
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
File: 43a5601d-1585-3131-be68-bff003a98cc5.roa (raw, json)
Hash identifier: rxp1C480Sao1mkV1qJYqnb1G0zYMwrp1x6FaX2ihgz0=
Subject key identifier: BD:F9:44:29:C8:7E:7F:66:CC:41:2C:94:F0:47:31:F7:04:78:E8:4D
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584CCBA751E8C68ECD04B6016500
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 13414
IP address blocks: 209.237.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:51:e8:c6:8e:cd:04:b6:01:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=0410a86b-e0a8-4195-a585-e91f3542fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:c7:fc:18:de:cb:7a:99:a9:70:76:75:b7:
5f:b0:6a:86:71:58:75:7e:55:88:7b:f2:d8:d8:5a:
87:22:f3:0b:8e:67:d8:15:db:19:e9:8e:ee:39:6b:
53:4d:8f:6b:5f:81:4e:73:14:ba:5e:d1:1e:d4:9d:
f2:ed:3e:d9:42:96:aa:6a:14:f6:bf:22:9f:af:c7:
8f:51:d2:eb:0e:cb:a7:41:5e:d4:91:53:94:c5:8e:
cf:98:08:e8:5f:fd:ad:20:7f:81:32:81:39:e2:fc:
ca:3a:92:b8:56:b0:9f:12:2f:02:46:12:7a:2b:73:
e8:cf:8c:58:99:6c:2c:7a:65:ba:29:7e:9b:6e:27:
15:ae:73:02:f6:f6:41:76:fa:6e:6b:a2:47:cb:80:
ec:04:dc:23:c8:6a:b2:d6:8d:b3:48:69:de:49:7f:
ac:b3:aa:ab:af:73:d3:27:cb:06:16:b7:d1:43:1e:
39:de:cf:7e:ba:f9:09:b3:9c:fb:57:6b:4a:7f:4f:
8f:25:2b:99:c7:76:a0:03:57:f4:1f:24:8c:c8:9f:
6a:88:d8:44:de:cc:61:54:e5:fa:50:b2:00:41:52:
b8:e0:dd:d0:28:98:ca:29:f2:ed:c0:2e:c6:ce:c0:
fa:c8:82:c7:42:25:b3:9e:46:fd:51:d6:e1:9a:83:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:44:29:C8:7E:7F:66:CC:41:2C:94:F0:47:31:F7:04:78:E8:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d8:95:19:ba:29:24:58:19:42:57:b1:e6:60:33:39:43:49:
fc:a3:03:78:24:7d:69:8d:f2:dc:26:35:96:ef:35:98:66:83:
45:37:36:5a:4c:71:7a:e7:53:6f:aa:cc:4c:d6:15:97:20:0b:
8c:7a:a2:66:1b:c4:1a:86:27:92:bf:34:1a:aa:12:1a:81:f9:
3c:be:32:91:87:c8:85:a4:d4:ea:85:4c:d7:af:c5:7f:20:5a:
8d:f0:cc:2e:b4:5e:69:a4:54:b3:fd:40:7d:6b:72:5a:56:ac:
fa:bd:e5:41:85:6c:c1:77:d7:ca:c3:93:d0:80:8e:68:f4:03:
d1:ba:f0:94:36:06:75:2d:99:70:ce:bd:53:e4:49:21:89:d7:
b1:3e:fe:61:df:55:a9:14:d6:07:54:ed:db:68:83:19:47:ee:
a4:b0:01:0f:33:85:87:6c:ad:95:a9:94:1b:94:57:56:72:b9:
65:ff:b3:80:7a:18:a7:47:37:00:c7:b6:81:c3:b8:dd:ac:13:
48:4a:eb:0e:ac:78:d4:7c:83:a2:d6:5a:d6:53:c0:d9:97:87:
46:f2:f8:2f:ad:f8:e6:7c:5c:66:8a:21:93:7e:76:83:a7:e7:
f5:b8:3b:29:b2:7c:ec:90:c7:d9:88:c8:c0:78:fb:31:59:f7:
f2:c1:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:06 2026 by rpki-client