
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f22042-0ac5-39e2-97b3-bc134de3c805.roa
File: b7f22042-0ac5-39e2-97b3-bc134de3c805.roa (raw, json)
Hash identifier: Eg67Y6Kc+w1JcZnBEWCQe8nqlejheFO6Kq5r3X86HcU=
Subject key identifier: E9:EF:00:53:B4:57:B8:8E:26:56:11:5F:EE:23:BB:93:26:8E:6E:D7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584F5A3304B69A8FEDA520F0B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f22042-0ac5-39e2-97b3-bc134de3c805.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 7342
IP address blocks: 209.131.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:04:b6:9a:8f:ed:a5:20:f0:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=6e227259-97a4-48bf-b9d6-8b5bd730bb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:6f:49:00:a2:5f:90:b2:77:f1:e8:27:67:
27:88:dd:fc:ca:8b:b4:aa:a3:a3:02:06:69:4a:3a:
62:4f:9e:e0:56:e0:d3:f4:13:a8:7a:14:fd:59:59:
b9:55:6f:f3:f0:4c:a3:b3:39:3a:19:48:0e:a4:53:
90:ba:54:57:48:1e:13:73:d4:4a:43:52:87:e1:9a:
f8:f9:90:16:5e:b1:69:f5:74:98:95:fc:94:45:27:
75:7b:d3:c4:20:34:30:67:52:50:9a:c7:92:71:0b:
25:96:ae:29:e1:27:c2:10:d4:30:3a:5f:93:80:a2:
f1:09:48:29:c6:5d:b0:a8:11:35:c6:6a:81:c6:73:
13:35:9b:03:f3:b9:c2:af:8b:6f:a0:c6:68:13:4a:
72:88:46:39:71:87:32:ed:c5:fc:a0:27:85:9f:d1:
be:4d:4b:46:09:e4:02:40:fe:ed:82:d1:33:df:c0:
9b:9f:96:84:e6:d5:1e:32:9c:20:45:6a:f0:ef:0c:
a1:f0:91:c0:ba:83:21:fa:05:6b:03:17:bb:a6:f7:
25:15:14:a6:9b:ad:9b:68:08:05:03:b8:91:0d:1c:
6f:82:7f:ce:9a:68:47:ee:9a:80:44:f2:92:f0:8f:
31:af:09:0f:c8:18:d7:d1:4a:20:5b:28:ca:ca:9f:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:00:53:B4:57:B8:8E:26:56:11:5F:EE:23:BB:93:26:8E:6E:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f22042-0ac5-39e2-97b3-bc134de3c805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:0c:f9:2a:a8:bd:c3:c2:84:d6:41:15:a8:87:0c:99:fc:33:
c7:40:d9:7f:7f:86:2f:83:0f:fe:ab:72:85:dd:24:d2:a1:eb:
ee:17:b5:1d:f3:00:ef:b5:80:f5:df:68:b7:c1:77:07:ca:1e:
c7:06:eb:47:33:52:ec:63:3e:06:32:e9:83:c8:6a:92:f3:e1:
90:a3:ac:19:e4:f0:9f:3f:77:b9:b9:dd:42:5c:4a:95:9d:40:
d6:dc:0e:6b:7b:60:ee:1a:0e:e2:70:9a:7b:4a:12:70:e3:ee:
e9:30:2b:d8:ae:6a:ad:88:50:87:9f:ea:aa:92:98:19:13:c9:
b0:b6:f5:51:1d:a0:33:a3:5a:b6:8e:65:40:0c:21:af:f6:94:
d3:ae:02:a1:2b:e6:e3:4d:b8:f0:86:51:b5:5c:d7:4c:11:bf:
2f:d6:7c:35:31:c1:6b:e9:02:c8:81:a6:d1:09:19:ee:c1:d1:
a8:ba:79:d4:17:56:38:55:54:7e:fd:be:29:7b:f9:17:a3:db:
22:bc:12:cf:5d:08:27:d1:fe:33:77:59:91:de:af:c3:86:0a:
3f:48:f4:d4:e5:af:c9:83:ea:eb:ee:77:7e:23:91:3e:d9:ea:
b1:ef:66:92:59:fa:c8:e6:a0:26:31:fb:cc:b0:78:5c:a0:b6:
e2:c4:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:46:11 2026 by rpki-client