
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa
File: 8bc43020-2195-365c-b314-6ccd7e35330b.roa (raw, json)
Hash identifier: qJ55tg+tjwYmKw1k1rSHNGGOXh8TGmnj1WZH4yIyKyw=
Subject key identifier: 13:73:43:AD:C4:34:8D:99:50:3D:7A:B4:1B:A0:98:94:06:B4:BD:7D
Certificate issuer: /CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e
Certificate serial: 010D0C9F4328584F4973D5583C9E444483FE59E0
Authority key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 209.188.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:d5:58:3c:9e:44:44:83:fe:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=70cef702-d7c2-483b-846e-9f87381092a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:5a:7c:fc:d7:bc:df:cf:2e:db:88:1e:c9:
69:12:25:b0:2c:30:8e:98:da:85:3f:47:aa:4a:56:
4e:b8:73:02:ea:f8:96:a1:cc:96:a4:80:e3:5f:31:
27:a5:ae:f6:f9:06:ad:29:5f:c0:84:cf:91:a6:c8:
73:aa:b7:0b:72:79:18:26:04:17:83:2c:32:3e:3b:
4e:27:e6:ed:65:e4:b5:48:86:e0:c2:de:cc:02:fd:
fe:6c:a0:92:16:61:04:9b:cf:94:9a:41:98:69:1c:
70:b0:ff:4f:dc:f9:0c:73:a4:4c:4a:b2:9f:07:e8:
a9:dd:ef:1d:89:1c:6d:cd:36:ec:15:a3:56:89:df:
31:48:1b:d4:28:35:95:83:c4:4b:62:a4:b5:5e:f6:
d3:be:e9:33:75:fe:9d:22:83:59:38:88:b2:7c:da:
90:e4:6f:0d:37:63:1e:e1:52:c2:bf:e6:98:1e:bb:
fe:e3:b6:4b:22:b3:ee:a2:5b:b9:0a:d1:95:36:7e:
94:dc:69:75:e2:2c:62:ab:97:f7:86:d1:ce:bc:91:
fb:9a:f2:b9:49:2c:c0:7f:dc:da:0b:85:9f:e3:98:
2e:41:b1:57:9e:cf:aa:b8:9c:3c:77:8f:40:b5:c6:
67:58:8c:67:b3:e1:11:2a:d6:78:39:23:59:95:1e:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:73:43:AD:C4:34:8D:99:50:3D:7A:B4:1B:A0:98:94:06:B4:BD:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl
X509v3 Authority Key Identifier:
keyid:AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.188.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:68:cf:00:94:d4:19:6d:c1:f6:1b:88:30:9a:10:3e:c5:19:
9b:c0:a8:eb:4e:06:ef:cd:d9:e9:a8:64:54:3a:8d:32:79:45:
8a:02:79:7a:78:9f:44:48:77:28:5e:8a:f4:d1:b6:7f:15:3b:
99:53:1a:41:69:a9:ec:83:18:85:3e:85:99:41:53:1a:c3:40:
6f:6d:b7:20:a6:17:d0:27:2c:7d:da:5b:c8:20:0b:0f:65:72:
e8:ab:c6:86:97:e9:6d:f3:b5:2b:4d:9e:4f:2e:7a:fe:30:ac:
a3:4f:52:70:7a:62:36:b4:a4:86:e1:62:7f:3d:57:7a:00:0b:
ae:69:8e:be:c6:54:b5:8d:04:bd:09:2a:25:ea:2e:58:62:ef:
3d:b9:5c:a3:75:c5:e9:e3:f1:e1:ee:00:73:30:79:f7:b4:ee:
29:39:f4:7b:7e:d5:09:bc:68:63:58:7b:9d:8b:1d:37:ab:15:
74:e1:57:0a:b7:7c:6b:3e:61:1c:28:13:ba:e0:33:dc:ad:bc:
e5:10:ed:9c:91:5b:0d:f9:87:02:aa:06:46:30:3b:db:69:e0:
3d:dd:ce:1d:cb:83:61:c6:a5:17:e3:44:78:33:51:6d:8b:dd:
84:20:92:b7:67:45:78:b3:6c:03:8b:41:50:d5:ef:23:e5:3c:
ce:03:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:01:07 2026 by rpki-client