
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c7e88938-cfba-3dd0-bb87-d16effb8ec45.roa
File: c7e88938-cfba-3dd0-bb87-d16effb8ec45.roa (raw, json)
Hash identifier: rNOdKNnKCJdmRuQ8QM1dRxTqJkxfmJGrW/lbmmDIJHY=
Subject key identifier: B3:24:AE:FE:EF:D3:4D:FB:6D:E7:EB:0E:C5:3B:27:CB:36:AB:31:BB
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F3FAD82648F24CE9FBBB9AD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c7e88938-cfba-3dd0-bb87-d16effb8ec45.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 9009
IP address blocks: 209.101.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:82:64:8f:24:ce:9f:bb:b9:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=63b3d741-93e5-4d1d-8b0e-904f4924dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:87:8f:10:aa:ae:77:4e:26:8a:33:b6:60:
ab:35:bb:b7:97:94:e6:cc:97:b7:62:d6:ad:f6:f3:
e5:d5:88:19:53:c4:ad:79:71:b9:6c:84:c4:ba:a8:
c3:18:33:a3:92:27:7c:31:cc:8e:e4:20:f3:07:13:
2c:cc:ad:da:3e:41:d3:d2:3e:8e:ed:d4:83:e7:07:
4c:4f:eb:c8:ce:53:44:2f:f3:e8:23:99:6a:73:cc:
5e:5d:88:3d:14:31:35:cb:2f:cc:98:17:0d:e0:51:
67:d8:cb:5b:c0:82:f5:66:d7:f3:71:95:72:53:f4:
2e:0a:97:43:07:ee:54:ac:50:c5:2f:43:64:76:d4:
dc:89:5e:db:5d:c9:3b:d4:80:b5:ed:8e:26:e2:0c:
3f:ba:c6:2b:42:29:a9:40:34:3f:7a:93:9e:62:ae:
e9:31:82:6e:56:d7:ef:48:a6:18:d2:65:7d:d6:c6:
81:d8:50:f8:46:83:5b:31:4e:f4:32:15:88:17:d5:
53:40:f2:b8:33:19:fe:34:50:b1:b6:96:b9:8a:14:
d8:c4:e1:44:7a:e6:c1:43:34:dd:4a:66:4d:fb:47:
1d:18:16:d0:04:20:41:d1:06:88:11:19:79:1b:3a:
d1:e5:2b:7e:68:fb:1f:ed:9f:f1:3b:29:10:eb:85:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:AE:FE:EF:D3:4D:FB:6D:E7:EB:0E:C5:3B:27:CB:36:AB:31:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c7e88938-cfba-3dd0-bb87-d16effb8ec45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:cf:97:f5:94:b8:d1:f3:5b:31:72:b3:48:49:44:ad:10:15:
87:13:80:48:f1:0b:85:1c:9b:56:c7:f6:58:94:a3:72:bc:86:
e1:af:26:28:7e:ad:6c:66:06:54:53:7d:2c:d9:ed:88:9f:f4:
13:30:b6:ca:d4:77:45:d0:99:35:03:7b:6e:59:c9:d4:1a:5c:
6b:d0:d8:85:1f:2b:36:9a:2c:8e:1f:e9:d9:72:64:ce:5a:54:
85:38:cd:ad:e7:98:43:0c:b1:f4:a5:d1:53:97:29:cb:77:29:
30:19:9d:a6:c0:e0:21:7b:b1:dd:3f:f9:32:89:a1:77:4f:d9:
7e:88:f8:06:cd:22:3c:63:0f:4e:6d:90:23:c1:94:97:7e:49:
af:3d:66:5d:0b:b3:3e:4c:1e:ac:9f:46:68:35:c9:04:27:9c:
3f:12:98:fe:d5:86:45:7f:52:66:b8:28:94:31:47:59:d1:f0:
53:b1:36:55:d7:a8:9b:fa:96:40:aa:a1:e0:35:3c:65:8c:60:
cf:2a:69:a6:b9:47:4d:96:c8:b7:a2:5e:71:c0:ea:a3:11:f9:
4e:11:5b:bf:f6:9c:6c:77:73:07:68:65:4c:4f:6b:d0:d3:62:
c9:a9:0b:5a:c2:e2:04:59:97:85:20:78:89:f5:14:62:ca:b6:
93:62:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:53:15 2026 by rpki-client