
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/f9bc60ba-88c2-3591-9714-6ccb38bf1c5c.roa
File: f9bc60ba-88c2-3591-9714-6ccb38bf1c5c.roa (raw, json)
Hash identifier: QoJ1+uexAzwYlOBYKjfpxOYlIPhil06kEEbCzvDPALc=
Subject key identifier: 26:8D:B6:11:7D:37:E1:CA:C8:18:20:3A:E0:6F:F3:38:4E:61:09:08
Certificate issuer: /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2
Certificate serial: 010D0C9F4328584F4C3D7257ACB79476703BEE00
Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/f9bc60ba-88c2-3591-9714-6ccb38bf1c5c.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 12167
IP address blocks: 104.232.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:72:57:ac:b7:94:76:70:3b:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=6ee938b6-ff75-45ac-aca5-9b56fd01ffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:c0:2a:24:ae:ca:b9:2c:97:b8:b8:f2:b1:
01:99:95:16:43:50:f4:05:43:83:3a:39:a1:a1:45:
5c:ab:7e:dc:3f:ef:36:72:d5:39:ab:2f:27:b8:02:
d9:1a:24:94:95:0c:1e:af:2b:6b:bd:38:9c:d0:da:
8e:57:0f:04:2c:92:39:bb:d5:88:20:a5:a4:57:f6:
ba:61:46:7e:b1:58:93:f1:76:87:38:2f:5b:b2:de:
86:b8:ae:d9:ef:93:75:40:4a:b6:f5:0d:24:69:e9:
10:35:9b:4d:f1:0e:32:ac:1b:c9:5e:23:08:a3:b8:
69:64:53:7b:9f:2d:00:9f:07:04:78:a0:c6:e6:7b:
2b:d8:fd:39:2f:67:56:ec:0d:e3:17:b1:71:5b:3b:
91:3e:6d:95:57:68:33:4d:08:25:ed:48:c4:6f:d6:
82:a9:15:2c:4d:5c:75:ad:bd:09:8e:41:47:3c:1e:
4f:46:1f:3c:9f:cf:e1:a6:a6:1e:ca:ff:fc:30:a3:
5f:b4:f7:1e:01:54:28:fe:07:d6:14:95:59:3d:a7:
89:56:3f:33:a4:41:11:11:76:1d:dc:06:54:1b:eb:
3c:e0:18:c2:9c:ab:33:32:8d:e0:a3:4d:3d:63:45:
05:0d:2e:55:fe:b1:4d:90:67:3a:1c:13:87:a3:27:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:B6:11:7D:37:E1:CA:C8:18:20:3A:E0:6F:F3:38:4E:61:09:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/f9bc60ba-88c2-3591-9714-6ccb38bf1c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl
X509v3 Authority Key Identifier:
keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:d4:5e:ab:f5:b1:7b:6e:ba:e7:f5:1a:13:61:65:6b:53:8f:
39:ac:02:ea:9f:8f:c8:70:85:c4:ba:98:33:28:95:15:8a:36:
32:38:8e:6b:74:81:eb:fe:8a:d5:f5:10:0a:fc:9e:0a:c3:25:
7a:cc:19:53:96:f9:16:38:75:fd:78:85:de:d8:52:5b:6b:25:
53:7c:25:ab:12:1e:e7:46:9c:94:3a:11:a4:f0:40:9c:b9:d7:
09:df:52:6c:b3:f5:8d:0f:90:14:14:ed:24:f9:22:b7:4c:dd:
21:5d:f4:56:10:3f:c0:4a:a5:39:5d:6d:61:88:2e:ec:51:0f:
92:ab:09:9c:40:51:51:c2:c6:67:40:93:4d:71:e0:f8:f7:28:
44:da:fb:cf:4e:a9:46:2c:ce:07:57:9a:ce:c0:d3:a4:4f:12:
eb:1e:a7:bb:07:7e:32:ef:55:52:1e:c2:4b:76:4e:80:c2:d0:
6c:ca:d2:c6:0f:9d:86:c3:c2:48:39:76:88:5f:bb:eb:a0:71:
25:7f:ce:f7:0e:3f:a2:15:48:db:fa:3a:92:a6:4b:4d:e8:12:
78:05:a2:f9:63:bd:91:62:96:b0:97:6d:4c:09:c3:46:82:71:
9b:4b:6f:b7:ce:9e:66:44:1e:ce:0a:02:78:d8:b9:86:c6:f6:
8d:46:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:49:26 2026 by rpki-client