
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa
File: bdd570f9-f8f6-3a64-a971-860dedaf000e.roa (raw, json)
Hash identifier: SvruZxe3cL4xTFQfF4NHKmAc/+FGvlsFUDT+3wg03Cw=
Subject key identifier: 67:6B:3B:5A:A6:9B:79:9F:12:65:7B:4E:DD:A3:7F:59:71:87:30:75
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584EFCACEE02E53D700E27822700
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 25645
IP address blocks: 209.42.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:ee:02:e5:3d:70:0e:27:82:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=deafd77e-216f-4d67-874c-61e0d34e1e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:ab:82:0a:c5:84:67:73:47:9a:44:9c:3e:
94:fc:1e:44:b4:04:b3:03:72:03:2b:52:b7:5b:e0:
ae:c0:f0:95:54:f4:97:6d:ba:86:21:dc:07:87:a3:
3e:b9:ab:fb:33:9f:71:ef:09:e1:fd:7e:59:e0:10:
20:13:7a:da:dc:19:05:24:82:bc:e3:64:db:3b:a2:
b6:c3:95:56:71:67:5a:d7:12:1d:b6:94:5a:6b:41:
97:ac:4f:ae:b8:23:7f:ab:70:76:67:0e:ce:a7:88:
e3:7c:ea:79:2c:09:b8:3b:05:10:3a:71:ff:a8:8b:
64:2c:7d:8c:43:b8:0e:d4:14:2c:3e:5d:ce:5c:9f:
bd:71:77:52:eb:01:18:01:7e:85:45:a5:71:04:d0:
66:a0:cf:66:26:ae:99:53:be:be:ba:3a:4b:fd:94:
4f:33:3c:7e:46:ac:65:45:f4:c5:8b:0f:8e:ee:2e:
c3:f9:0d:a5:0a:76:b9:bb:0c:ff:3f:93:1f:3f:81:
50:65:4c:55:2b:af:28:13:42:f6:9e:88:08:59:92:
37:be:9f:c7:c5:6e:ae:6c:47:88:d9:80:8b:90:36:
26:9c:fa:56:03:44:ba:0a:f7:bd:57:57:30:72:85:
67:2d:e6:6a:12:19:dc:67:d3:0d:d9:c6:e4:1e:d6:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:3B:5A:A6:9B:79:9F:12:65:7B:4E:DD:A3:7F:59:71:87:30:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.42.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:a6:11:48:98:01:09:22:48:18:33:7b:9e:1d:b6:3e:6c:83:
44:65:6f:86:e5:21:af:da:89:ce:f1:ab:9b:43:09:e9:2c:da:
6b:60:e9:26:97:61:dd:ee:05:d2:3c:98:d3:67:c7:4b:e7:25:
58:6f:19:05:9c:66:17:0a:bd:b7:a1:2d:fd:e5:54:4b:93:b4:
31:92:eb:f8:02:83:e8:20:2a:44:51:e3:f6:2b:84:99:ee:de:
2d:3c:0c:7a:e7:61:eb:86:d1:69:cd:5a:68:f5:b2:62:82:9a:
b9:17:63:4b:0b:e1:e4:5e:e8:04:17:32:11:9b:f5:40:48:64:
45:f2:f1:50:30:17:14:1a:aa:99:9b:de:dd:29:af:d2:83:7a:
ad:5a:c3:3c:91:b9:9b:0d:14:c2:1f:7a:6b:cc:23:15:f9:21:
e9:21:ec:38:86:c9:85:24:59:39:ff:70:1c:4d:0a:16:78:69:
4d:4f:13:6b:09:5f:28:84:2f:aa:64:2d:97:40:1b:af:ba:14:
d1:50:c7:4d:3f:51:4b:ab:11:e6:bf:1a:43:0b:9a:d2:7b:a8:
78:0e:cf:09:4a:dc:a9:84:05:b9:53:f1:69:29:9e:65:80:a5:
e6:a0:86:d9:bc:71:10:07:a1:7f:30:a7:68:dd:90:64:96:75:
cb:a7:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:26:02 2026 by rpki-client