
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/e9cd71e7-2211-3376-8b47-d59c7776df8a.roa
File: e9cd71e7-2211-3376-8b47-d59c7776df8a.roa (raw, json)
Hash identifier: cHmPSinAcCsAjO01WIvbOYz8v7oflO9/mN7YwoORtO8=
Subject key identifier: 3A:C9:10:B4:CF:2D:3D:95:F5:DE:7B:E6:9F:BF:65:B2:8D:1E:FE:CD
Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial: 010D0C9F4328584F49891A401D5644D1CCCC2980
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/e9cd71e7-2211-3376-8b47-d59c7776df8a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 10794
IP address blocks: 199.43.60.0/23 maxlen: 23
199.43.60.0/24 maxlen: 24
199.43.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:1a:40:1d:56:44:d1:cc:cc:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c0b1c604-8d19-45e4-9540-bdbe4c4be9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:17:21:c8:64:28:09:88:52:16:bd:ec:ba:
e8:8e:c1:cf:66:1e:32:ae:15:01:18:36:47:11:ea:
76:7f:ab:59:fd:7e:90:c8:bc:0d:13:b4:78:3e:2b:
93:23:93:2c:b9:e1:98:dd:eb:f4:ce:03:5b:aa:b6:
c9:51:ed:72:6d:a6:5d:c9:06:0f:1c:2a:f4:b5:cc:
f7:12:37:eb:04:4b:27:2a:e4:05:c8:d6:86:af:32:
ef:e1:ac:0f:60:ad:a4:ea:66:4c:37:27:37:4a:ca:
d7:f6:93:53:70:e1:2e:ed:f4:96:eb:b6:cb:45:24:
f3:24:f8:fb:20:f7:ca:f1:45:1f:4d:a1:e1:67:a7:
5d:b5:9c:bf:78:cd:d4:43:cc:d0:33:3f:ad:de:b3:
26:c9:36:1f:d7:59:7b:0b:a5:cc:3e:5e:9e:dd:f2:
7d:f3:af:78:20:3c:28:d7:88:c5:16:33:c5:bb:60:
40:5b:b0:6c:4f:7d:e5:d6:68:a1:34:5d:1e:1a:43:
79:c7:e4:c4:52:4f:f3:c1:24:1b:4c:c1:bc:52:b0:
54:d7:20:6a:8f:fd:8b:cb:5c:96:b0:cc:a0:aa:bb:
55:ed:cf:3b:50:4a:ce:1d:af:c6:82:be:1f:28:c5:
dc:15:f3:7d:b5:0f:19:9a:2c:e5:4e:03:40:2c:ba:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:10:B4:CF:2D:3D:95:F5:DE:7B:E6:9F:BF:65:B2:8D:1E:FE:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/e9cd71e7-2211-3376-8b47-d59c7776df8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
X509v3 Authority Key Identifier:
keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:2f:92:95:f6:53:03:86:e3:18:9d:f8:b2:70:fe:d6:9f:bc:
81:de:aa:8d:ec:7b:1c:67:02:f4:a2:3f:d0:83:02:72:20:09:
3e:bb:5e:78:e7:93:0d:d1:87:8e:a6:ad:c4:e1:f9:56:80:86:
26:21:09:8e:76:ef:45:68:7a:8b:04:15:a4:e0:a3:99:c9:e9:
71:7c:0e:48:06:d4:18:66:ce:12:d4:82:18:eb:96:c2:95:e5:
eb:06:ef:55:d4:2d:9e:46:c4:a5:73:ed:ad:ec:e4:19:9b:e4:
67:70:06:53:55:06:41:24:ec:41:0f:31:2a:6e:ea:39:93:f9:
39:4d:f1:b0:25:be:7c:5a:b3:21:a8:4d:e6:62:58:6c:fb:18:
04:85:1d:61:74:c6:f8:92:4a:d4:74:d3:ee:36:27:9a:eb:f8:
e4:fc:11:41:b9:c5:00:e3:be:b0:f2:8d:cd:3d:b9:df:05:da:
6c:8c:73:a9:82:e4:3b:1d:13:a7:6d:c2:36:39:0c:88:95:f0:
91:84:e0:3b:dd:ef:8e:cb:39:28:03:89:3b:d4:90:5e:ef:87:
62:48:dd:f5:c1:45:0b:88:14:d6:12:90:0f:4f:0d:8a:ed:91:
f1:e1:83:68:6b:a8:a6:55:94:ad:d7:d6:b2:75:c2:a0:48:c8:
95:75:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:12:56 2026 by rpki-client