
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa
File: a97b9046-55be-3d39-8005-833ad34d16c8.roa (raw, json)
Hash identifier: bLfIExu2ibLadG7QfPaobTln3TMxdWVtK3YHTLKjBD8=
Subject key identifier: 48:2D:BD:E7:56:13:51:AA:ED:D1:05:E0:CD:44:D3:26:63:AE:59:EA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584ECBD1E2C27D82C3A7FA5A0500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa
Signing time: Tue 11 Aug 2026 01:00:11 +0000
ROA not before: Tue 11 Aug 2026 01:00:11 +0000
ROA not after: Mon 09 Nov 2026 02:00:11 +0000
asID: 0
IP address blocks: 209.131.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:d1:e2:c2:7d:82:c3:a7:fa:5a:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Aug 11 01:00:11 2026 GMT
Not After : Nov 9 02:00:11 2026 GMT
Subject: CN=512ad0b9-fb06-464a-b39e-0834a73c2ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:e9:a3:bd:1b:e4:3e:eb:e2:15:05:9f:4c:
8a:00:10:e7:3d:c7:df:67:cc:41:d5:53:b3:43:d9:
91:01:c6:5d:b3:f6:e3:5f:a9:91:7f:19:4a:5b:d7:
05:ac:40:75:fa:9c:6a:85:42:91:47:99:30:6e:f0:
b4:66:88:4f:4b:fd:ba:b1:8b:13:d2:58:1d:3e:45:
f0:8e:75:46:2b:54:33:c3:5b:ac:cf:e2:17:59:4f:
a0:e3:a5:df:40:05:a5:5e:22:ef:fe:7f:56:ac:85:
43:f5:f8:4f:12:2f:fd:e1:b2:c7:f4:07:d7:6c:59:
1b:9f:37:15:04:2a:c1:24:d9:c3:d3:86:78:cd:4b:
0f:79:fe:ae:27:82:f8:a8:6d:f5:5e:e5:71:0a:43:
df:61:bc:9a:f7:af:68:67:c0:e6:dc:6c:2e:9e:a8:
71:f5:54:28:79:83:58:d7:8d:7c:3b:7b:0e:5e:58:
0b:be:5f:53:ea:46:b9:3b:11:95:b9:52:67:9f:5f:
d4:c9:97:6e:ca:a3:86:3f:c3:17:4c:03:d9:d8:d2:
63:02:6a:e9:f1:42:c2:86:c0:ee:40:fc:57:8c:6b:
ea:96:67:e8:5b:d5:ae:36:10:e4:80:fd:9c:4c:f6:
6a:83:45:fd:23:4c:95:fd:9f:30:91:9a:8b:ee:e8:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:BD:E7:56:13:51:AA:ED:D1:05:E0:CD:44:D3:26:63:AE:59:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:27:41:46:98:24:94:5c:1b:c1:b5:f3:ff:94:0d:93:03:fb:
f9:f3:a8:49:03:99:7a:f4:a7:34:f4:04:2e:d6:1c:0f:40:13:
ed:5b:c1:03:a7:4d:d4:d1:c9:b3:41:9c:57:e1:0e:8b:bb:d6:
2f:f3:c6:b0:1e:7b:a5:c1:4d:5e:d9:e1:2f:08:8f:8a:7f:01:
53:dc:25:ef:3a:9b:c7:7b:1f:e0:7d:5e:5e:0c:95:66:0d:49:
6f:c7:5f:2d:85:60:80:2a:07:ba:64:c1:42:3b:c2:ce:0c:44:
1e:9f:e0:67:59:84:95:33:60:68:b6:b2:43:3e:67:5c:51:ca:
14:d1:06:75:c6:72:12:13:6c:da:de:c8:40:03:9b:d3:21:ef:
4c:10:e5:3d:4a:74:71:d1:72:0c:8f:0b:0b:55:2f:1f:7d:bd:
81:57:eb:fc:d9:9b:bb:67:13:e4:95:2c:a5:b8:72:07:e6:8c:
86:46:75:a4:0a:e8:18:8f:b9:a6:52:60:21:c3:7a:4b:f0:bc:
fc:a9:5b:c8:d9:fe:17:e6:8b:28:33:5c:0e:e9:f4:d6:90:5f:
a6:bf:26:a1:a1:79:43:cb:ee:95:55:82:b9:c3:5f:b7:a6:20:
2c:ce:0b:d8:fb:52:3c:ac:ca:f1:4e:0c:8b:61:9d:90:60:6c:
31:76:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:31:54 2026 by rpki-client