
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa
File: 2c57870d-1148-344a-840e-d0c0263d5867.roa (raw, json)
Hash identifier: WLaEEtJXc+p+hY9A8JuZNyx501sO7nVUVtYbug4wc3g=
Subject key identifier: 25:91:C6:EA:32:BD:AF:E9:D8:7F:CC:DF:1D:49:27:03:15:40:7F:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E1FA9AB02B8120C40053BF180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa
Signing time: Wed 10 Jun 2026 09:00:13 +0000
ROA not before: Wed 10 Jun 2026 09:00:13 +0000
ROA not after: Tue 08 Sep 2026 09:00:13 +0000
asID: 36183
IP address blocks: 172.225.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1f:a9:ab:02:b8:12:0c:40:05:3b:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 10 09:00:13 2026 GMT
Not After : Sep 8 09:00:13 2026 GMT
Subject: CN=7af4d7ec-9fdf-4cb8-a8b3-95a29b36b9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:0d:1e:e9:f8:37:f6:3c:3d:3a:83:50:25:
c1:d9:2b:34:24:fd:4c:e6:95:f0:77:bc:3a:50:4a:
90:5a:93:96:fb:0e:28:bb:0f:a9:08:fe:60:3a:44:
ab:19:25:55:3f:1e:e2:61:56:85:75:25:5b:1f:64:
58:b1:19:87:5b:a9:df:3f:0f:02:f8:52:55:60:f6:
bf:d6:2f:91:71:ce:d0:cb:e1:15:b4:f2:78:3a:75:
66:12:08:d5:22:60:7d:1e:55:e7:91:cb:b5:bc:a9:
57:cf:bf:94:66:90:b5:04:e0:a1:dd:d0:31:07:e9:
45:24:93:ae:19:2e:1d:92:e1:43:90:39:1b:86:28:
83:08:69:98:6d:c9:c9:5a:96:9f:f4:fe:6b:85:8c:
a9:5c:52:82:f0:f6:9d:3b:d8:24:07:cb:11:c3:87:
e9:2c:29:29:11:d4:ab:a0:68:5c:3d:61:d3:5e:d8:
d9:44:8a:7f:ce:03:56:fc:09:3f:c7:e4:28:62:8c:
cd:37:23:06:44:6c:58:c5:2b:6b:d6:a7:eb:f9:ee:
08:96:5b:d3:f8:a3:44:38:ac:8e:4e:db:2f:14:07:
4b:2e:12:93:ce:80:be:c0:4c:2e:55:03:7e:57:c3:
c5:8b:f4:6e:5f:89:50:8d:4c:b0:bc:da:36:3a:04:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:C6:EA:32:BD:AF:E9:D8:7F:CC:DF:1D:49:27:03:15:40:7F:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:78:00:e0:c0:3f:c1:df:07:a8:33:1f:6b:6b:b7:f2:61:0f:
c7:1f:29:73:73:3e:2f:7d:d4:e0:c1:35:43:f1:33:80:2c:29:
1a:19:ba:3e:b0:21:34:e5:dc:d4:bd:8e:12:14:b5:45:6f:11:
36:c0:25:33:b0:7b:a7:c8:f6:c6:af:e1:c4:27:2d:b8:b6:9b:
e3:d0:aa:4c:e9:f7:86:ca:38:ec:7c:80:51:bf:2c:f6:3d:fa:
6c:14:0d:19:8e:07:08:71:8b:3f:05:16:f6:79:81:79:6e:b0:
6a:2e:3c:76:1a:c9:34:8d:64:ec:be:aa:c1:e0:bc:bb:06:04:
ba:db:14:63:f1:8b:cf:5f:e8:31:84:a8:02:51:7d:e2:f9:9e:
7a:2f:c0:9b:9d:d6:fb:61:98:e6:fc:eb:05:67:34:7a:4b:44:
43:4c:ff:5c:a8:d7:d1:bd:17:55:d9:e3:ae:06:bb:6f:5c:c0:
ca:4d:35:fc:dc:91:cc:25:5c:3f:ab:83:46:9a:a2:29:c1:0f:
e3:40:dd:ea:37:e3:42:7a:c3:b8:f0:73:03:f6:35:cf:54:90:
ea:82:84:85:07:42:8f:02:fc:df:fa:43:4c:4c:47:a3:b6:5d:
ec:92:1f:0f:40:58:cb:f9:16:59:30:d7:a7:48:92:fa:2a:55:
c8:75:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:00:50 2026 by rpki-client