
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa
File: 59fc405d-4035-30c0-b187-caacc2bd4a19.roa (raw, json)
Hash identifier: pR7rqJHlLvY+kC5cgfvxiFSuiFX6ctrk45Mnn6NSVno=
Subject key identifier: 6A:D1:03:D2:AC:D8:AF:5C:7E:3C:80:5D:DF:8B:DA:8D:5F:44:D8:E6
Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial: 010D0C9F4328584EA5AA77AD8969BF664D896700
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 12022
IP address blocks: 208.83.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:77:ad:89:69:bf:66:4d:89:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=4101f99c-f91b-4050-ab21-71efa46a6598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:72:43:20:c8:55:54:bc:fc:e7:4b:44:8d:
76:30:56:8e:18:90:d0:32:74:72:59:d4:b3:1d:ec:
6c:a9:c6:ab:45:39:44:ad:82:17:df:44:24:e4:0f:
3f:2f:72:de:62:52:0f:10:21:89:f6:75:22:37:fa:
19:22:7a:e5:1e:7a:e4:91:49:09:a9:a8:11:8a:63:
44:3b:1e:81:b3:eb:00:bd:2a:25:34:8b:58:57:51:
e8:e3:11:d4:b6:b9:f2:68:60:f1:e6:f7:26:36:9a:
c9:bb:96:7f:58:a8:0b:0e:b1:48:14:bf:46:68:02:
e9:99:78:88:bb:86:1c:78:71:11:76:46:7e:15:45:
94:16:64:6a:5b:e1:88:a6:ef:74:c2:fb:2a:49:d7:
97:77:b0:ad:4d:12:47:27:17:3b:a7:2a:02:f2:4a:
d2:cf:5b:21:26:81:d6:c4:a0:7c:1c:71:9d:5f:53:
73:62:9c:50:30:05:a7:7f:7a:7b:d7:ff:58:fb:6e:
e5:8a:a6:f1:a1:42:90:b4:aa:b6:7b:1f:c0:e7:d2:
1f:93:57:12:cb:fb:81:7a:fd:53:8e:5d:0e:56:15:
15:64:02:08:01:6d:84:56:de:7d:59:3b:1d:70:f1:
9b:c7:d2:b1:20:36:d8:5c:23:19:1d:c1:df:80:9d:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:03:D2:AC:D8:AF:5C:7E:3C:80:5D:DF:8B:DA:8D:5F:44:D8:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
X509v3 Authority Key Identifier:
keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
sbgp-ipAddrBlock: critical
IPv4:
208.83.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:2a:34:1a:4f:f9:93:3b:66:01:fc:17:26:f9:59:1c:9e:81:
2b:94:46:d4:ca:bc:d9:db:f3:82:7d:76:34:14:63:6a:d1:0d:
54:09:58:93:e5:d4:a5:1f:6f:13:e4:04:45:72:2e:a8:e1:9e:
c2:a8:16:f7:ef:e1:dd:25:c5:52:63:22:98:e7:6f:a2:90:42:
60:47:a7:10:b5:5a:e5:7b:4d:b1:23:32:04:b4:58:9e:db:86:
0c:a5:5a:4a:4b:aa:b9:8b:2f:17:93:a1:0d:d8:83:75:c5:3d:
d6:e9:e0:58:21:83:3a:82:53:15:0a:1e:40:6e:22:01:fd:fd:
8a:bf:ee:77:1b:cf:10:e8:21:9f:26:49:10:3f:17:70:12:33:
fb:78:a7:20:05:fa:af:ec:d3:82:05:a1:c8:e7:95:d3:74:84:
41:ea:18:04:b9:f0:f1:25:2b:a2:7b:5c:f3:01:3d:9e:29:06:
ba:d8:d0:ff:40:67:9f:3f:ac:85:46:86:f3:3a:53:6c:de:64:
9f:cf:88:25:36:24:1c:88:af:4c:de:71:e3:61:a1:db:54:88:
22:07:f6:28:e7:56:6b:b3:89:33:01:f6:1d:3f:67:79:94:9d:
df:cb:09:fc:b3:72:be:b4:08:a3:13:2b:97:ae:a9:d0:ec:7d:
69:df:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:07 2026 by rpki-client