
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa
File: 9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa (raw, json)
Hash identifier: Wc66by74SbuB7ve3qSKqQ1v9NSQLsOH1nkL+rCWTmoI=
Subject key identifier: C7:AE:2E:CC:A9:C2:81:9B:A8:E8:4F:4C:29:79:F1:E1:C3:03:CE:99
Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial: 010D0C9F4328584EA7972280AA44ECF1200CEA00
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397325
IP address blocks: 192.31.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:22:80:aa:44:ec:f1:20:0c:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b0bf4d8b-e547-4f8c-a8b2-e1c9a9eb77c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:59:71:60:b9:db:d3:20:30:fc:eb:fa:4d:
d6:44:d9:20:c0:5f:ec:ac:10:ae:2b:79:94:52:2e:
4c:43:58:a7:af:a9:6a:6c:84:57:b2:32:a3:b9:f3:
bf:1b:f0:96:7d:47:ef:54:83:e6:ce:8a:fe:d2:43:
61:f5:b1:9b:ba:e6:6d:47:df:62:c1:2a:5b:5d:b6:
be:92:5a:93:fc:80:7f:8e:4f:6f:83:d1:d6:c2:51:
71:09:4a:e5:21:19:1a:58:9d:3d:39:b0:87:d5:e9:
36:2f:2c:bd:87:8b:21:ed:77:8c:79:b2:aa:d2:d5:
9c:26:b3:2d:7d:fc:f4:99:f8:93:53:56:a5:71:38:
3f:d0:95:f0:e5:a9:b9:a2:0f:a7:c5:ac:fe:9c:1e:
78:ef:b6:50:17:53:5e:61:2c:de:3d:57:da:11:4e:
a4:15:02:ec:fa:20:5f:78:8c:cd:a4:a4:fe:37:79:
12:46:82:a1:f5:b3:5b:11:ab:b8:05:07:e8:29:b4:
70:53:e0:40:de:4e:13:69:51:75:04:5d:5f:1a:75:
ab:2e:1c:dc:62:6c:a2:2c:2c:42:ad:d0:d6:60:6f:
82:76:f9:c9:9a:01:99:eb:8a:76:79:16:ff:24:d4:
6b:8e:45:7a:23:51:61:49:c8:98:5d:b6:1f:f0:d6:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AE:2E:CC:A9:C2:81:9B:A8:E8:4F:4C:29:79:F1:E1:C3:03:CE:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9db68cc5-a9fd-3d70-b98d-8da96e18e380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
X509v3 Authority Key Identifier:
keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:83:68:1b:5d:00:06:31:91:d4:b0:40:e7:41:59:f3:1f:36:
5c:16:36:2e:22:59:5e:d2:bf:96:1c:c6:6d:ca:ef:af:dc:d0:
cd:b9:c8:cc:42:ce:e9:db:3b:89:ac:41:ea:50:22:85:d9:e8:
6b:e8:94:db:c0:e1:24:4b:b1:fa:67:1b:65:b6:85:90:46:5f:
db:4a:5f:53:98:73:d7:fd:8a:92:72:cc:cc:bd:a2:93:ce:ad:
75:27:16:75:9c:d2:6d:bc:01:a7:1f:7a:2c:8a:22:ae:67:5a:
2c:e7:64:86:a7:8f:e5:77:8c:2d:c8:79:0d:c8:84:5e:7a:1c:
65:24:ea:69:1e:e8:dd:62:92:51:f1:23:6f:47:0a:33:b6:9d:
c2:8b:c5:be:25:92:5e:ac:3e:6d:3c:05:32:ef:16:c7:1c:d0:
c5:8b:c0:64:e7:ab:d6:27:d7:e2:b9:cb:9f:35:25:69:b2:7e:
ad:b3:1f:2c:63:83:73:0e:06:47:91:85:13:7e:a6:3c:67:c7:
34:8e:c2:87:16:e4:67:15:27:f8:de:b0:47:69:b6:c6:86:d7:
3a:fe:6f:29:cf:82:13:92:d6:80:d1:1a:e9:fa:4b:e9:6a:10:
8c:c9:6e:2f:16:fe:a4:5a:e2:6f:20:21:41:f8:bf:8a:0f:de:
7b:0b:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:58 2026 by rpki-client