
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
File: c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa (raw, json)
Hash identifier: nZCNLDbxnD8m9fQO1n81NFSy1O4QXiN611s0sXO2Wx4=
Subject key identifier: 02:45:6E:4D:7C:48:B0:8D:CC:8D:9E:9B:84:0B:7E:73:19:BB:69:72
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584F497663EF9EFB5A8D14FC34C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 67.217.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:63:ef:9e:fb:5a:8d:14:fc:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2f7b6d6d-1818-4565-b591-ecb2c823f272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:81:bd:7a:87:b3:07:31:72:65:36:c8:7c:
8d:26:32:16:fb:f5:b7:00:84:b6:80:72:fa:a5:91:
67:8d:94:2e:69:76:64:4c:ab:ae:96:5a:cc:e9:a3:
cf:f3:56:45:dd:ab:9c:42:8e:83:63:de:9e:a4:21:
ea:61:ce:08:bd:77:e6:e3:21:c4:7b:29:4e:75:46:
8a:5d:a0:51:2e:68:fe:72:ba:d6:1b:42:e5:82:8a:
74:05:2f:16:36:76:86:a3:e0:cf:a9:58:1b:5f:80:
7c:8e:37:19:2c:b8:61:be:b7:8f:d3:3f:ca:c0:38:
7e:39:0e:3d:e0:20:87:6a:7b:77:d0:2e:d8:ee:8b:
ec:49:51:41:70:25:16:27:d2:d5:fc:e9:50:c0:55:
5d:f1:a4:e2:52:89:1f:9b:e1:52:a2:fa:50:23:9a:
f8:f5:4d:13:f1:c4:bf:dc:33:09:bd:b9:6a:8e:12:
30:f3:f1:c2:7e:e6:98:07:94:1c:5e:20:32:18:ce:
c6:5c:d3:de:b9:ee:e6:aa:36:e9:0c:2c:5b:d7:14:
0b:e9:96:ed:32:42:64:e8:f0:a3:6a:e8:d7:11:0a:
65:c3:34:08:f6:ac:91:26:f3:a0:c7:db:1a:b6:62:
4b:d1:ce:6a:2d:eb:f3:57:66:55:05:9c:83:8a:d8:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:6E:4D:7C:48:B0:8D:CC:8D:9E:9B:84:0B:7E:73:19:BB:69:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:47:6e:5a:c3:0f:65:42:62:ac:3d:e9:2c:73:13:17:5b:bc:
6a:8c:e3:c4:53:eb:6f:d4:28:51:cd:98:8b:04:02:15:6a:59:
a8:6f:04:57:4f:ba:7b:36:92:3b:db:9b:0a:af:2f:2b:74:2b:
b6:6e:c7:cb:83:95:3e:77:87:a7:68:ab:b7:70:f9:55:6c:9f:
18:7f:96:18:75:68:d4:ea:39:e5:c0:da:a2:99:9c:41:45:dc:
24:96:f6:64:57:10:79:5c:f4:3f:45:0d:ee:cb:6d:a8:18:33:
99:79:f7:69:13:ae:e7:e6:d5:c8:04:5c:c7:5f:00:e6:81:20:
53:be:d3:95:37:84:22:ee:c3:2c:88:74:51:ea:ab:05:24:9b:
74:11:c3:ac:ff:0c:37:84:11:d7:e7:bd:fb:08:33:53:fe:0d:
cb:40:31:4f:4c:16:72:9d:d7:c1:fa:bc:48:70:57:f0:20:a4:
d6:42:2e:45:7d:cc:dd:38:99:7a:a9:ca:9b:8e:ed:89:75:fc:
d0:80:0b:cd:1d:7d:02:43:19:39:17:96:ed:b1:72:36:e0:f7:
2e:5c:98:af:e9:d5:c4:1c:fa:7e:77:b9:2a:a1:c7:b5:aa:ff:
72:51:f4:6e:8c:79:e2:45:0a:ed:74:2a:09:38:93:51:82:6d:
fd:e2:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:39:31 2026 by rpki-client