
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/1e3a8013-fd36-378a-ae42-2f2dc107716d.roa
File: 1e3a8013-fd36-378a-ae42-2f2dc107716d.roa (raw, json)
Hash identifier: Jn6mO4H/lqw/scGbddTZVp9yknM4Ukxvp45Xboiqz6Q=
Subject key identifier: CA:7E:CC:6C:D9:49:82:C4:0A:24:64:9A:78:FF:BB:5E:08:7F:EF:42
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F4328584F49738F166F33834F39CA1F80
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/1e3a8013-fd36-378a-ae42-2f2dc107716d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 28036
IP address blocks: 208.96.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:8f:16:6f:33:83:4f:39:ca:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d799d4dc-a9dd-402e-b075-93460ecf1c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:1f:c9:71:ac:c7:f1:fe:74:7d:5a:a2:e3:
f3:e2:cf:d6:77:0b:60:58:2f:6a:8d:a1:fb:ed:47:
53:38:a1:47:af:97:b9:23:d6:6b:1d:d2:e3:40:ef:
c9:19:5e:1b:b9:25:0f:fd:0c:32:7a:57:58:2b:b8:
72:64:d2:c1:2e:1e:5a:0c:05:d2:76:87:f0:3d:2d:
92:a9:bf:16:31:f2:08:41:a6:b6:57:83:b3:49:63:
b4:f2:61:17:5b:33:43:df:01:a1:e8:f6:3c:8d:97:
8b:b5:e4:c0:69:70:87:dd:0d:d2:b4:f1:da:3a:a9:
ff:12:5c:0b:09:de:db:d1:8f:d5:cd:03:fd:9f:2f:
9b:fd:c9:d1:1b:b1:37:82:1e:6e:5d:c8:9e:fb:7c:
58:17:6d:40:49:4a:72:2e:95:ce:3e:14:68:61:b7:
e7:ea:ee:03:97:26:13:38:d3:40:ad:b9:62:74:81:
51:35:66:11:e8:fc:1f:6f:43:a6:43:c1:dd:01:c5:
27:32:d4:8b:12:de:2e:21:3b:36:4d:0e:99:c5:55:
5e:79:15:e2:a9:1b:68:8f:6b:0b:b9:ba:15:39:a4:
20:7e:bb:56:72:00:f3:9c:ed:89:d3:7f:f9:1b:12:
4d:05:0d:1a:d8:1c:9b:d2:05:70:2e:c6:19:3f:06:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:CC:6C:D9:49:82:C4:0A:24:64:9A:78:FF:BB:5E:08:7F:EF:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/1e3a8013-fd36-378a-ae42-2f2dc107716d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
208.96.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:7f:30:79:39:34:68:18:8f:02:61:06:c2:71:d9:49:6a:79:
c4:07:e0:2b:a8:73:86:f6:6b:86:df:12:0c:61:97:a5:07:80:
7f:75:e8:6a:1e:7d:44:6b:0b:01:4e:ab:33:e4:0d:16:ca:04:
e6:e1:c0:7b:e9:85:0f:73:23:d1:72:8b:93:df:98:cd:fd:2d:
c2:36:40:2e:bb:44:94:60:bc:1f:96:4b:27:ab:2e:1a:c6:b2:
f0:42:28:ce:30:13:63:3a:18:4c:f8:76:91:01:02:00:6b:f0:
9e:10:10:1b:3a:73:de:a5:7e:9b:f4:92:7b:32:80:bb:83:38:
b4:d8:68:ed:3c:c6:9f:08:15:29:c1:21:a6:2e:a3:17:2b:c1:
06:a6:9e:b0:ae:7b:91:4d:e7:2c:97:b5:fa:d4:7a:3b:d3:f9:
85:ac:0e:b2:23:46:4c:2c:72:f8:7c:ab:89:10:46:01:da:47:
eb:a0:e0:d2:02:8d:40:21:02:a7:d5:5e:ba:33:e1:44:df:96:
e1:32:0e:d4:f9:99:80:b6:3e:32:c5:1b:10:c3:f1:71:3a:dc:
c7:5c:80:f6:d9:1c:59:cc:e6:4f:0d:a1:0b:e8:7a:45:0d:a2:
1b:a3:40:43:85:b3:af:3b:a4:4c:9a:05:37:9b:d1:66:66:c5:
55:df:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:10:57 2026 by rpki-client