
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
File: 17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json)
Hash identifier: SzRtJjEV/HMJV7OB/QWJQmqS1Cz41dd2ippbK+LU/7k=
Subject key identifier: 1C:24:9D:33:9F:F1:10:4D:95:9C:45:DA:27:34:09:06:AE:F1:73:EF
Certificate issuer: /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial: 010D0C9F4328584EC7A1CD26D1F3E3F146374700
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
Signing time: Sun 09 Aug 2026 13:00:12 +0000
ROA not before: Sun 09 Aug 2026 13:00:12 +0000
ROA not after: Sat 07 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 209.163.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:a1:cd:26:d1:f3:e3:f1:46:37:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
Validity
Not Before: Aug 9 13:00:12 2026 GMT
Not After : Nov 7 14:00:12 2026 GMT
Subject: CN=8f5881a0-9016-43d7-9953-cc503486ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:6e:53:8f:75:23:35:fc:7c:ca:ca:10:58:
28:31:6d:51:d0:91:6d:a9:74:24:1d:fe:a1:6e:f6:
39:e2:e3:f2:62:d1:b4:4e:aa:fd:9a:a9:6e:37:bd:
1e:b6:99:34:04:11:59:d5:8b:f3:66:ee:66:20:57:
2d:ab:61:02:2f:71:99:b3:0c:d4:f6:c0:a1:3e:14:
a8:d8:35:62:b8:52:06:05:68:36:8e:dd:a6:5c:99:
29:6e:c9:6a:7c:01:f7:ec:05:c5:79:85:57:5d:c4:
62:5c:5b:54:5a:de:9f:81:36:95:a4:13:97:ce:a5:
86:b1:28:9c:c7:62:76:fa:be:9f:d7:11:a4:32:83:
ae:b2:10:78:7d:d9:7d:86:fe:25:ee:15:53:34:e6:
18:80:c3:79:0e:61:bd:57:c5:8a:4c:7e:08:45:2c:
15:9b:43:68:cc:bc:ea:c7:e5:52:9f:4d:be:e2:87:
18:e6:0b:82:50:f4:e8:e5:9e:7c:19:a8:2e:05:25:
73:f3:e7:72:8b:cc:cc:92:a2:15:5d:16:3b:a3:35:
c1:32:48:14:b8:ab:36:35:5d:4a:e2:89:5b:e9:a5:
84:93:cc:48:92:fd:82:0a:9f:45:9a:b5:b8:15:2a:
fd:e1:bc:b5:57:63:17:6a:25:55:46:e7:c6:23:73:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:9D:33:9F:F1:10:4D:95:9C:45:DA:27:34:09:06:AE:F1:73:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
X509v3 Authority Key Identifier:
keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
sbgp-ipAddrBlock: critical
IPv4:
209.163.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:28:59:79:64:19:c4:99:fc:fd:ff:b0:2f:a0:27:f8:76:7e:
07:93:c7:92:74:57:46:a5:e6:d7:de:d6:0a:a2:d5:4e:86:b5:
72:57:ad:49:5e:6a:e8:9e:cf:b3:f3:98:6d:b9:3a:f6:6c:93:
31:50:fb:63:c0:ee:8b:49:0f:2d:03:ea:14:6d:d0:97:f3:49:
8d:61:51:23:13:1d:85:6d:1c:8d:1d:11:ff:a3:5f:9f:8e:9b:
e1:a8:64:3d:8e:30:ca:18:ca:c8:55:98:2f:83:10:61:15:f5:
98:ec:1a:cb:0d:18:2d:aa:8a:8f:51:25:e4:82:d0:7c:30:01:
07:d9:32:7a:33:04:26:3a:42:a2:21:c8:78:0a:3c:33:8b:9a:
ac:1c:96:e3:0e:ff:ea:1a:a9:65:2f:90:0f:1e:33:b4:26:cd:
81:32:a6:51:f2:f0:b4:49:2c:d0:09:94:d4:f9:38:58:7a:9f:
fe:d1:1a:d4:32:4b:b2:dd:10:20:ce:30:53:1b:6a:f6:32:11:
7e:78:e2:47:21:4d:41:d3:56:3a:73:8c:81:8f:30:41:1a:2c:
c0:d0:6d:b5:48:53:fa:22:5d:8d:83:17:a0:7b:59:4a:03:b8:
84:35:58:20:17:f3:6e:7d:90:57:f4:a7:7b:2b:c8:ea:d6:03:
44:cf:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:27 2026 by rpki-client