
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
File: 17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json)
Hash identifier: MZs61Lsor3O73UrFv3iQSvwUvVkERQIMYJOFfgCiWdM=
Subject key identifier: C6:6D:BB:26:83:97:94:DD:69:B7:D0:38:5C:48:69:7F:5F:3D:58:80
Certificate issuer: /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial: 010D0C9F4328584F698D7E2FA17A4CF5EA255900
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
Signing time: Tue 06 Oct 2026 13:00:13 +0000
ROA not before: Tue 06 Oct 2026 13:00:13 +0000
ROA not after: Mon 04 Jan 2027 14:00:13 +0000
asID: 16509
IP address blocks: 209.163.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:8d:7e:2f:a1:7a:4c:f5:ea:25:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
Validity
Not Before: Oct 6 13:00:13 2026 GMT
Not After : Jan 4 14:00:13 2027 GMT
Subject: CN=e74f5d46-752f-4ed8-a137-0ebd0675ad21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:6c:dc:17:7a:d7:a2:2d:42:c7:5a:bb:ca:
f3:4c:10:81:65:6f:6f:ec:fa:14:7b:d7:9a:da:06:
54:49:db:50:a6:d0:2e:56:ff:b6:5d:c6:e9:6a:0f:
e0:b6:f0:33:40:e9:4b:84:1c:b9:c0:f8:da:fc:cb:
16:71:18:f4:bb:ad:e5:2b:ef:2e:ac:63:77:d2:0e:
76:ce:69:67:5a:b8:bf:54:dd:c9:81:36:e9:ad:28:
b6:26:86:82:64:f4:57:bf:ac:bd:0a:a0:14:60:0b:
51:b7:50:1c:06:8f:b6:0f:14:e6:89:e5:55:41:56:
73:b7:10:d0:ab:87:56:d8:1e:e1:1a:81:0e:66:3d:
99:c0:0a:94:29:dc:77:fa:1b:2f:df:a5:a7:be:5b:
67:a9:52:aa:e3:6d:6a:2c:96:d6:ed:36:a2:06:bf:
06:51:3c:67:c4:8d:81:f9:a1:55:ea:3d:d1:f6:4e:
ec:0b:e7:49:fc:15:c0:6f:98:d7:6f:6a:d2:06:29:
ae:d8:0f:fb:74:53:3b:a1:10:f3:cb:82:c4:86:44:
43:00:e4:eb:d3:b7:80:dc:eb:3a:dd:31:1b:01:21:
43:29:5f:1a:06:55:79:81:4f:b1:37:59:f1:08:ee:
d2:6b:85:05:1d:c7:18:81:4d:80:a8:f9:60:aa:88:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:BB:26:83:97:94:DD:69:B7:D0:38:5C:48:69:7F:5F:3D:58:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
X509v3 Authority Key Identifier:
keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
sbgp-ipAddrBlock: critical
IPv4:
209.163.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:41:50:2c:3d:d6:f3:15:c6:c5:b3:a9:95:fe:54:56:26:cb:
b6:4a:46:ee:14:ba:fd:92:80:f8:f4:77:f6:cf:7d:af:ac:8f:
ee:25:7a:23:0a:ea:d1:de:54:e8:71:9c:5e:a3:1a:48:aa:01:
f9:1a:5b:48:36:39:3e:9d:ec:5b:a6:fa:e1:7a:56:b3:11:6f:
74:39:62:d5:20:e2:5c:0a:03:3c:0e:19:4a:66:d5:50:64:59:
d9:ee:b5:4f:d5:5d:7a:7c:8d:be:f9:f9:eb:d5:fd:44:03:cf:
a8:40:65:f2:ee:64:8e:44:16:83:71:fb:8f:31:aa:b0:19:35:
3b:1a:d7:18:90:59:c5:de:fc:48:3d:38:0b:81:76:86:bf:88:
10:19:ba:e2:2c:46:91:85:6f:42:ff:ce:a7:9b:73:9d:de:2d:
f6:73:dd:65:06:1d:4b:95:15:87:be:fa:4f:43:44:7a:7b:6c:
8b:c7:b6:37:54:3d:c2:e2:cb:d3:d5:6c:86:f8:62:14:c3:a6:
3a:a3:e9:3a:e9:08:9e:8a:5a:80:a6:db:4b:73:ea:bd:02:d9:
58:e1:d5:0c:74:d8:ad:5e:77:8a:06:88:4f:20:7f:cf:a2:3c:
e8:ae:8c:0b:02:5f:4f:e4:e8:e9:50:51:26:e0:07:c7:eb:e4:
0e:d6:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:28:29 2026 by rpki-client