:d9:dc:4d:d5:ce:0c:be:93:5f:2c:ab:3d:01:6e:10:
f2:8c:bb:9a:d1:11:92:a3:d6:bb:f9:d9:3a:c1:95:53:5c:57:
67:2e:37:6b:1a:f5:33:18:5f:8b:63:29:39:bb:0c:24:12:28:
3d:78:17:5b:ca:fd:73:58:00:20:c3:40:9c:1a:42:05:28:ec:
8d:d8:8f:b2:28:d7:ef:cb:63:fb:e2:75:5d:9f:50:fa:cc:45:
a1:6a:37:ba:d3:93:c7:12:dc:c9:ff:4b:cf:08:c4:22:55:81:
ee:89:a7:f5:3b:e6:a4:9f:f2:9f:ac:6f:67:86:0b:6c:75:78:
92:bf:e0:f8:ce:0b:a6:74:7d:d6:b0:17:9c:a7:ae:31:47:3d:
a9:51:03:8f:3f:e2:21:ce:47:b8:59:22:39:1e:3f:2b:05:ea:
35:13:a1:f0:59:a1:f0:87:08:c1:a3:41:3d:63:50:3e:59:4c:
d8:5a:50:4b:86:ed:20:43:c3:22:cf:f6:e6:fa:23:5c:ee:49:
05:6e:18:f6:0e:26:4d:49:1e:d1:ad:1e:10:25:d3:5c:fb:17:
cf:f7:56:08:77:c9:03:76:d3:72:29:2d:ec:0e:07:c8:da:b5:
d2:5a:a1:c5:f8:4b:1c:2d:f0:9f:15:1f:76:a4:73:72:bb:f0:
46:fb:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:29:56 2026 by rpki-client