
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa
File: d81db5f9-daca-3854-894b-06f15dcabb67.roa (raw, json)
Hash identifier: 8m7ki0g8w7aPL1dGGjpj9kz9kKcM2bZVzs7PNxZ8GQE=
Subject key identifier: 03:D4:E9:68:5F:9C:AD:06:62:42:D2:D4:BC:15:A1:51:4B:60:7A:66
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584ED863225E01236F9FC0612BF0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 15169
IP address blocks: 172.217.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:22:5e:01:23:6f:9f:c0:61:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=e5f1df6a-e131-48c0-8843-ddd4a5ab5234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:39:8c:3f:ab:49:1b:20:88:48:d1:30:77:
36:f7:00:cd:a9:99:b6:fe:76:04:b2:b5:8f:7a:79:
15:15:5d:03:0f:1b:f7:f2:62:bd:9c:49:9f:1f:f7:
9a:48:85:11:89:32:6b:1a:0f:7e:0f:3c:64:07:cf:
48:ad:0f:51:70:2a:f2:89:f8:69:21:c8:e9:ec:11:
4a:cd:d4:ad:0f:01:22:cc:fc:e9:1f:6a:09:a1:6c:
0d:0d:e8:b6:81:83:21:a9:8b:df:3f:4a:49:c1:52:
fb:38:2c:60:22:4d:88:4f:16:c8:f6:44:33:6f:b0:
ee:13:24:cd:ff:0f:a4:ca:d6:19:ee:b9:73:b6:aa:
33:b9:83:04:b3:a8:94:bd:86:ed:02:11:40:aa:67:
00:89:4d:d5:31:b5:60:82:2f:88:7b:9d:16:12:6b:
0c:a0:4a:06:5c:29:05:3c:85:d7:cf:18:3e:ae:c5:
74:96:e6:94:26:e2:52:2f:14:11:48:10:eb:1b:e3:
6b:33:01:c6:16:da:62:8a:19:ac:81:56:a4:aa:c3:
0f:da:9e:c0:9b:b3:04:c3:c7:d5:56:02:9f:cb:91:
b4:53:31:02:48:9e:ff:a2:2e:69:91:92:d2:87:b8:
40:61:92:d3:6f:3e:df:0c:5f:30:c3:42:bb:e5:87:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:E9:68:5F:9C:AD:06:62:42:D2:D4:BC:15:A1:51:4B:60:7A:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ba:de:97:a5:4f:28:dd:bb:8b:77:9f:34:69:8b:be:78:be:
06:a4:57:b5:ce:58:a5:3f:8f:c5:ce:7c:d3:91:f5:f2:c4:6c:
b1:01:19:da:72:1e:67:43:23:7a:0b:eb:7f:c2:f0:02:4c:ea:
84:dc:2a:82:8b:5a:b0:d0:72:4f:e0:07:34:8a:0e:c0:44:0e:
b2:75:2c:e3:3c:78:e5:cb:b1:52:1a:6f:cc:af:fe:6f:7d:7e:
37:b2:db:02:80:09:8d:d7:1e:51:dc:c2:d0:a4:6c:5b:c0:10:
4b:58:9f:aa:a9:19:39:97:87:7b:2c:5f:25:5d:1a:d5:59:a7:
6c:45:5e:b5:42:0c:ea:11:70:4f:47:e2:e3:f8:f6:c6:70:61:
ab:54:47:bc:3b:08:cf:32:0c:7c:a3:6d:52:43:0a:fa:74:de:
20:d5:51:42:e2:a9:e6:6e:6e:f4:72:dd:3e:14:18:37:da:34:
7f:09:cb:53:36:88:2e:97:64:e6:17:e2:fb:73:63:72:6d:cf:
84:ef:fb:43:77:d3:0c:56:26:49:61:ee:61:97:11:49:ea:c3:
0e:c8:36:f1:77:f1:bc:5d:4a:3e:e1:8f:db:a9:77:25:2a:c6:
5d:c5:e5:a0:65:72:32:57:99:40:98:4d:91:2f:78:ec:75:51:
35:41:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:22:57 2026 by rpki-client