
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
File: 893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa (raw, json)
Hash identifier: x9aJZPieaFTC5fF96za6W/BAbYzeLGGatsXURd20aac=
Subject key identifier: 1C:40:F4:89:DD:BA:D2:97:27:A7:39:56:50:5C:AD:D5:8D:3D:62:2E
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584F11A15465AA7A95F19DD0B1C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 834
IP address blocks: 72.9.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a1:54:65:aa:7a:95:f1:9d:d0:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=c12356fa-2a10-4599-a70a-42bc98eed84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:be:a7:7c:54:23:5f:8c:08:98:8d:37:6b:
dd:91:67:03:b1:d1:17:cd:11:52:89:75:05:a8:13:
31:04:85:1a:fd:1f:f1:8f:79:22:b2:91:c3:9d:1e:
00:b6:85:d6:b3:4b:a4:7b:74:df:6e:b4:3a:77:11:
09:c1:82:d3:03:fd:0b:65:be:1e:51:55:0e:40:8b:
9d:5f:64:01:c6:0f:49:78:24:4c:af:ee:f6:ec:57:
7e:59:2b:ce:3f:ed:73:20:12:e3:83:e4:61:83:49:
63:b5:d3:7f:96:8b:19:de:86:57:e0:97:3d:86:ee:
70:f7:3e:c4:1a:0a:09:9f:63:28:5b:94:52:ca:f6:
1c:b4:40:37:86:2c:48:85:d2:e4:c4:63:ad:3d:94:
d3:aa:7a:8b:8d:ec:a6:01:68:4b:71:6a:f6:31:c9:
21:2d:ff:15:ff:b2:1d:a5:b7:49:4a:4f:56:e9:fc:
b8:91:4f:07:f7:9f:0f:7e:46:b7:f9:5f:3d:ff:ff:
5f:51:d6:65:b9:d4:65:b8:e1:c9:8c:3c:70:b1:ea:
9e:fb:2d:1f:e6:ff:f7:d3:76:c0:9f:44:ce:12:4b:
fb:90:c3:3f:3a:f4:9d:ee:8a:87:4e:cb:bd:50:f4:
ab:35:8d:2c:42:8b:8b:ce:ec:8c:47:93:a2:4f:1c:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:F4:89:DD:BA:D2:97:27:A7:39:56:50:5C:AD:D5:8D:3D:62:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/893c4a81-9f66-339c-8c73-fc5fe44fdd8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c3:e4:40:60:4b:bf:d3:48:03:51:c1:c2:5c:b0:d0:f9:dc:
c9:34:df:41:aa:db:82:1d:5c:ce:78:13:f8:bf:e0:b0:1e:b2:
26:d0:4f:c3:36:33:e7:01:04:b2:20:52:39:63:3f:9f:61:6d:
bf:80:75:6b:7d:62:ba:7f:7b:9a:5b:01:4a:d2:d8:90:8c:81:
12:59:05:ba:7e:5a:14:e5:97:bb:98:c1:58:38:e1:56:79:0d:
dd:f2:29:bb:e7:15:bc:bd:73:35:18:9d:6a:60:3c:bb:ac:34:
5c:57:50:f4:36:95:13:4e:1a:cb:49:41:f8:83:11:a4:fb:67:
5f:22:c7:2e:36:6d:7f:7a:a2:26:f3:5f:73:61:6c:ce:ab:7a:
df:3d:d8:bc:17:65:1d:09:cf:5e:34:b4:07:06:a6:00:61:c1:
2a:b6:7a:e5:95:1e:ee:b3:a0:79:fd:7a:05:60:34:bd:25:72:
9f:cd:32:17:01:93:e4:40:1a:69:59:df:4f:44:48:6a:ef:f2:
7f:1e:f7:39:9a:5b:f6:9f:51:6d:44:05:0f:bd:bc:eb:f0:d7:
50:72:84:4f:f7:ac:e4:e2:3d:92:a4:73:a2:20:96:64:a4:a5:
a7:ba:2e:0c:c8:83:f1:e9:2f:95:9e:84:f5:f5:84:6b:bf:fb:
a8:d6:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:46:18 2026 by rpki-client