
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa
File: d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa (raw, json)
Hash identifier: joWSX1yFz1osqOT7WeSp1X83b4QD29K23D18m6E1AHA=
Subject key identifier: 4F:36:D5:74:91:18:E5:92:4D:81:76:DA:AE:11:89:CE:E6:20:2B:CF
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584E4A60AB739EFD2C3F45E45100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa
Signing time: Thu 25 Jun 2026 16:13:06 +0000
ROA not before: Thu 25 Jun 2026 16:13:06 +0000
ROA not after: Wed 23 Sep 2026 16:13:06 +0000
asID: 54888
IP address blocks: 209.237.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:60:ab:73:9e:fd:2c:3f:45:e4:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jun 25 16:13:06 2026 GMT
Not After : Sep 23 16:13:06 2026 GMT
Subject: CN=53fa5bd7-5c93-43dc-8cbc-5070760ed4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:3c:4a:6a:ac:23:62:54:47:fa:76:0a:3d:
03:da:fa:88:a8:4b:e1:69:e0:0c:58:bb:f4:ea:09:
97:c1:e3:d2:c1:c1:69:7a:87:ef:38:14:c6:26:6c:
4c:f7:8f:68:ce:5f:01:21:0b:cb:27:27:49:e7:d5:
d1:39:0b:4d:74:b2:f7:77:90:6b:ae:82:38:b6:87:
ee:ba:f1:ee:75:0f:a2:60:7d:8e:5a:3b:1f:bc:53:
56:bc:1b:15:31:8e:a7:28:17:7a:7d:a8:c9:b8:98:
67:e1:e8:b1:6a:80:d3:50:f0:df:fa:90:f1:5d:f1:
59:d3:df:b9:a8:1c:fb:b9:36:ce:e1:f7:95:b6:52:
bd:8d:1c:95:e2:b5:a0:69:b2:9a:5e:5f:86:30:30:
d2:58:d4:17:43:d8:0e:74:97:58:93:f0:2b:0b:3b:
88:42:7e:14:61:36:44:2d:3f:bc:c7:86:3c:03:97:
41:b9:71:f8:57:22:72:f6:60:df:64:25:e5:a3:f3:
f2:34:e2:e9:fe:03:f4:ce:e0:b7:18:76:4a:98:fa:
31:10:55:da:f1:8c:bb:02:a7:b1:c3:38:14:c6:ad:
98:7f:41:f6:14:97:80:87:22:ea:7d:fb:ab:f9:e5:
2d:1a:89:e0:4d:0d:2b:d0:3a:ea:76:b3:de:25:52:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:D5:74:91:18:E5:92:4D:81:76:DA:AE:11:89:CE:E6:20:2B:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:55:74:7c:5d:4d:58:47:c0:76:e6:45:73:76:56:15:5f:34:
09:34:76:2f:b5:f7:ea:56:d7:4c:de:0b:98:c9:47:d2:5c:e8:
79:a8:0f:ee:6b:30:5e:04:9a:58:6d:45:79:7a:a6:0b:c0:25:
7a:5e:43:25:69:8d:e5:59:e9:f4:22:cc:99:15:0a:d7:a6:66:
42:a9:8d:3c:05:0d:4c:0e:13:c6:24:c8:7a:1b:44:2f:3b:d9:
90:e7:6b:42:24:9b:99:df:8e:b7:f3:2b:c8:d6:de:62:5b:b0:
e8:98:98:e7:2b:4e:75:fc:bb:ba:15:65:fc:00:db:61:dc:ae:
49:06:4c:50:16:6e:04:fc:7f:22:b8:8c:06:d0:94:5e:f7:da:
3c:5f:68:91:6c:bd:af:ec:35:df:20:55:b1:52:ac:d1:43:60:
95:cb:61:b5:89:5f:fb:aa:7a:7b:85:28:33:f1:41:f0:7d:a9:
b3:09:ef:fc:24:bf:11:d5:71:34:fe:bb:c2:c9:3f:a7:bb:c8:
fc:c0:d2:59:75:d1:d7:de:4d:b5:00:8e:e4:c0:4c:e8:6f:1f:
5e:d2:d7:f7:26:f7:b4:48:25:fe:1c:64:09:69:1e:93:81:e0:
a2:8c:57:8a:a5:31:fb:7d:ad:72:b5:93:72:9d:ca:48:fa:16:
30:11:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 18:20:31 2026 by rpki-client