
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa
File: ff1ca7d5-436c-390b-86cc-126186f444fd.roa (raw, json)
Hash identifier: SDIucinft1FepWnd57/ZjyXfkkSuIoAvhfKtioXUnuU=
Subject key identifier: 7D:AA:0D:CC:7D:39:50:E8:29:18:27:81:B3:D2:36:D7:77:5E:24:6A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584EC0A75BDC16ABE6DF37425400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 22547
IP address blocks: 192.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:5b:dc:16:ab:e6:df:37:42:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=aa525db3-4f84-4cd3-bcc9-8be8c9f9c4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c3:24:a2:fa:3f:f5:57:a2:8d:51:ae:0e:ca:
34:dd:35:e3:da:63:72:d5:67:73:e3:a1:4b:87:29:
29:ec:03:35:63:bd:8e:e8:d2:f2:c8:c4:7c:b3:8d:
98:08:31:86:e6:ac:32:06:c6:d0:df:b4:0d:3b:6c:
b8:de:4a:7f:70:0e:f0:a1:01:79:e5:93:cc:25:a1:
b1:0d:af:98:18:a5:79:a5:05:55:63:a2:d0:c7:f2:
2b:59:b5:a1:63:46:3c:17:2c:9b:5f:b1:7d:36:12:
b0:85:42:11:45:d6:8a:95:02:f9:4c:b8:a9:36:0c:
9b:20:57:9c:05:53:b6:08:1a:61:d0:85:0b:74:55:
2e:69:dc:01:15:07:45:59:1d:ca:db:44:89:7a:75:
02:3d:00:a6:ed:04:46:8c:f3:86:50:39:53:5b:18:
e6:09:76:66:5f:ee:35:24:60:8f:87:7a:af:19:4f:
3d:bd:4d:0a:cf:2e:7d:84:fc:7d:e8:8b:70:76:e5:
d7:24:27:09:d1:3f:be:c3:cd:ba:cd:51:73:a2:59:
e2:ea:0d:ba:4a:d0:73:bf:06:32:af:9a:a0:92:b3:
94:f1:5b:e5:06:48:c0:7d:23:ed:41:29:28:cd:82:
1e:9d:9a:08:a3:77:f4:b1:74:80:e0:fd:f3:5f:a6:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:0D:CC:7D:39:50:E8:29:18:27:81:B3:D2:36:D7:77:5E:24:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff1ca7d5-436c-390b-86cc-126186f444fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b4:39:6b:38:3f:cc:f3:65:09:e0:bd:14:5e:f2:16:be:d7:
f2:9f:2b:89:86:9a:53:95:93:1f:18:10:90:28:8d:44:1b:1f:
04:b6:60:83:76:22:78:26:fe:c2:25:36:fd:29:02:ff:ff:30:
98:9a:ed:69:6d:a6:9d:89:0d:fe:26:f8:7c:66:46:8c:c8:3b:
fc:f5:a0:39:cb:4c:c2:46:32:c7:d3:68:e2:25:00:cc:97:e5:
bc:91:d4:99:8e:da:eb:c2:ea:f0:42:75:26:74:37:6c:25:e3:
af:c0:1f:4d:c0:b0:e9:ca:57:ef:45:49:d3:21:b4:02:0c:5f:
10:e1:ae:12:7e:58:a3:a5:d5:57:ec:16:49:c5:c5:71:0b:bc:
bd:62:d1:99:87:38:67:67:5a:1c:b2:75:6e:65:b1:96:29:08:
5d:4c:ee:5b:8e:c3:a0:a5:81:fd:29:e6:85:16:09:a8:1f:20:
5e:b2:6b:00:a3:50:b0:ef:4a:f3:dd:40:0f:e4:2e:96:c8:76:
4d:2c:5a:4b:04:af:cd:f8:12:b1:e2:18:8e:9f:6f:53:cf:9f:
27:01:a5:47:86:cc:9e:1f:50:51:d5:87:23:26:e6:4e:26:dc:
6a:67:65:16:f8:eb:91:27:a7:a8:58:10:84:52:97:ac:e3:c0:
30:7f:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:13 2026 by rpki-client