
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa
File: 52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa (raw, json)
Hash identifier: /DnJpIWeqsEW9xWc7s6LRhBs+rWQEoLAtFlErAhfrq0=
Subject key identifier: 47:E9:99:F3:32:71:4F:BE:3A:4F:22:2C:95:FF:5E:5D:7B:BE:9E:7F
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F20F7D01D807354584C430FC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 209.17.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:d0:1d:80:73:54:58:4c:43:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=a0f6dd3c-e1c9-49b6-af73-4e85e61fd02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:78:cc:e2:b8:04:29:7a:4f:3b:9d:f2:c4:
ec:69:b2:53:85:d1:f3:08:4b:a4:91:df:99:c2:59:
b8:36:e0:37:f1:55:c6:4c:57:8c:82:61:80:f1:55:
67:a2:d8:cb:b0:70:3f:d5:44:46:64:73:b4:31:ae:
97:1e:d6:bc:2b:53:c4:da:29:3f:fa:63:17:d5:2f:
61:05:dc:bc:3c:e6:93:7e:c5:56:b5:ed:9d:f2:56:
df:97:f4:15:92:30:a1:6d:ba:d2:f0:05:29:4b:bc:
03:7a:32:a5:0b:73:e3:c2:1d:72:c3:fc:20:a9:1e:
c8:29:aa:19:94:c2:40:26:9e:03:c0:10:41:88:e6:
b5:8f:35:90:5a:33:fb:39:aa:00:11:46:2c:c3:21:
42:1d:00:03:37:0d:b4:f2:34:4d:f7:cc:cb:cb:1a:
6b:09:ee:12:6a:47:51:d8:36:0f:b3:cb:0b:79:77:
0b:3c:a2:c0:13:e1:f7:b9:2f:70:b4:26:00:a9:a4:
90:d8:f6:20:3b:40:17:bd:98:4f:3e:6e:e2:31:1d:
6d:74:50:1e:93:b9:c1:fd:4e:2c:68:93:44:4f:5a:
85:48:e6:17:b2:02:9c:53:53:7b:6c:5e:8d:6a:9b:
2c:54:ef:91:78:4e:90:41:bd:1e:6e:1e:7d:c5:f3:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:99:F3:32:71:4F:BE:3A:4F:22:2C:95:FF:5E:5D:7B:BE:9E:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:7b:f6:53:e1:a4:75:0b:39:f5:07:91:d4:ca:0b:36:86:d7:
31:cc:35:6d:70:d3:a6:cd:7c:46:e4:dd:56:4c:f0:92:7f:76:
73:fd:3b:ba:98:a4:a3:31:6c:46:0c:f1:29:f5:a9:a7:67:82:
5c:96:5c:92:70:95:6f:3e:3e:02:3e:f0:2e:cc:4e:bd:ae:e5:
92:26:f0:7e:b1:83:fa:bc:b9:e8:05:00:90:f9:e3:a6:b5:e7:
09:a2:a5:40:22:04:f0:f9:06:91:72:e3:38:a7:ac:b1:db:a6:
15:41:a0:70:05:cd:20:3e:59:23:4f:b0:d0:f6:92:10:3d:b4:
25:51:35:8d:b2:a3:d2:24:b5:58:20:8f:5c:2a:2b:05:24:15:
cc:5c:cd:c9:4a:76:52:9e:01:4a:71:55:59:11:35:21:2b:d2:
4f:41:a2:5a:2f:3c:b7:77:73:20:db:b8:43:ef:c7:2b:29:40:
c4:7e:8c:a8:61:46:22:75:e3:9c:59:ee:b6:21:a6:42:7d:de:
28:56:7b:d7:f4:4c:e9:cc:39:1b:eb:03:0d:cb:24:4a:28:5f:
7a:3b:28:76:ab:71:6f:68:13:be:8b:04:98:69:99:49:f2:17:
c2:dd:fc:ef:cb:75:5c:02:5d:11:af:73:cd:28:3c:dd:e5:af:
79:3c:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:30:26 2026 by rpki-client