
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa
File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json)
Hash identifier: ZWAlZiFusjSHBXtCERecz8hlNvkEuuNnxqwwRyr5sxY=
Subject key identifier: 09:E8:77:CC:61:10:04:9D:66:AD:2C:D4:10:39:0C:69:68:54:CB:3B
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F4328584F4973D49A818F2D279E142540
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16509
IP address blocks: 216.185.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:d4:9a:81:8f:2d:27:9e:14:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c0a06740-d5d6-4d9f-b160-d52e109a9842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:e8:83:5b:af:e5:18:f5:f8:67:52:a4:42:
cd:75:42:4d:35:b1:76:d8:1d:81:60:e6:21:3d:1d:
57:32:15:e2:fc:47:70:e7:44:61:b3:a9:ac:d8:b7:
d4:8b:0a:50:a5:1e:ee:f7:84:c3:3c:b2:4d:f4:82:
33:51:4b:7e:07:a6:72:6f:a9:e6:f7:e4:db:30:df:
eb:36:d2:51:83:9e:a6:be:06:8c:49:cd:eb:d5:2f:
fc:c6:18:60:eb:e8:97:8c:d8:3b:6c:9c:fc:44:06:
6c:0c:dd:46:8a:e3:dc:ae:81:25:f9:28:b6:64:98:
eb:31:cc:23:1a:bf:fd:2d:c8:65:bf:71:fb:eb:cc:
d2:32:8e:06:d2:d2:2d:9b:0a:8c:55:52:7d:35:8a:
3a:47:ec:5a:49:2b:12:41:1b:b6:2f:a3:b9:d8:d0:
1b:8a:0f:08:8f:df:4a:9a:63:cf:dd:82:24:33:12:
04:6a:0d:c6:3e:c1:ff:ad:06:23:a8:cc:15:85:f9:
9f:db:ea:74:45:c7:cf:3b:d0:93:d1:26:22:3f:88:
36:e8:99:14:d8:bc:f4:2c:1e:f8:59:25:15:08:f6:
98:57:17:93:69:a1:1c:ad:25:42:71:ba:05:13:a5:
06:51:9c:78:1d:40:35:ee:1e:14:52:d6:e8:1c:89:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:77:CC:61:10:04:9D:66:AD:2C:D4:10:39:0C:69:68:54:CB:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:22:b8:13:75:f9:3b:92:ba:a5:b5:ab:f6:28:c1:4f:3e:a3:
ed:2e:72:f4:73:db:56:ca:73:a8:28:5e:6a:83:c8:31:3e:38:
1d:b1:d7:41:44:9c:af:70:2c:4a:17:ba:86:71:06:7a:1b:09:
ff:aa:97:ea:ae:2b:de:9e:18:c4:12:24:2c:7d:d4:84:f3:d1:
59:1c:f8:7c:27:75:0a:30:6e:cc:ea:c2:d6:3f:2b:2e:d7:2e:
73:55:d4:5e:8d:dc:c3:cd:30:69:47:2b:1b:77:8f:13:7e:fb:
d6:d0:a8:7c:c0:20:81:1b:4a:43:3e:c8:fb:97:29:aa:40:1f:
1c:74:a1:40:db:21:9a:0e:f5:14:62:c3:f9:0a:ff:e2:df:37:
ef:64:c0:68:88:41:c8:03:18:92:00:f2:6a:07:d3:f4:28:71:
b7:2d:7a:d1:77:9b:57:9a:a4:94:db:ee:a8:4c:44:ce:72:4f:
87:6e:ac:96:c7:87:ab:9e:4a:b5:50:dd:07:4b:ae:c2:12:1b:
46:e2:02:1e:be:68:31:2a:b9:0a:fa:b3:0b:24:68:79:ee:dd:
02:e7:8d:6e:8d:9c:c8:50:51:3a:90:04:04:ce:ca:98:1c:38:
8a:f2:42:47:78:3e:ba:d7:71:cd:a9:9a:3f:d7:c9:21:6d:f2:
60:ab:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:33:20 2026 by rpki-client