
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
File: f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa (raw, json)
Hash identifier: M3pKiJwYgVAvP+sqFVjnadzYM7ZDL9GlUaAjALGiUow=
Subject key identifier: 6D:4E:06:33:4B:04:53:42:3C:94:52:11:E5:5D:F6:97:FA:AC:C6:E8
Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial: 010D0C9F4328584ED001E5DFFE4F2E93DD2149C0
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 7782
IP address blocks: 198.163.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:e5:df:fe:4f:2e:93:dd:21:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=11991877-d597-428a-8084-1ce3d09c3e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:61:69:27:9f:a1:02:03:73:91:77:0c:b1:
54:ab:4e:09:e8:ba:f5:12:b1:08:42:04:ed:a0:a2:
7e:5b:59:4c:25:40:c8:69:df:c1:68:4b:98:e5:7c:
ae:9f:5d:de:68:81:64:12:78:e0:4b:9b:3f:3b:5d:
86:63:4a:b6:90:b7:93:40:44:8f:db:e7:c6:27:a5:
97:90:92:ea:e2:f4:1e:2d:9f:d5:49:d1:8c:14:e3:
83:07:1a:64:2d:2f:a4:10:3d:6b:41:6b:15:f1:3a:
45:37:72:2f:df:4d:43:10:37:65:e1:10:11:40:54:
58:56:d7:b5:18:86:45:ac:86:b6:cb:6a:6c:d4:92:
6d:e8:71:c3:9d:00:1b:38:8f:06:09:19:62:c3:c5:
35:f1:5e:91:ea:d8:e8:f9:93:a1:57:de:23:ea:f4:
9a:8f:b7:c7:40:a3:b6:1a:d1:26:9e:e3:c2:76:65:
6d:c5:06:7f:c8:07:f0:f8:74:f8:eb:27:79:c1:bb:
d3:d3:7b:cf:21:16:12:0b:34:80:df:d7:8a:6a:c6:
a9:de:41:54:a4:54:56:24:58:12:db:f0:7e:8a:b4:
cd:a2:69:fb:69:0f:db:3b:33:df:82:50:25:ef:99:
fc:d9:77:51:50:91:f0:b7:1d:ac:07:36:e3:77:9d:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:06:33:4B:04:53:42:3C:94:52:11:E5:5D:F6:97:FA:AC:C6:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
X509v3 Authority Key Identifier:
keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.163.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:2e:f0:0e:23:a8:08:31:56:ec:10:36:b5:0a:e8:4e:ec:f0:
a2:a9:bd:73:55:be:1e:4e:b1:40:d1:5d:7d:6f:16:b5:a4:6a:
95:b9:ba:80:32:46:b6:5a:f3:15:71:fe:d0:77:3a:f5:be:84:
a2:d8:7b:67:bf:06:f8:b3:ab:31:b2:6a:2c:ab:7a:15:8c:17:
04:82:cf:ba:6e:36:ac:22:98:1d:bf:71:04:34:31:9d:db:9c:
e3:2d:c0:46:3f:46:ed:0f:da:ad:47:89:39:67:c1:8d:3a:9d:
f1:b5:d0:14:ac:64:17:d6:02:73:62:48:50:03:47:0a:9c:7a:
15:13:1e:d7:b7:f4:69:05:a7:fc:a1:eb:7b:68:fa:8c:aa:16:
1e:91:8d:8e:dd:9b:dc:69:fc:82:06:d3:49:82:ec:e8:92:77:
6f:3d:18:0b:eb:5b:98:63:43:dd:b6:a0:75:31:73:62:20:a7:
c4:ab:c5:a1:c1:30:7c:7d:72:c3:c8:87:17:51:ed:b5:73:6b:
24:92:2b:e2:f6:4b:bf:76:19:7e:17:81:26:20:87:da:25:78:
99:83:fe:3f:1f:5c:eb:28:79:9f:6c:90:35:66:04:bb:17:4a:
24:39:2e:4e:30:7b:44:a2:fb:37:4e:30:90:68:32:3a:1e:30:
99:f9:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:46 2026 by rpki-client