
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa
File: 8602a905-b263-30a4-8140-3c7d39eccf04.roa (raw, json)
Hash identifier: AabqmVmjrRfADYRULb/YdZowDPo2HKMRs9js9C7n2sg=
Subject key identifier: 14:43:61:47:8E:95:C0:4F:DE:A5:4F:EE:E9:67:B5:67:8A:05:BB:E6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EA7A044B510E3A7FBAA9E96C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36040
IP address blocks: 209.85.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:44:b5:10:e3:a7:fb:aa:9e:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4131eb82-bc0e-46ff-b668-1bd6bdb34fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3e:39:50:74:ce:c8:03:66:e3:65:7f:69:a3:
e4:a2:3f:01:ad:8c:57:bd:40:e3:16:44:43:8b:10:
e6:ae:c0:a3:3c:bc:c8:11:fe:d9:3d:6e:55:af:23:
cc:44:73:d2:1e:77:c4:b0:5c:8b:d4:b7:24:c9:ee:
75:34:94:29:41:b1:ec:96:c1:18:07:e1:55:6c:93:
9e:a7:73:0f:54:b8:da:5e:ac:29:70:2e:33:8d:98:
40:88:c7:81:c8:2f:2a:e4:be:1c:b9:e5:d6:51:d7:
fa:0c:ac:c6:77:d6:23:ca:a6:ba:89:f9:52:ad:3d:
15:27:92:d2:80:e7:92:ca:f0:1f:95:de:ff:b9:f0:
cb:7c:1f:18:d6:47:ba:ed:e1:db:50:3e:34:4e:60:
26:a1:16:f8:07:08:37:0a:6b:78:e6:9b:ac:2a:d1:
18:a6:44:64:6d:a6:62:4c:e9:08:2a:fd:76:8f:74:
6a:45:22:42:cd:5e:71:1c:10:8b:29:e6:7b:eb:a6:
95:fb:71:7d:d2:fb:09:59:76:01:7d:11:a2:d8:2a:
81:19:2b:f2:77:37:7c:7f:85:d7:ed:78:2f:05:a8:
11:be:da:3c:4c:26:5c:a3:35:1e:06:44:49:31:46:
2a:fc:00:8f:29:2f:36:30:75:ff:f2:a4:ca:40:4f:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:61:47:8E:95:C0:4F:DE:A5:4F:EE:E9:67:B5:67:8A:05:BB:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:f5:30:91:67:88:66:15:de:f5:7f:85:e0:49:b6:d6:17:ee:
80:2b:30:57:12:0a:39:0a:05:92:b4:f2:49:5f:60:5c:c9:cd:
36:7b:b7:0b:4d:08:c4:77:de:de:1b:1c:56:e1:72:1a:5a:8b:
ac:09:69:29:45:e9:71:c4:78:74:16:ac:86:5b:05:83:d0:26:
61:7b:fc:ba:6e:63:bb:64:48:f0:2a:f7:85:71:13:64:82:89:
13:14:3a:ee:79:28:f7:5d:9a:cc:38:31:2a:53:0c:d4:b1:c7:
e2:b5:e2:c9:81:d0:75:44:ba:75:0c:89:a4:5e:ce:18:f8:33:
ce:d8:d1:4c:92:95:6b:e9:78:bd:f4:57:90:e8:50:d2:13:f3:
5d:3e:51:bb:91:6c:cd:05:d9:fe:14:74:97:cc:8d:44:6f:de:
25:00:08:48:c4:f2:93:ad:78:90:d7:e9:de:2a:21:a3:f8:2f:
be:46:d8:e8:c1:c1:92:67:43:5f:bb:ea:3b:8c:1e:63:7d:46:
90:e4:bd:4b:02:5c:82:2c:4c:32:64:18:13:3b:c0:d3:01:dc:
1a:c5:55:75:93:60:92:db:7a:ff:76:82:30:cb:5d:c0:d7:c2:
c2:fb:ba:f0:b3:8f:69:79:05:82:43:df:6f:5f:73:48:94:cd:
77:7a:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:48:30 2026 by rpki-client