
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96805c73-c0ae-3329-9ed8-3fa832e4eeb0.roa
File: 96805c73-c0ae-3329-9ed8-3fa832e4eeb0.roa (raw, json)
Hash identifier: cUxmfkuXr27EbL5xODxO3kPE3Y4hiTzZpN1YyJOlRZI=
Subject key identifier: 84:36:41:5B:06:03:F8:5B:EC:A7:5A:90:C8:4B:C6:9F:A5:B2:C4:E8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F6C5827B16A448207112241B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96805c73-c0ae-3329-9ed8-3fa832e4eeb0.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 32787
IP address blocks: 209.200.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 25 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:27:b1:6a:44:82:07:11:22:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=705a2048-f54b-4a24-b7d8-ef11e242725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:6a:37:db:00:76:73:8c:d8:4d:39:8a:65:
23:99:53:34:82:41:40:5e:80:4a:7b:fd:05:f5:18:
51:00:c3:3b:bb:f1:38:91:fc:f6:21:b7:61:8e:5d:
35:b2:45:99:b6:01:3d:84:f2:7f:8d:3a:20:07:46:
49:54:9f:34:fb:35:1b:81:79:70:ff:a9:f7:66:3d:
58:15:5c:63:55:72:ab:cf:95:26:4e:c7:00:34:11:
fe:c3:56:64:0e:40:4a:2b:54:59:27:8e:47:b8:0f:
b2:be:de:4f:3a:ea:e4:30:64:30:0e:4a:67:a6:de:
d0:80:85:94:dc:44:b9:e2:24:a9:fc:8b:93:ec:a3:
5b:7d:91:96:4e:94:8f:45:3d:5d:37:eb:e0:6a:03:
00:15:ad:eb:4d:24:6b:09:6f:14:ef:c6:5f:fb:04:
f8:73:03:49:61:73:7c:6a:ab:f0:79:d4:d2:ba:67:
49:18:51:d0:51:24:11:45:33:ab:a5:47:81:3c:e0:
2a:90:29:1c:00:6a:44:95:f2:53:b4:05:f9:05:71:
95:9f:f4:d7:1d:de:6c:2f:0a:de:3d:bd:c3:16:4c:
a2:64:e8:07:bc:de:12:00:77:c4:64:d8:8f:9c:09:
12:d9:a7:10:ea:97:4a:e1:3c:d7:ff:b3:2b:80:7e:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:36:41:5B:06:03:F8:5B:EC:A7:5A:90:C8:4B:C6:9F:A5:B2:C4:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96805c73-c0ae-3329-9ed8-3fa832e4eeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:74:ad:54:6c:40:5a:62:5a:3e:9e:90:07:15:92:28:57:a7:
2a:c8:9f:6e:c1:f6:76:4c:ca:5f:fd:b2:d2:77:ab:b3:ef:21:
a6:35:d9:27:21:02:3e:47:ff:9c:6d:31:ce:81:87:85:3a:c3:
6b:5e:f1:26:67:11:c1:fc:a9:78:ca:b6:1b:06:fc:53:bf:15:
88:4c:ee:05:dc:4e:9e:72:e6:87:7e:07:43:81:17:c9:1f:a4:
af:eb:4e:b1:a0:cd:63:a0:ac:4f:6e:9c:b3:e8:60:ef:c2:dd:
50:76:bf:6c:06:8a:c7:d5:2e:dd:3f:16:2b:d9:fb:e6:71:bc:
97:7b:ed:ae:8f:9c:04:1b:7f:19:d5:85:9f:c2:56:68:43:63:
6e:a8:fb:a8:fa:c6:62:67:65:15:6f:86:81:eb:54:4b:bf:d7:
66:7f:7e:93:f7:ae:11:a6:d0:41:17:40:62:f5:c5:38:63:75:
4a:9b:6f:fa:de:97:aa:bc:93:73:98:3a:bc:40:ad:cc:09:72:
fe:ce:36:e5:1a:cc:98:67:33:b1:d2:74:45:4c:33:a3:50:ea:
97:e6:9f:f7:9e:fd:25:d4:c5:12:17:34:9c:a0:a6:b2:8f:8e:
aa:e2:03:48:c4:6e:c0:c5:74:e8:87:b3:36:13:ff:e6:37:71:
b1:82:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:22:58 2026 by rpki-client