
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa
File: 67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa (raw, json)
Hash identifier: /gJpTLUs8pozObhuU84/5ymHBs7yzlLvgD4o0UNSUBc=
Subject key identifier: 2D:C3:47:7B:65:A2:73:42:F6:9D:61:E4:39:5E:0D:06:1B:2B:8E:9B
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F427840B3F83E94EABF72FA20
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 401783
IP address blocks: 209.101.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:40:b3:f8:3e:94:ea:bf:72:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=adb201e2-19e5-420e-90ad-cc5f99894156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:f3:36:cb:82:c0:7a:0e:91:3c:e0:6f:3e:
55:71:b7:79:e8:59:45:5b:a3:9b:c5:2a:59:94:18:
ad:fd:0c:36:91:1e:3f:66:36:00:08:58:7e:a9:18:
33:34:f8:da:25:19:1f:8c:b8:02:4b:b9:e5:25:76:
d9:01:eb:fe:29:bb:bf:d5:dc:a7:0a:3c:4f:99:2d:
14:44:8f:49:5f:0d:8d:00:6f:f1:be:03:92:78:97:
1e:5c:88:58:62:34:b3:40:c6:41:9f:7c:04:c0:1f:
c1:e4:8c:5a:51:45:69:9c:41:77:2f:7d:be:44:cb:
75:29:de:2f:79:28:19:20:15:03:5f:25:4f:a3:0b:
29:93:b3:ba:a3:53:ad:22:98:81:ca:75:2f:40:36:
f4:77:09:81:ed:98:c4:d4:16:77:b5:5d:8d:ff:68:
c5:55:b8:73:42:51:35:92:ae:61:12:df:ce:fe:09:
8c:3b:61:22:f7:7a:8a:42:5c:af:53:d8:93:5f:14:
18:ed:d2:15:5c:56:46:7f:02:8b:1b:99:62:04:ba:
ab:69:8f:eb:67:42:2b:92:76:02:f5:4e:98:a9:95:
3e:14:64:7f:55:46:24:01:e1:2e:ca:d6:88:6c:e8:
08:02:32:c8:38:f6:a7:dd:28:99:1e:55:1b:ec:43:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:47:7B:65:A2:73:42:F6:9D:61:E4:39:5E:0D:06:1B:2B:8E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67341ef1-8ea7-36fa-ab6d-e79ce20af536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:d2:df:59:5f:16:e5:f5:72:81:e1:e2:be:1f:bc:f1:bb:6f:
fb:30:38:57:a2:57:74:2d:ca:fd:de:50:d3:6c:e2:0a:18:2a:
04:64:35:e6:a1:1f:03:29:d0:6a:77:df:55:06:1e:20:4f:97:
fc:85:57:24:72:7f:28:a3:58:1a:83:22:4a:a9:67:98:3b:7a:
48:5f:bc:0c:a8:9c:9f:72:cd:4f:b5:2e:21:5f:a2:df:d2:48:
0c:61:44:c1:28:d0:82:52:fb:35:f1:c5:72:6e:a3:4d:96:3d:
15:da:67:43:eb:00:b4:71:df:78:5a:50:a1:3f:1e:b1:41:ba:
fa:9e:6b:a9:86:71:58:61:eb:a5:97:9c:36:73:e1:c8:19:a9:
ec:bc:23:ee:65:fe:f2:2f:db:a4:9a:b8:51:d9:d4:9e:08:53:
ae:63:c2:e7:04:b3:5a:b0:64:ad:8e:23:7c:09:29:1f:be:cb:
74:8a:3a:9a:bc:65:6b:6d:31:00:82:e8:77:dd:b0:3b:54:53:
72:ae:25:c6:e3:f8:52:9e:90:33:e6:26:49:31:9c:11:1e:c8:
91:ae:e3:95:38:d2:1d:03:b6:01:d0:d3:a5:a7:58:91:f3:40:
99:09:8d:f0:d4:2e:b9:07:dc:89:27:d6:0a:47:c6:0a:11:30:
08:e6:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:11 2026 by rpki-client