
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/97d82103-d332-3fb2-9f5c-4860c1f5ffc4.roa
File: 97d82103-d332-3fb2-9f5c-4860c1f5ffc4.roa (raw, json)
Hash identifier: 5YxJC+tulRrJYsbF1pzWdLBDwOyc7Xlv0rOoEguPa4Y=
Subject key identifier: 0A:DC:EA:68:12:9D:1F:38:7C:82:B8:7E:3B:4C:6F:E0:D3:10:DB:55
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F4328584E97B50073CA724FF7A76FB8C0
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/97d82103-d332-3fb2-9f5c-4860c1f5ffc4.roa
Signing time: Thu 23 Jul 2026 09:00:11 +0000
ROA not before: Thu 23 Jul 2026 09:00:11 +0000
ROA not after: Wed 21 Oct 2026 09:00:11 +0000
asID: 26695
IP address blocks: 204.9.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:97:b5:00:73:ca:72:4f:f7:a7:6f:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Jul 23 09:00:11 2026 GMT
Not After : Oct 21 09:00:11 2026 GMT
Subject: CN=1dc0f8a4-0025-4388-9ddb-c425ec49a0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:f9:8c:bc:bf:a7:cf:f2:e5:43:de:a5:b4:
11:08:ad:2c:e9:d9:bb:a0:0b:a5:52:21:f2:b7:f0:
ab:34:71:76:7a:3d:ed:6a:a4:da:44:1a:46:6c:e4:
b5:c4:4e:98:21:e0:ca:31:6b:d4:48:28:2e:50:00:
1e:02:a2:cc:4a:3e:5d:ae:1c:3b:d0:2a:8f:3f:ce:
38:21:d3:83:a5:88:d1:2c:cc:6d:8d:bc:86:a6:f0:
af:5b:a3:ff:b7:21:86:6b:e8:72:ca:f9:64:05:a4:
98:fb:32:e4:bc:d2:b5:dc:8b:2f:ae:46:c5:1d:26:
17:b0:7a:91:0a:0f:57:48:93:a1:66:e5:54:5d:0d:
d1:e0:18:a7:3d:4f:99:ae:31:9f:61:a2:3b:c7:c8:
6b:7e:0d:5b:e7:00:21:ea:dd:5d:5b:90:d0:3e:24:
eb:65:7d:01:3c:fd:f5:37:93:ec:76:14:13:48:69:
fd:a1:a2:ad:20:e7:71:33:0d:b3:77:ec:10:2a:7e:
d9:ff:59:1a:53:fc:f0:6a:48:0e:19:ae:07:a7:73:
e9:c9:74:ea:43:2c:d6:5e:79:f4:3d:68:08:01:7f:
b4:0b:12:8c:0c:57:c2:0e:53:1b:8c:37:3d:33:2c:
56:bd:20:b2:be:b0:6e:a3:b3:bd:16:a8:fc:ea:eb:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DC:EA:68:12:9D:1F:38:7C:82:B8:7E:3B:4C:6F:E0:D3:10:DB:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/97d82103-d332-3fb2-9f5c-4860c1f5ffc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:ad:74:04:2b:cb:d1:11:d0:ca:68:27:ed:75:62:63:44:3a:
41:55:49:9c:50:e4:6f:e2:48:6d:60:f5:16:4c:d0:06:4e:c0:
e1:5c:78:df:5e:26:28:dd:30:68:44:46:57:da:aa:92:4a:e6:
68:8e:d2:ff:7c:2f:c5:02:60:1c:25:a4:4c:a8:cc:74:c0:f2:
25:79:06:97:27:93:03:9c:f8:ca:13:b5:89:22:7b:cd:07:63:
b7:64:00:32:11:3e:87:2a:00:be:6f:f8:6b:d1:c5:20:78:38:
1a:77:00:fb:10:9b:7c:2a:b3:19:ac:ad:56:88:dd:0b:3c:0a:
66:60:5a:46:d0:cc:b1:e1:e0:f8:24:a6:ea:f7:85:9c:d7:c8:
40:64:5f:04:2f:a6:a1:e3:77:a8:c9:06:8c:23:a3:2a:bb:28:
2b:17:bc:a2:2d:4c:11:16:87:74:c7:84:44:a5:eb:f3:29:9a:
12:1a:14:84:57:d8:a0:0d:62:09:14:d9:69:75:7e:02:0a:f3:
61:93:89:cd:7d:cd:ec:1e:12:84:ed:f0:32:54:b3:35:76:85:
97:f8:4a:67:e9:70:e5:1e:83:ab:bc:cb:cd:e7:e3:a5:8d:ad:
b7:40:ba:57:06:d9:8c:40:97:3d:c1:90:04:e8:69:98:fa:41:
35:af:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:55 2026 by rpki-client