
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa
File: f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa (raw, json)
Hash identifier: OWPWWUin5cqBX50SnsDVdB01w4D8eANQYAifI+t/izk=
Subject key identifier: DC:34:CA:55:C5:4C:E6:45:37:65:5A:0B:F0:67:FF:7C:1A:D6:2D:0E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F42781ED59B1C3435EDA7D9E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 9009
IP address blocks: 172.94.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:1e:d5:9b:1c:34:35:ed:a7:d9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=ad2029f6-6fef-46bb-a4c0-a45ab7931730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:d5:e6:26:80:44:eb:2d:e8:89:c7:9a:98:
7b:dd:4d:85:b8:c6:9b:97:18:ed:d4:05:3f:ed:90:
34:49:6e:d5:0d:23:86:7d:be:89:7d:27:46:11:42:
0d:1c:7f:46:58:aa:b8:ce:eb:1c:ba:00:d7:c6:60:
6e:35:db:d0:c9:32:b7:24:87:da:62:0b:8e:54:aa:
b7:b4:9c:43:dc:07:22:0d:bc:8d:76:26:de:21:fa:
06:16:58:13:a4:39:52:50:9d:c1:1b:cb:95:cd:05:
ac:ef:c6:be:24:de:91:c0:86:4a:cc:ac:50:e1:f8:
4b:f4:ed:75:56:7b:df:d6:9a:88:6d:79:81:ba:3c:
42:53:84:be:2d:32:67:25:9a:ff:8f:79:fc:0f:4c:
00:b4:b8:bb:55:10:01:8a:e4:12:3d:a3:3f:1c:8c:
dd:7c:d9:4d:ec:8b:49:07:e4:0b:c5:66:fc:d5:8b:
2b:4b:1c:e6:36:83:d4:a0:58:f6:dc:6d:f1:a3:f8:
c7:cc:ab:47:a5:95:34:2f:1e:04:3c:e7:3d:1f:b4:
46:10:19:42:a5:91:26:d0:b5:41:4a:4a:9b:e6:98:
ac:98:a7:bb:35:c3:7e:a1:2c:93:bf:c1:69:75:e4:
d9:9b:50:4f:a7:af:2b:8d:be:3f:a4:e0:8b:34:1b:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:CA:55:C5:4C:E6:45:37:65:5A:0B:F0:67:FF:7C:1A:D6:2D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:1b:58:58:96:61:49:ff:bc:a3:3c:1e:a9:ec:93:43:9b:b4:
42:5f:60:0b:a3:2d:51:1d:2f:9b:7e:54:4d:98:2b:0b:a9:60:
d1:0d:fa:d2:91:47:7e:25:13:e9:f9:90:7c:53:54:92:7e:dc:
7a:cd:b6:66:07:74:09:92:a8:6c:0c:43:1c:7a:df:9d:4f:9d:
61:c4:42:a8:b3:0e:1f:4f:b0:cd:3b:88:05:b4:e4:5a:dc:cf:
ec:9d:36:0d:6d:19:90:08:c8:10:e4:b4:63:40:c7:a9:98:d6:
d8:d2:94:a5:46:87:41:16:17:18:51:00:ac:8d:82:94:09:7e:
12:51:cb:a8:3d:60:e0:d5:e6:e4:23:75:6e:cf:93:35:0c:69:
f0:a5:f4:5a:ac:14:59:86:25:f7:b9:86:6a:ff:f6:93:f3:86:
12:57:70:50:c9:a1:c7:ef:c3:b2:c9:01:e4:ca:e9:fe:a5:b6:
7e:ee:33:d6:31:9c:1e:04:9d:b8:80:d5:c7:f5:f8:5d:62:8b:
97:fb:f8:5a:b7:99:64:e6:6a:4d:24:e3:f9:74:05:95:61:17:
4f:10:98:2a:f9:7e:fd:36:76:e5:9c:02:68:76:e3:0c:b3:c9:
dd:48:78:d0:a7:c0:f4:7f:f6:b4:2e:75:8e:1d:17:b1:42:91:
1b:f6:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:29:39 2026 by rpki-client