
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa
File: 0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa (raw, json)
Hash identifier: gwZ88eTqKFs3lZCILA5oaZ5nBGTgBzebpih3D/Yk5e0=
Subject key identifier: A9:2E:34:A7:D6:BE:BC:54:05:1B:40:4B:8B:C3:13:E8:9D:5D:E6:86
Certificate issuer: /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial: 010D0C9F4328584FA5932B104781C360412FEB40
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa
Signing time: Wed 28 Oct 2026 01:00:13 +0000
ROA not before: Wed 28 Oct 2026 01:00:13 +0000
ROA not after: Tue 26 Jan 2027 02:00:13 +0000
asID: 8987
IP address blocks: 206.204.64.0/19 maxlen: 24
216.234.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a5:93:2b:10:47:81:c3:60:41:2f:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Validity
Not Before: Oct 28 01:00:13 2026 GMT
Not After : Jan 26 02:00:13 2027 GMT
Subject: CN=14105f1d-b360-4b77-bd3f-d9457f9b5838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:50:1d:a1:09:bc:0b:65:11:1c:8b:b6:a8:
e7:4e:a0:a0:43:39:7e:9d:d7:c5:24:62:9e:d6:cc:
fd:43:11:28:84:ad:27:62:73:cb:e0:30:41:f5:8b:
a0:d9:0a:41:0c:62:1c:03:f5:51:a9:8d:34:d6:5c:
65:bb:b7:a2:d9:1f:38:98:00:e4:2f:14:f5:8f:39:
b6:83:c7:ea:cf:c7:ee:3a:53:84:1f:9a:ac:49:16:
91:7d:ad:64:af:49:42:3c:2b:03:f3:2b:98:b1:02:
62:1c:4b:2b:69:b0:2e:73:d4:c7:42:b3:59:40:b5:
b5:61:9b:ee:13:1e:a6:fc:51:22:ba:dc:e4:fb:6f:
a1:8a:6a:23:58:d2:8e:76:76:03:20:e3:ea:07:06:
0b:0e:4c:88:6a:21:bd:a3:41:b8:04:49:03:51:c5:
ee:5e:33:7b:69:7a:d2:78:e8:ee:fe:07:e0:0d:35:
6a:33:a2:33:b0:3a:18:d6:20:75:55:1a:ae:83:e2:
ad:a5:70:5e:d3:b9:f5:f6:c7:bc:e9:9a:3f:4b:18:
72:13:95:ff:2d:dc:de:93:7f:de:e8:9e:0a:d2:26:
d7:bd:37:c8:16:06:b0:29:4b:1c:5d:4e:c5:05:c0:
11:e1:57:03:6f:2a:9c:47:d5:bb:0d:4d:0c:7f:b2:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:34:A7:D6:BE:BC:54:05:1B:40:4B:8B:C3:13:E8:9D:5D:E6:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
X509v3 Authority Key Identifier:
keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
sbgp-ipAddrBlock: critical
IPv4:
206.204.64.0/19
216.234.183.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c0:e1:bd:e1:fa:3b:53:c8:c2:d7:90:2f:28:d2:91:4a:62:
b4:a8:25:ed:07:d7:d1:fa:10:c7:b8:9a:e1:4a:a8:3e:0b:8c:
e9:b8:63:3b:5e:83:1b:0e:b8:0b:6f:d0:50:28:ea:55:88:7f:
a8:8d:03:28:b8:39:65:a7:b5:65:40:b9:41:c4:4f:0b:29:cc:
38:f8:b9:2d:99:c4:f8:08:64:db:59:ea:2c:b2:a4:cc:02:e0:
e5:cf:f7:21:bf:a1:1d:16:a2:54:6b:2a:97:6e:f2:30:7b:d3:
5e:60:7a:3c:0c:ff:59:fe:3a:48:0e:49:7d:b8:43:ee:3c:59:
22:a8:54:6c:1c:95:21:9e:d4:75:bb:15:a3:95:01:61:46:c0:
c8:ea:e6:42:cc:52:e2:a9:ad:98:1f:18:f7:fb:3c:67:bb:23:
27:63:b2:31:e6:82:6a:0d:05:b1:bd:b1:67:47:8c:a3:3b:25:
81:35:80:d4:6c:15:bf:c2:f8:0f:0e:45:b5:90:46:44:bb:c5:
4c:fc:c0:2d:f7:3e:5b:f7:fc:e7:dc:16:ca:9b:27:69:15:1d:
84:87:49:b6:1a:9b:22:d0:e4:1c:e4:4b:ed:df:e7:64:cd:f1:
35:10:d7:53:18:2d:ba:81:b4:ce:87:03:12:af:ab:6a:0d:3f:
b5:e2:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:58:09 2026 by rpki-client