
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa
File: 85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa (raw, json)
Hash identifier: 8VyBMZa0QMcJeiTS+qqcfvhB7BViGmhTFlfArvlp+sA=
Subject key identifier: 02:70:85:9E:F4:76:36:41:D2:96:87:23:19:9E:AE:44:1E:D8:9F:8D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584F4985035EE6F41AC4FDE8BF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 209.85.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:85:03:5e:e6:f4:1a:c4:fd:e8:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a79529ff-482c-4cf3-a9e4-e5f6501630de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:7e:0c:e1:b4:d1:15:cd:fd:34:d9:6e:79:
3e:04:df:e9:c8:c7:72:45:6e:40:6d:d5:55:c9:56:
73:3b:0f:b8:f2:1f:b0:2e:fc:9f:e9:e4:50:b2:76:
a9:0a:a0:ed:45:dd:8f:f5:09:14:4e:5a:0e:e3:8f:
99:4f:39:05:a2:08:91:6e:f5:27:14:f7:e7:91:7d:
71:b6:15:2a:0a:3f:6c:c6:a5:c8:55:97:f0:5d:ca:
41:c5:f3:a3:5f:94:cc:dc:93:37:45:7d:93:c3:da:
b6:b6:7d:d6:b1:d7:4c:5a:d9:aa:0b:5d:ac:ca:2f:
20:59:60:da:30:e4:8e:cc:f9:aa:1c:0f:88:eb:de:
c6:70:5e:ec:c4:89:6e:e2:c7:4a:49:4f:40:b2:49:
d8:55:8d:ea:86:81:0f:f6:98:c1:13:bf:27:af:09:
ff:c9:14:c7:a2:ac:aa:d2:92:a0:7a:ee:8f:09:a9:
0e:f9:21:94:45:63:e4:bc:4d:f6:06:a3:ab:c2:8c:
1f:92:17:56:77:43:37:9a:62:2f:cb:a5:35:07:b2:
dd:34:7a:0a:89:ed:88:7d:24:48:28:3b:38:2d:d3:
b2:44:8d:a3:98:8a:9d:52:d1:1a:fe:54:cd:58:4b:
fd:42:a1:0f:d7:c7:f1:99:5a:56:03:7a:3b:30:32:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:85:9E:F4:76:36:41:D2:96:87:23:19:9E:AE:44:1E:D8:9F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:c0:ed:ef:d5:2d:b9:e0:65:42:5b:bf:81:9e:3f:b8:78:b8:
67:8b:6d:93:52:e6:0b:5a:82:46:fe:a5:02:db:94:44:f7:27:
1d:fb:1c:4d:2e:82:b3:6f:62:f6:74:a4:b6:26:ac:18:63:d4:
90:40:e1:81:dd:f4:9b:97:47:c6:75:9f:d2:7d:e3:20:c0:b5:
e9:70:b0:c4:e4:78:72:68:d8:c3:86:5b:36:e8:c1:1e:8b:50:
19:34:c4:d7:79:bd:f2:2d:24:c6:c9:d7:d6:2a:6e:2d:49:19:
a2:e3:a4:0f:f4:19:a3:52:da:a8:00:03:ed:1c:b4:82:22:4b:
56:ce:15:a9:ae:5f:54:21:2c:e1:b3:15:f8:1d:ef:c6:aa:4c:
db:4d:1b:73:ba:53:74:70:23:9c:60:ae:9b:45:46:70:00:37:
42:77:36:27:73:94:b7:5d:5f:31:4f:a5:47:5b:ce:1c:ed:cd:
cb:0d:f6:d6:f8:3d:93:2e:c3:6a:99:25:84:fa:3d:15:58:32:
d0:ea:1d:b8:e3:4c:81:26:1b:49:54:ff:04:f2:5c:69:da:77:
9a:71:ff:4d:4c:78:fa:30:86:80:b9:18:9b:98:45:d6:cc:6d:
1c:82:96:d3:8a:fd:45:13:38:e7:b7:34:ab:53:a6:b7:aa:bf:
99:c7:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:26 2026 by rpki-client