
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa
File: 8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa (raw, json)
Hash identifier: JvUZfJYV8NTQYegdCcuXPRce9aX4RSM799CyFToevBk=
Subject key identifier: 0F:6A:3D:59:0B:DA:73:FC:E7:17:E3:02:8D:EE:8B:66:4A:E4:10:6C
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584F093CCFF6B4B6A7FBA72E4000
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 25645
IP address blocks: 209.42.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:cf:f6:b4:b6:a7:fb:a7:2e:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=566b0d89-e4e4-4048-9222-9e744c8b06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:9b:7e:df:d9:17:ac:57:da:ef:6a:63:4c:
60:09:e7:eb:a0:3f:b4:76:37:22:cd:63:18:eb:bd:
df:63:c7:39:44:93:48:d3:fe:d3:e7:b6:a4:30:9d:
a2:63:9f:ff:08:c4:cb:51:21:69:06:1b:c7:17:db:
e7:87:0a:27:4f:5a:08:94:7f:f0:6a:e9:cb:3d:4d:
4c:b6:bb:7e:86:13:ec:20:33:4f:3f:ee:90:f6:ff:
db:6e:a3:52:10:de:93:01:74:17:de:f9:c4:fa:02:
8d:39:8f:04:a1:2d:5c:69:55:ed:29:d1:ea:47:de:
91:d9:52:06:3a:78:e8:5a:a1:a5:70:2f:80:79:9e:
38:73:a3:20:f7:bc:c6:c8:5d:70:63:62:af:15:ae:
f1:51:76:f4:fb:29:16:c0:4b:89:f5:40:dd:22:c8:
c7:46:10:ae:08:99:f5:ac:c4:12:14:23:55:cd:0c:
1b:45:d9:ed:5d:a6:82:52:da:07:9c:5e:6e:27:0a:
78:5d:b2:1c:4f:4c:33:7f:1a:2c:4a:dc:08:fc:9b:
78:85:2c:51:d8:79:68:a4:ac:ed:af:e4:71:7c:c9:
89:5e:2d:5e:0b:e5:6e:26:a9:f7:a3:2d:8c:81:d9:
e1:cc:d9:a9:c9:0a:8a:8b:55:f7:75:9f:df:a5:92:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6A:3D:59:0B:DA:73:FC:E7:17:E3:02:8D:EE:8B:66:4A:E4:10:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.42.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d6:a6:0b:fa:6d:bf:1f:e0:a2:34:99:85:16:95:f6:6a:f0:
a2:80:32:df:c0:eb:d5:be:69:6b:16:a5:37:b4:68:56:02:df:
b1:a9:6c:75:e9:d5:c3:93:1e:13:6d:c0:29:8b:b2:79:d4:65:
43:6c:a8:11:2a:cd:a0:5d:33:d3:ae:f1:1d:dc:b7:84:df:0b:
f6:c1:9a:fc:8e:22:8d:c3:ac:21:6a:18:28:45:e9:72:5a:61:
6c:e8:e4:27:e8:8c:6c:1d:53:dc:a4:c6:10:d9:df:e9:18:ec:
03:5f:24:e9:8b:4c:b6:1f:48:8d:4b:32:33:40:71:1d:70:3d:
d5:d4:b4:32:b4:be:60:77:3b:59:40:6d:7e:a3:1d:65:16:05:
7c:d1:a2:1b:bc:bb:c2:09:8f:48:8b:da:0e:88:2e:8e:af:f9:
97:0c:ec:d1:63:a5:80:03:09:ff:51:2f:89:a0:44:9f:89:0f:
a0:31:ff:33:14:54:6a:1b:ad:4e:2b:93:3a:ab:35:e9:4c:34:
b1:be:23:4c:72:57:e2:89:ce:71:75:60:00:c7:ef:63:35:be:
a9:e9:c6:9e:c8:b7:1b:0d:65:aa:e5:c1:05:85:6c:98:b4:30:
02:d1:64:16:d4:c5:72:b0:66:83:24:2f:78:5f:78:cf:18:09:
a9:09:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:24:02 2026 by rpki-client