
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
File: 2c880042-77b4-3f57-807d-ca209161efa0.roa (raw, json)
Hash identifier: nxSGo4pIoYvBgo6a9Cujy5SYs5A7kInMdGl81JDopgY=
Subject key identifier: 4D:D6:E7:8F:1C:3C:D1:67:DF:18:D1:00:1F:50:5B:66:33:AD:A8:00
Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial: 010D0C9F4328584F1E2CF97DB2E7245ECC784700
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
Signing time: Wed 09 Sep 2026 13:00:11 +0000
ROA not before: Wed 09 Sep 2026 13:00:11 +0000
ROA not after: Tue 08 Dec 2026 14:00:11 +0000
asID: 9009
IP address blocks: 69.168.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1e:2c:f9:7d:b2:e7:24:5e:cc:78:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Validity
Not Before: Sep 9 13:00:11 2026 GMT
Not After : Dec 8 14:00:11 2026 GMT
Subject: CN=2328583b-9eea-4db1-a25b-6430e2512c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:b0:ad:46:0a:b2:8d:13:3b:96:5d:d2:5d:
00:2e:0d:f1:50:d7:ec:76:92:31:fc:27:16:96:28:
d3:98:d1:68:ac:5c:23:95:ac:b2:80:5b:14:61:92:
de:84:57:41:4e:85:28:d1:5b:7d:61:3d:af:ce:11:
fa:e3:2b:02:4c:f6:f9:d6:fd:7d:9b:0b:ed:2e:b4:
49:22:75:53:c2:c2:36:0d:a4:0e:8a:d3:e2:81:fc:
c5:a0:3f:2c:8c:af:93:37:6b:53:2b:d2:25:29:99:
94:c6:8a:e1:ea:f5:d7:89:f1:f7:58:54:85:68:07:
ae:bf:ac:fb:66:13:a3:f0:4f:fa:ab:03:08:a3:63:
b2:26:ce:3c:ad:89:86:69:92:b0:29:12:62:84:2c:
2d:42:2a:e0:8c:7a:17:cc:c4:c8:c9:2f:a3:e6:1a:
5e:76:02:57:ed:1e:c5:05:e2:22:e5:c2:bc:0c:2a:
51:39:2a:20:ab:bd:fc:02:5b:cb:8e:5f:32:a7:7e:
31:d6:d6:ca:8e:3b:6a:e9:47:9b:04:11:2a:ca:a3:
d2:b1:ba:b5:7b:cc:3c:2a:29:df:ed:46:b4:da:53:
f6:72:28:33:dc:d6:97:3a:d5:e2:26:3d:e1:ae:d9:
df:b4:cd:c8:fb:59:a8:a8:2b:ae:14:42:01:8a:48:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:E7:8F:1C:3C:D1:67:DF:18:D1:00:1F:50:5B:66:33:AD:A8:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
X509v3 Authority Key Identifier:
keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
sbgp-ipAddrBlock: critical
IPv4:
69.168.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:27:dc:8e:29:33:24:04:03:3c:cd:34:aa:6c:2b:67:12:0a:
0f:93:1d:fc:f4:9e:3a:ec:be:63:a2:73:52:93:a0:8d:a2:c3:
87:f2:0c:4c:8c:58:56:f6:d0:6f:ab:fc:35:77:92:d9:b2:dd:
b2:c8:49:e9:58:a3:8f:bb:d9:10:a7:51:dc:c6:9e:c2:67:df:
19:7a:61:c9:20:14:cb:b3:ed:07:50:d0:e7:46:05:e8:97:c8:
8b:d8:5a:81:e3:b9:c1:b1:4d:3f:3a:68:74:db:88:5f:ce:67:
91:0d:da:21:19:70:4a:49:fa:e7:b4:8e:30:ae:f1:ff:a7:fe:
b4:07:56:75:37:b0:f2:bf:c1:1b:74:18:81:8b:b3:16:1d:7f:
de:92:a3:60:11:3c:bc:d5:4e:dc:c8:64:20:44:37:5e:c8:eb:
12:59:c8:93:05:b6:7a:21:d6:7a:5b:e9:1f:f7:ed:1e:fc:89:
43:b7:73:73:ef:0e:da:f9:30:4e:d0:22:19:a7:ee:5b:a3:54:
26:38:0b:ce:12:c5:eb:d6:59:3e:f6:f6:6f:f8:a0:1d:3a:2f:
dd:7d:c7:59:5c:49:2a:71:3c:43:3c:ea:fa:b4:6b:26:b2:be:
5e:17:4c:a2:89:fc:c1:76:34:2a:80:32:b2:1a:38:4d:46:40:
8f:ed:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:11:34 2026 by rpki-client