
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9c601a40-d43f-3385-ae0e-3567eef87002.roa
File: 9c601a40-d43f-3385-ae0e-3567eef87002.roa (raw, json)
Hash identifier: 0iUEPMMSUOUAjnwOD86f2LteB0slnP2GBXTJ41dlq9c=
Subject key identifier: 11:C1:24:12:F1:70:3A:AB:42:F8:3E:64:59:FD:C7:32:F1:07:51:7E
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584F6FFE58C67D8ABDB5D0F52B80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9c601a40-d43f-3385-ae0e-3567eef87002.roa
Signing time: Thu 08 Oct 2026 20:22:39 +0000
ROA not before: Thu 08 Oct 2026 20:22:39 +0000
ROA not after: Wed 06 Jan 2027 21:22:39 +0000
asID: 8075
IP address blocks: 67.217.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:fe:58:c6:7d:8a:bd:b5:d0:f5:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Oct 8 20:22:39 2026 GMT
Not After : Jan 6 21:22:39 2027 GMT
Subject: CN=6708f237-3e9c-4f8a-9046-ae3441a8bfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:9a:55:45:42:9c:e3:f3:3d:5d:58:07:ae:
ba:47:5c:bd:87:ba:25:b8:ae:74:c3:56:48:be:28:
4e:ff:98:00:85:3f:22:48:0d:a4:cb:37:d5:7a:96:
b1:4f:f7:6a:4a:ff:ed:90:5a:9c:01:b7:08:82:05:
59:64:a3:d6:99:51:1e:32:34:cb:04:78:72:5f:da:
4d:fe:51:ff:17:d6:19:b6:37:50:01:9c:67:10:26:
c0:bb:93:91:07:16:0d:6e:32:3e:d0:58:f4:92:fc:
b8:be:75:50:a8:25:25:f2:32:4b:af:5b:92:50:c7:
f4:ba:eb:3d:07:16:cb:73:66:e1:55:0d:f8:ab:ea:
7a:f4:9d:70:de:d6:8a:5c:4f:36:57:74:57:68:3f:
6a:f7:68:4f:9a:85:b0:89:f3:11:d9:e1:65:58:93:
ae:df:be:42:67:49:77:1d:b0:9c:00:5f:a3:0b:51:
03:69:1a:35:8b:09:93:8c:64:9a:bc:41:47:84:86:
36:c2:c4:45:8c:d6:b6:4e:7a:24:81:d3:c4:2a:94:
a5:c1:86:af:47:12:84:dc:ba:c6:80:a6:e9:b1:5b:
cf:81:9f:5d:db:40:e1:3d:fc:ca:58:27:66:ac:64:
fd:36:22:28:ca:33:f9:e6:99:9c:c8:24:b6:29:e1:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:24:12:F1:70:3A:AB:42:F8:3E:64:59:FD:C7:32:F1:07:51:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9c601a40-d43f-3385-ae0e-3567eef87002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:9b:60:75:f8:f0:b9:07:41:4d:86:9d:db:2c:c1:80:62:82:
02:bb:e4:50:af:6a:f0:39:d4:50:26:20:e4:3a:0a:10:df:28:
7b:47:1a:cf:c8:e0:9e:43:5e:79:41:79:3e:ec:5e:b5:cc:18:
ab:ff:80:d5:09:76:50:9d:ab:7a:b0:3a:db:8a:ae:f9:69:98:
ac:cf:db:b1:d9:c3:83:78:55:c0:8c:c5:3a:74:7a:82:70:bd:
85:5c:ce:0e:90:b9:ed:39:e4:7e:98:98:d2:15:52:47:41:3f:
37:5d:9a:5f:75:e1:f9:a6:81:68:27:4d:27:8d:41:e1:3a:d2:
68:d3:ba:7d:3a:bc:65:99:b7:d8:4c:47:74:e7:79:d3:e9:8c:
cd:5a:23:82:62:0a:c2:d7:da:72:46:54:09:44:dc:c2:6d:b1:
ac:90:ef:39:1c:b1:4d:4d:1b:02:25:10:02:4d:09:65:2b:8e:
28:9c:ff:c3:18:61:8a:d6:69:79:bd:e1:3c:30:57:f1:26:21:
a3:77:be:99:d8:27:83:18:62:06:b0:f1:28:6a:41:44:17:07:
7d:61:2c:d8:ce:26:78:f8:a6:9c:6e:f6:30:a8:1b:ac:45:55:
dc:77:de:4b:dc:eb:d1:bc:81:de:f2:88:4f:dd:25:1e:5b:86:
5d:83:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:41:13 2026 by rpki-client