
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa
File: ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa (raw, json)
Hash identifier: +nWMzznwe0AMQp0DfQqbV1Pq2TieMisxUbRTwEAx2FI=
Subject key identifier: E0:2B:85:38:03:8A:BC:79:07:46:D6:0E:E5:73:78:FA:D4:B9:52:9F
Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial: 010D0C9F4328584EC20C60BD3124625AF5D586C0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa
Signing time: Fri 07 Aug 2026 13:00:11 +0000
ROA not before: Fri 07 Aug 2026 13:00:11 +0000
ROA not after: Thu 05 Nov 2026 14:00:11 +0000
asID: 6939
IP address blocks: 209.142.68.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c2:0c:60:bd:31:24:62:5a:f5:d5:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Validity
Not Before: Aug 7 13:00:11 2026 GMT
Not After : Nov 5 14:00:11 2026 GMT
Subject: CN=f6f4bde3-be5d-44c9-89d9-fdbecab52dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:fb:23:b3:13:61:3b:2e:ff:cc:24:73:10:
90:ed:36:77:c5:69:d7:cb:db:4d:38:61:65:c7:ec:
c1:55:3f:e4:67:5a:8a:64:67:71:41:29:10:c1:bc:
d6:fb:4b:8e:66:ec:61:14:9a:42:84:24:0b:25:de:
07:2a:f9:76:09:55:a8:3c:ed:c2:33:77:bc:43:b0:
71:aa:28:09:72:37:74:ea:cf:04:c6:18:d4:91:dc:
59:23:b9:26:26:56:dc:9e:01:93:83:a9:3b:dc:f4:
3f:a8:da:4a:50:6b:9f:3a:79:1f:60:e1:d2:7c:9e:
5f:4a:39:7d:39:d3:fe:c5:c8:21:71:b6:89:1b:67:
2a:e6:67:cf:72:93:8f:9b:3b:f9:12:42:4f:be:dd:
04:47:dc:7f:8f:e0:a4:a9:6d:4a:d0:4b:4d:dd:e7:
b8:ee:0c:cb:56:ec:4c:22:80:e9:20:20:7b:f0:53:
47:dc:0b:c2:f5:83:c7:c4:22:8d:86:a7:1e:54:44:
ec:f1:1e:fe:e3:d8:1c:58:23:47:cf:a8:ca:cf:ad:
17:0b:26:9d:c1:0e:c4:1d:dd:70:2c:97:a2:48:03:
75:d2:46:f2:5a:6a:af:ed:73:da:cd:5c:9c:a2:65:
06:83:f7:b1:da:eb:2d:24:ca:cc:0c:51:75:c9:9b:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:85:38:03:8A:BC:79:07:46:D6:0E:E5:73:78:FA:D4:B9:52:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
X509v3 Authority Key Identifier:
keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:dd:d7:6d:30:44:d5:fb:d4:fc:f0:64:4b:5f:9d:bf:f1:96:
ba:03:18:d6:5d:39:48:19:bd:79:c2:79:57:cc:b0:80:dc:06:
74:29:fd:cd:1d:9c:01:8f:40:ba:02:81:e2:46:6a:08:c3:30:
a5:69:88:92:11:c3:17:f0:04:f5:72:d0:b5:03:11:96:c1:fb:
f6:cf:83:6c:70:42:c1:50:dc:2b:39:ff:3a:86:ca:40:6a:d0:
74:9f:21:52:32:a4:30:0c:09:55:92:77:fb:a6:a3:26:6d:da:
7b:f6:c9:f6:8f:e6:1c:02:9a:fb:d3:ed:ae:5d:99:91:1d:28:
37:eb:7c:37:ad:0d:1a:d8:ae:3f:5c:2e:41:46:97:00:d1:29:
06:cc:53:b4:a7:85:9b:77:fd:d0:b1:30:ca:3f:23:6a:2b:da:
d1:c6:3e:be:1b:d7:4c:a0:a3:44:ee:3f:c1:5b:b3:d8:0b:82:
b7:e0:7e:68:21:ce:e7:03:4a:42:d0:30:84:ee:1f:13:4f:04:
96:f5:a5:dd:89:6f:9c:65:61:31:9f:20:dd:15:5c:b0:8c:63:
4e:97:f7:d0:88:98:48:11:e9:4d:f6:de:f6:df:01:ae:a2:ba:
be:01:2d:e3:8a:40:67:59:52:83:3e:5a:5d:1a:49:4a:c7:e5:
3a:d6:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:14 2026 by rpki-client