
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa
File: f984a998-f709-386e-9a12-6db49c1c894c.roa (raw, json)
Hash identifier: rC3BkUgZIFuzxdYk+Co0mUaOlPsY7uinfH+m7AbdiB0=
Subject key identifier: 41:E3:84:68:9C:79:B2:3D:7A:2A:7F:66:B3:B3:BA:82:E4:F4:A5:65
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F4328584EFCACBD7628DD4FFFBB727B00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa
Signing time: Fri 28 Aug 2026 13:00:12 +0000
ROA not before: Fri 28 Aug 2026 13:00:12 +0000
ROA not after: Thu 26 Nov 2026 14:00:12 +0000
asID: 394398
IP address blocks: 209.124.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fc:ac:bd:76:28:dd:4f:ff:bb:72:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Aug 28 13:00:12 2026 GMT
Not After : Nov 26 14:00:12 2026 GMT
Subject: CN=ed1db106-cb73-4d5a-bd59-10f5fe936fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:74:e2:c6:94:f5:de:cf:a3:09:54:5b:91:
8a:e7:f6:03:14:e0:56:5d:28:b8:fa:56:e8:3f:ba:
ef:46:97:c2:30:fb:2a:28:e1:b1:a9:0c:92:5d:71:
b6:4f:e7:e0:3e:d6:9a:33:27:c1:37:86:0d:81:d7:
86:1a:08:6c:6c:77:19:aa:01:1f:39:73:1f:7c:06:
e2:ce:20:0d:39:52:fe:cd:a2:d9:41:1a:85:f7:96:
f7:40:e6:38:c7:5a:7d:66:c6:03:40:2b:03:56:80:
96:ca:c1:5c:ad:b3:b4:11:b3:93:38:ed:65:ef:8e:
ab:74:0d:fd:52:65:f5:4f:01:70:f9:bf:cc:31:53:
3e:1f:86:19:f5:21:e5:b4:02:aa:05:0b:28:aa:ed:
cd:ce:6b:69:0d:a7:e3:3b:2d:03:6a:bf:9f:79:49:
92:a4:ee:e7:fa:d9:07:d2:aa:2f:96:40:ae:b0:34:
c1:fb:46:bd:2a:b6:3d:b9:34:0e:5b:cd:c5:72:3c:
83:0d:a5:81:20:d9:49:c7:76:6a:7f:7b:8a:cc:2e:
ad:e1:c6:f5:1d:26:79:a8:6c:63:91:cc:af:30:08:
e8:6a:e0:c0:7c:81:77:93:1d:4a:21:92:9b:f1:0b:
6c:83:5a:d4:19:dd:6d:67:03:21:2f:d1:f7:30:e1:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:84:68:9C:79:B2:3D:7A:2A:7F:66:B3:B3:BA:82:E4:F4:A5:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:6a:29:1a:6c:81:79:3a:13:13:43:8e:d7:ba:df:b0:6a:eb:
7a:47:18:2b:08:b7:6d:20:a6:27:27:ba:d5:35:51:56:1b:13:
f7:eb:a4:4a:eb:2d:b0:e8:6b:f7:71:58:0d:4f:a5:eb:70:c2:
d5:51:39:ae:e0:e3:88:78:ff:a0:96:13:f4:ec:22:42:c9:91:
2a:03:bd:a3:80:a5:5c:4a:d9:36:7e:4a:ed:cf:92:1f:a0:96:
0c:0c:da:0e:5a:88:cc:92:d1:9d:d3:cc:29:50:f3:50:fe:78:
bc:37:64:5f:9b:45:af:8f:e3:19:df:f0:d6:99:67:fd:7a:c3:
6d:d0:1b:0e:13:92:26:36:ff:8c:ee:3f:22:57:ac:c2:31:b1:
a3:f9:ca:27:98:45:a6:74:fd:a5:dc:33:02:25:80:bd:c6:a9:
42:5a:40:ac:e1:b6:fe:62:6e:78:51:5c:32:57:a3:87:ab:42:
78:db:5d:c5:76:86:9e:99:a4:ea:a1:e8:29:cf:6f:60:59:a1:
70:0e:27:a6:49:ba:0b:b5:54:f4:d6:b7:6f:5b:f8:e4:23:b4:
de:44:1c:31:27:8f:c7:45:62:ee:6a:87:1e:6c:4e:b1:d3:ce:
15:c1:d0:e3:1e:7c:1f:75:ba:ad:f2:7b:45:7b:6f:e7:e0:f2:
7e:c4:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 02:49:17 2026 by rpki-client