
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/a057d64e-57be-388f-8059-61700e3c0d4b.roa
File: a057d64e-57be-388f-8059-61700e3c0d4b.roa (raw, json)
Hash identifier: jZX8VqK6Pomekq7TL4ZcGTjLJti0EtpSMOH3yZpMTOM=
Subject key identifier: 15:1D:07:AA:07:25:8C:58:68:D4:3A:A3:52:47:45:B1:79:84:79:1F
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584EE42354F25AC156930B1DC1C0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/a057d64e-57be-388f-8059-61700e3c0d4b.roa
Signing time: Wed 19 Aug 2026 18:04:00 +0000
ROA not before: Wed 19 Aug 2026 18:04:00 +0000
ROA not after: Mon 30 Jul 2029 04:00:00 +0000
asID: 16509
IP address blocks: 72.167.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:54:f2:5a:c1:56:93:0b:1d:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Aug 19 18:04:00 2026 GMT
Not After : Jul 30 04:00:00 2029 GMT
Subject: CN=210b9952-843d-403d-bd2d-d79f244c2ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:a2:1d:01:89:75:81:62:61:de:30:51:c0:
2a:56:be:23:70:82:92:73:9f:ad:79:57:5b:04:31:
02:a5:da:bb:54:05:4e:b6:6a:28:83:ee:14:35:90:
8a:7e:9f:d8:ec:b3:50:5a:35:8c:b4:d9:35:a4:f0:
c1:03:ae:ab:b0:93:87:ed:73:01:64:49:61:1d:1d:
1a:72:e9:91:24:d2:09:1f:f1:dc:7d:d1:9f:c6:a0:
21:28:38:e3:c5:45:86:2c:7b:99:e8:19:2a:e1:4c:
0b:51:cc:d7:72:ba:ae:ff:6f:83:77:d9:b4:e1:6f:
5e:ed:d8:b4:50:f7:f2:5d:cb:49:2d:33:ab:23:d4:
fb:4c:03:fa:f9:de:06:21:16:b8:68:81:b5:41:49:
4d:bd:63:23:25:0e:a4:d0:56:54:d9:33:bf:b0:7e:
d8:fc:fb:3e:87:6d:f7:49:bf:78:90:9f:7f:a1:09:
c9:3f:f6:84:6b:4b:39:d3:26:73:f9:43:80:ad:34:
2e:d3:4e:0e:22:28:d7:49:23:a2:e7:0a:6e:9d:e9:
b5:83:6f:6d:c2:b0:8f:6b:f1:f1:bf:fd:9b:4a:23:
a9:69:0e:1a:0b:a3:a9:fd:26:b5:ad:f9:6b:d4:03:
af:7f:7a:ee:18:b8:97:97:16:6d:85:7d:f2:ce:a3:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:07:AA:07:25:8C:58:68:D4:3A:A3:52:47:45:B1:79:84:79:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/a057d64e-57be-388f-8059-61700e3c0d4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.167.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:0a:17:3d:a3:68:5a:ff:3f:e3:77:f5:e1:8c:ed:5c:14:25:
2e:e4:01:90:bb:b5:75:7f:55:df:2b:bb:5f:f4:56:e9:23:d4:
40:51:66:02:c8:9e:f2:8d:31:2f:6b:8e:36:cb:18:74:b6:c6:
68:ad:21:8a:42:22:25:55:16:99:32:85:f0:68:21:74:48:57:
1f:56:9e:7a:ee:4d:a6:74:bd:a8:d9:d3:5a:2e:07:ca:0d:3b:
53:29:ad:94:5e:3f:54:e7:d3:43:33:59:46:6e:8d:cd:e8:82:
ad:04:4a:e3:c8:7a:ed:69:5b:97:2d:e2:ab:95:b4:e1:07:f0:
c4:d5:88:e5:47:30:e2:80:ce:73:7a:95:7d:9b:f8:54:ba:40:
bc:a6:5a:56:09:80:c8:30:36:4d:92:ec:af:a5:c1:b5:ef:65:
71:52:19:e8:9e:a2:06:af:ba:1e:9b:d2:46:9d:02:bf:4d:c4:
74:84:7d:4a:20:09:f9:c2:45:cd:7a:b5:c9:34:c3:66:05:e7:
91:de:4e:90:d9:83:4a:55:27:fb:37:49:b2:69:5a:a3:db:32:
99:b4:4a:0b:ca:43:07:c3:35:2b:0b:79:2a:17:25:7d:b3:53:
ff:2b:14:43:23:f3:f7:0e:8b:fe:ff:77:25:1e:21:9f:2b:96:
bb:b5:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:59:37 2026 by rpki-client