
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa
File: d9010bb7-b127-300d-8f26-9f8325848a6d.roa (raw, json)
Hash identifier: gA1Bv1QyZfquo3B7NhGBEky2oQvoFUyQfNI2qsElaQ0=
Subject key identifier: 73:C5:E7:B4:3B:C9:47:AB:DB:26:61:A4:D4:27:60:AF:AB:A4:4E:37
Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Certificate serial: 010D0C9F4328584E104EF1B6BF33E05B6D9F3E00
Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 16509
IP address blocks: 208.71.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4e:f1:b6:bf:33:e0:5b:6d:9f:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=a360eb2d-ddb9-4c6c-a8cc-56df9757b9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:cd:fe:6f:dc:ad:ee:52:64:52:14:3f:a5:
d8:1c:38:09:bf:62:03:21:a6:d0:8b:6c:c6:f1:cf:
76:d8:88:e1:c2:7c:2e:69:ad:29:44:b3:35:98:04:
c9:f7:d4:62:c2:17:bb:cb:80:4d:36:2f:18:d9:70:
e3:34:b2:c7:32:cf:4c:4e:ec:05:3c:e4:50:0c:78:
f1:26:1c:b0:e5:e2:dc:62:f3:e7:3e:65:be:11:fe:
ce:3d:07:30:57:24:71:7b:24:4f:b0:ac:27:4d:c1:
f3:2e:0d:d0:f8:7d:ae:96:d5:92:62:62:e9:d2:53:
3b:61:9a:c2:02:e9:22:df:9c:76:91:63:29:7a:69:
ca:a4:d9:c0:bf:64:9b:be:6b:f0:88:68:bc:0d:1b:
b5:5e:29:aa:18:b3:04:86:50:46:dc:bf:98:9b:d4:
48:76:3d:dd:5a:8c:df:43:2f:55:3a:b6:3d:6a:33:
2a:2b:f1:b5:b1:f3:1f:e7:75:1a:5c:ed:4c:43:98:
8a:92:f8:7c:b3:c3:81:18:70:2a:a1:ca:49:b3:ab:
02:ac:1b:4a:2d:37:59:55:c7:b4:92:41:ee:f3:ef:
94:cd:eb:af:e3:d6:dd:12:fc:54:6f:86:f1:c3:26:
b4:ff:0a:12:ef:90:bd:04:08:d3:77:d4:4b:35:36:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:E7:B4:3B:C9:47:AB:DB:26:61:A4:D4:27:60:AF:AB:A4:4E:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl
X509v3 Authority Key Identifier:
keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c5:74:16:86:33:29:65:91:2c:9d:55:62:cd:44:cf:e1:f9:
44:e7:43:6b:b5:67:e7:2d:a7:24:a6:af:a9:b6:8a:97:29:43:
3d:1c:6f:89:47:9a:f0:bb:02:1a:dd:46:52:05:d7:3e:d8:2b:
00:bc:44:b3:93:3d:b7:aa:6a:45:41:7b:c3:ee:30:d6:2b:65:
4e:d4:3b:51:fb:74:76:e0:f8:e1:ec:10:9b:d9:34:02:66:72:
05:cf:6a:82:ea:13:ce:f6:2d:15:f9:38:d0:89:70:03:a0:23:
8e:08:eb:bf:57:83:38:7f:7a:d0:bd:cd:d1:79:fe:b7:42:bd:
ff:4c:7f:bd:35:63:e5:ba:01:49:eb:db:07:cd:e1:15:ba:26:
0a:3d:11:92:24:e5:74:2f:ad:f3:93:65:f2:7b:eb:79:af:e3:
79:43:d4:4d:18:6e:01:10:9f:70:d5:00:b1:b3:f4:f4:55:65:
be:f4:ce:1b:01:e5:a5:c9:e7:6d:f4:ed:78:be:4a:dc:47:39:
06:05:9c:08:07:78:1f:1a:42:6e:8d:6f:2e:55:b2:43:a5:04:
e0:69:ea:f1:df:02:3e:13:7d:99:14:25:80:ef:23:bf:43:cf:
57:b0:e1:3c:3c:b1:bc:27:6f:aa:4e:96:88:5c:25:d3:c8:92:
20:4f:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:32:12 2026 by rpki-client