
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
File: 606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa (raw, json)
Hash identifier: AJeLpBWJOySW3/ECv0wxYMIMwkN7Zhc3zGjTOr432Dw=
Subject key identifier: 5C:06:B9:28:75:F5:7B:E8:90:D5:18:7E:93:45:DC:FB:B7:B3:58:67
Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc
Certificate serial: 010D0C9F4328584F0D6CDE65C1F058B8B2DD0880
Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 14543
IP address blocks: 69.84.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:de:65:c1:f0:58:b8:b2:dd:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=57d12417-2d3a-4437-869a-00ff2dbee64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:1b:86:1c:68:3c:08:6d:98:ff:13:00:8a:
d3:f7:23:da:3f:04:2c:bd:c7:44:0d:b2:e9:1e:0e:
2f:2e:f2:7a:ef:d5:13:c8:71:79:c4:4e:68:1a:96:
d1:24:12:99:1d:0a:dd:95:d0:a0:be:45:46:5f:0e:
de:c6:4a:d3:36:ad:f1:0a:75:46:d7:73:96:83:81:
12:dc:e4:63:09:41:49:95:4b:5a:a5:fd:d7:92:58:
85:8a:2f:15:8a:a3:71:ac:d6:2b:83:17:f4:79:e3:
8e:c7:2e:0d:9f:bb:7e:35:8b:85:49:3e:6b:fe:95:
b7:bc:25:13:46:a9:cd:bf:90:80:e9:02:60:c4:93:
28:f9:aa:c8:4b:c6:b8:c5:35:32:fd:a9:bc:5e:95:
59:4f:a6:d9:50:5e:f0:38:4e:e5:24:0f:2e:67:a4:
ca:05:eb:4c:04:93:60:fe:35:b4:f4:a8:52:23:67:
1e:50:90:6b:48:53:f4:b5:5a:94:d1:45:b3:97:3c:
9d:d8:3b:04:0a:12:c4:29:81:07:b3:ff:1a:bc:e2:
8f:fd:6c:34:18:c1:17:26:bd:db:ad:6d:89:06:dc:
22:4e:33:2b:f5:1d:e7:5c:9a:e6:d6:10:59:a7:ef:
13:3a:a9:83:10:6d:59:22:94:9d:49:c4:47:69:3c:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:06:B9:28:75:F5:7B:E8:90:D5:18:7E:93:45:DC:FB:B7:B3:58:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
X509v3 Authority Key Identifier:
keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
sbgp-ipAddrBlock: critical
IPv4:
69.84.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:96:8f:2a:16:a9:9a:93:3e:d5:80:86:ed:a2:fd:a7:b1:44:
ec:a5:93:fb:e8:23:3a:e0:ea:db:56:40:25:a5:bc:b1:ac:52:
04:2a:72:95:cc:c7:e4:03:bc:dc:31:28:d4:a1:98:dd:94:54:
f7:f5:1b:bd:f0:99:b1:72:df:b0:9a:b1:0a:d5:10:a7:eb:4c:
c9:ac:72:cc:fd:63:c1:99:aa:d9:8a:f7:ab:a2:f9:d2:7b:8f:
e6:37:d4:3e:65:58:c9:ba:59:d2:7c:c9:9b:cc:b6:3d:43:1c:
88:be:7e:24:8c:88:0b:3f:e3:57:02:66:aa:7b:e9:72:7b:5c:
61:8c:43:c4:25:3f:35:ee:a4:ba:48:46:85:d4:74:2b:13:4f:
bc:3b:df:18:07:85:c5:4b:1b:56:23:8e:5c:2f:24:65:8a:7b:
6f:7e:49:e7:b2:0c:1e:55:ba:5c:f8:a5:8b:12:d1:21:45:76:
c5:79:25:89:83:a6:b7:8c:6b:dd:5a:f8:da:7c:7d:39:be:f7:
51:a2:95:dc:57:aa:fd:e6:c8:18:ac:19:ab:6d:31:14:6b:78:
94:68:7e:eb:ab:79:fd:81:87:54:76:a4:7b:37:bb:dc:5d:99:
11:79:3a:37:40:1f:b2:17:5c:e7:58:64:35:6e:f0:ce:56:62:
42:52:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:06 2026 by rpki-client