
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa
File: fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa (raw, json)
Hash identifier: gHd+Dvo7VZmDWIGJFoxzWRXmDnm1rtI6ikc+eRyxaZU=
Subject key identifier: 29:05:F7:E3:B3:74:86:8D:36:6D:E7:6C:9B:E7:35:F8:A1:61:F9:06
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EA791E2E1256FD1C84A1188E8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396600
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:e2:e1:25:6f:d1:c8:4a:11:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=17e7ae88-b567-43f3-b571-fcc49e0d5130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:6b:c3:cf:d4:53:cc:25:28:c5:35:f0:63:
28:81:3d:bd:bc:53:d8:9a:d5:e9:4b:54:ca:36:c6:
82:64:93:37:74:67:dd:30:b6:37:07:36:fa:ee:5e:
a7:44:21:dc:bc:67:b2:18:08:4b:c9:45:f1:89:a1:
ee:c0:5a:88:46:fc:5f:d4:b0:6e:d4:93:89:8d:b6:
6e:88:31:79:41:dd:2d:43:de:e1:a9:37:77:79:d0:
52:3c:f7:f6:f6:84:5f:45:eb:93:ee:4c:2d:8a:63:
d5:29:b3:e0:91:83:02:3e:2a:f4:4a:21:14:37:d9:
43:d0:8c:03:08:9e:ee:20:cd:06:9a:26:22:dc:f9:
aa:e7:20:0e:a6:ac:c3:b3:af:78:e8:ed:19:e7:4a:
ed:a8:5a:ae:6a:e6:fc:e9:a8:13:91:1c:41:f7:8f:
ee:40:ef:05:32:ed:9c:5b:00:a1:c9:ae:3a:2f:e5:
0f:e2:f6:ca:a6:b0:f1:a9:e7:d2:45:3c:5a:56:2d:
37:58:57:20:f1:b9:ab:87:ec:28:61:68:b3:87:69:
59:70:f9:90:03:08:2c:aa:62:66:1d:61:51:e1:55:
ee:20:6c:80:29:81:a0:7e:20:cf:f8:60:21:33:98:
ab:12:f1:7b:0f:dd:91:0b:f1:44:ad:7a:31:23:93:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:F7:E3:B3:74:86:8D:36:6D:E7:6C:9B:E7:35:F8:A1:61:F9:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd3fabfe-3a72-3f59-82e5-9033dfcfa961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:dc:c2:36:51:db:05:f5:bc:fa:9a:60:b6:bf:73:8c:b5:e6:
3b:35:d6:66:28:b6:55:5a:3d:a9:e9:1a:c9:79:3c:ef:02:ec:
49:cd:76:34:78:e8:32:8c:fe:1c:d9:7d:dd:51:cf:c2:bb:71:
f8:6c:f4:16:01:6e:e8:aa:53:8b:7d:ba:6b:2c:55:2a:06:6c:
c8:89:6c:c1:41:78:95:5d:86:39:6f:93:1f:69:ba:37:13:e0:
26:d7:6e:c9:93:a3:f1:49:48:4b:04:d9:7a:67:6f:b7:ce:ae:
f8:c4:16:ba:e4:03:44:9d:2b:97:1b:3e:58:86:cd:b2:50:7d:
12:9b:87:22:03:55:35:cc:0e:11:8e:29:12:60:5d:3c:30:e8:
18:19:ce:30:dd:26:30:db:b5:56:43:03:a5:21:71:07:33:9d:
c6:e8:1a:0c:f1:84:c9:25:fa:ea:bf:0a:7a:df:9d:3e:73:b5:
f4:46:5b:07:ed:45:18:40:9b:fd:88:54:1d:60:bb:30:fb:ae:
f3:9d:44:6b:58:4c:f3:79:43:1f:37:48:35:bf:cb:6e:c5:34:
8a:d9:25:0d:4a:05:e3:a4:97:35:d6:11:76:a7:b8:bf:7d:b9:
d7:cc:29:44:22:55:8e:23:e5:49:a0:48:62:95:e7:08:fc:c5:
48:35:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:15:47 2026 by rpki-client