
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bd451d30-e7b8-3686-beb6-6e11f0748ba5.roa
File: bd451d30-e7b8-3686-beb6-6e11f0748ba5.roa (raw, json)
Hash identifier: k8JoUfrZfAqrM2MUuBLE5AbdrxuAgehUzJe3oOfTNbc=
Subject key identifier: 73:A4:21:85:E1:8D:D3:A3:78:1E:C3:26:5B:9B:09:AE:07:BA:44:A6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584F51D296F897763BC574FB2280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bd451d30-e7b8-3686-beb6-6e11f0748ba5.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 81
IP address blocks: 128.109.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:96:f8:97:76:3b:c5:74:fb:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=835f3558-73f1-4ec1-8d90-ffe26803b6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:07:f9:ab:79:28:4a:33:a9:29:c3:7a:50:
8c:de:9e:0f:99:a9:4d:c7:8e:bf:ac:43:3e:a1:64:
0b:56:a7:52:2d:2f:2e:40:d9:f8:20:e8:7a:d2:40:
45:35:2f:ff:59:e6:d3:31:c2:e6:5e:be:9e:80:1f:
f1:4f:f9:66:94:9e:1b:d2:6a:9a:07:80:1b:36:44:
4b:14:19:aa:dc:a4:23:7f:c5:ce:6d:3d:62:a0:45:
02:87:11:ce:ab:29:78:8a:b4:ba:f3:a6:83:b5:29:
09:78:63:b0:f4:63:a6:ea:b3:8b:55:f2:e8:8d:1b:
e4:2c:81:4b:1d:0b:10:b3:63:3d:f9:e4:1f:0a:2c:
b9:42:ad:d1:12:91:be:f8:fd:39:a0:aa:18:93:35:
07:b7:5a:91:e9:11:5e:f7:34:9a:27:dc:d2:e7:51:
d0:04:42:6b:d0:a7:4c:a5:a0:b8:df:b8:25:58:1e:
9b:15:cc:72:d6:bb:76:cc:12:a6:8c:bf:f3:61:8e:
f9:83:e8:93:12:8a:4d:1f:7a:5e:f4:ec:c2:a4:15:
24:7a:75:dc:1d:a8:e8:84:d0:77:d4:5e:25:85:c2:
58:fb:48:12:41:38:b5:15:9e:52:51:2c:65:fa:4c:
38:f5:2a:ad:53:37:27:63:e2:6e:b5:03:18:f2:9d:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:21:85:E1:8D:D3:A3:78:1E:C3:26:5B:9B:09:AE:07:BA:44:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bd451d30-e7b8-3686-beb6-6e11f0748ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d5:7a:d8:15:f4:5a:85:86:46:21:80:35:de:42:49:60:d5:
5d:5b:c2:e2:d5:11:91:35:2c:26:d7:7d:11:cc:05:15:a2:49:
5c:ae:a9:f7:97:67:43:bd:c6:68:52:26:4c:95:44:d3:36:11:
0f:cf:2d:82:44:91:14:9c:ca:be:f0:f6:5b:ea:0c:2f:88:bf:
54:e3:48:2b:ac:fc:62:14:7a:ae:fd:09:a8:86:3a:32:51:91:
4f:fe:4d:6f:1a:1d:15:f6:66:8b:9d:39:55:46:93:ae:bc:41:
0c:ba:36:e0:02:d5:8d:66:23:7c:0f:3f:d2:07:7d:92:4e:e7:
a9:4c:8a:5a:4a:a3:40:99:b0:2c:6b:c9:02:47:25:fe:5f:34:
07:0d:2b:45:a6:6b:f4:c3:6a:b4:c0:69:9d:02:57:c0:35:81:
26:01:4f:62:a5:fe:f7:c4:10:dd:99:b0:9a:32:af:18:b6:78:
cf:56:39:29:64:74:4b:ae:f2:8c:bc:38:b6:3d:75:79:f3:47:
0c:64:fd:27:f6:2e:3a:08:a6:49:0e:b0:4e:45:4a:08:f6:98:
d7:e3:2e:51:b3:a7:07:f3:39:22:ef:04:53:0b:b1:20:c2:0d:
e5:9d:6d:01:b2:2f:97:12:1e:1f:52:64:c0:83:b4:21:c9:5b:
c1:e9:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:02:38 2026 by rpki-client