
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa
File: df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa (raw, json)
Hash identifier: rb2lDM7rp1ZFm/ctIpciWeaijxc6dkfiEoLi0vZCjms=
Subject key identifier: 48:5D:E7:E5:CE:05:71:F3:DB:90:32:D7:72:D5:C5:6E:B4:E6:36:F3
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584EFCACEBF7C685D6C24A0B9580
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 198949
IP address blocks: 69.89.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:eb:f7:c6:85:d6:c2:4a:0b:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=25b344c7-138c-4211-be97-b0e63e3ace5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:dd:39:84:2c:78:a0:f6:af:01:9a:66:38:
37:fd:fe:fd:0b:cc:e2:01:d3:85:cc:9f:08:86:11:
1f:42:a3:47:c4:68:8b:be:40:78:ce:a3:c9:b4:74:
33:ac:91:09:57:2d:92:5f:27:66:10:62:31:49:9a:
3a:3c:cd:08:ff:e0:ab:a9:81:60:b1:81:16:c8:4f:
a4:db:0c:47:fd:6f:35:5d:22:4f:6f:c4:d8:05:1f:
fa:45:44:29:75:90:bd:7a:ee:fb:bc:91:a6:5a:74:
ec:b1:af:f4:47:ae:ce:a5:e3:20:04:b1:12:d5:2a:
79:3e:12:60:83:99:94:82:26:47:eb:a5:f4:08:6a:
4c:89:d3:7d:64:7d:3c:6e:bf:4d:0d:72:21:20:e9:
c3:8f:c6:93:2e:ae:f8:20:e5:b5:8b:62:e6:98:87:
64:37:cb:ed:6c:a8:cc:cb:01:b7:b1:22:16:82:4e:
95:65:d8:66:32:d1:9b:24:91:f1:f7:e6:42:32:65:
2e:b7:87:f3:4b:53:86:2a:24:f0:85:b4:31:3c:0b:
93:04:dc:aa:8c:f3:09:e0:ef:f0:74:58:d2:d2:83:
03:8b:af:1d:24:8d:06:f8:5a:8f:50:34:f8:8a:05:
50:fe:e3:c6:c5:27:34:f6:9b:18:fb:95:89:86:05:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:E7:E5:CE:05:71:F3:DB:90:32:D7:72:D5:C5:6E:B4:E6:36:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
69.89.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:04:26:e3:49:fa:38:17:50:b1:5d:97:71:44:f3:bf:11:8b:
bb:09:c4:c7:57:c7:9c:c8:8e:b8:b8:87:cb:6b:9c:fa:eb:46:
17:98:4e:1a:ec:62:93:77:14:f1:9b:73:c3:20:7b:a5:1c:5f:
09:30:73:b4:c4:2f:b6:ff:ee:22:bb:f6:5a:db:2e:22:03:a0:
c9:8f:91:0d:bd:27:85:6c:94:fa:e3:2c:4e:be:44:42:c6:c3:
3c:51:07:a7:ee:91:0b:c7:69:1a:e1:a1:a2:31:71:2e:1b:b7:
57:05:0f:57:26:36:b0:9b:58:ea:82:22:d0:cd:75:63:a6:7a:
dd:f4:92:da:3f:d9:ac:33:89:5c:1d:5b:95:71:1b:27:eb:72:
6f:76:61:70:ef:c7:6b:74:ea:0c:39:dc:bd:76:8c:b6:97:e9:
ed:96:8a:03:f3:c6:1c:68:52:5b:f1:db:e5:c8:71:92:04:a9:
f8:19:4f:10:20:bb:73:a7:e5:1e:fc:45:6b:2d:dd:3c:a0:c2:
2a:80:08:91:8a:5f:11:88:9b:b9:5b:53:6c:01:fe:e1:13:c5:
3a:b2:4d:02:db:61:3f:fb:04:d6:68:18:4e:b5:e5:5e:32:c9:
c3:ed:9d:6f:a7:4a:e1:da:94:99:8b:29:5d:e1:82:62:af:cc:
3d:cb:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:03 2026 by rpki-client