
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
File: cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa (raw, json)
Hash identifier: Zf9VkDD8c7h57j2yu+eL8oJtLoC6pJRqAnAhMLRJYRY=
Subject key identifier: BE:C9:3B:C8:0A:9D:51:2A:79:0D:37:C3:10:DB:5A:7F:75:7D:2E:23
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F4328584EE4F1F84F5DB82C63AB4BB780
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
Signing time: Thu 20 Aug 2026 01:00:12 +0000
ROA not before: Thu 20 Aug 2026 01:00:12 +0000
ROA not after: Wed 18 Nov 2026 02:00:12 +0000
asID: 23243
IP address blocks: 209.124.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:f1:f8:4f:5d:b8:2c:63:ab:4b:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Aug 20 01:00:12 2026 GMT
Not After : Nov 18 02:00:12 2026 GMT
Subject: CN=88dc2419-487e-43c5-ab52-2065c0ddf4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:9c:e4:a8:e2:2c:55:7b:93:21:ff:12:09:
e0:a2:8a:c8:8c:59:5c:b0:d2:30:bc:fe:b8:77:af:
bd:83:ae:8f:6d:f2:44:cd:da:49:4f:99:f0:42:52:
99:01:35:b4:b2:9d:84:10:bf:8f:4e:92:dc:f4:1c:
2f:14:92:ec:03:b1:16:32:a1:fe:98:75:d3:8e:cc:
fe:40:46:79:7d:14:99:4c:9d:0e:83:c5:d1:6e:a1:
da:e2:a8:4b:50:b9:ef:33:d3:3e:9a:7c:fd:f0:b7:
44:52:e2:43:04:de:99:0d:ea:c4:27:0a:f0:ff:54:
ab:db:f0:9c:70:7f:b8:df:f7:f4:d0:31:80:a4:34:
dc:92:5f:5e:ca:35:78:1f:a9:e9:26:7d:bf:e1:05:
a9:e1:3d:e0:27:17:66:10:a6:c0:73:c2:75:9c:50:
57:2a:ef:db:8f:f6:35:56:63:7d:cc:57:45:6c:0f:
75:06:ab:34:ae:da:34:63:90:d7:c0:48:fa:fb:77:
04:fa:a9:91:ab:53:eb:1c:97:de:48:f6:71:23:e7:
47:cd:c7:fe:8c:4b:ad:24:2d:fc:17:16:be:5d:29:
3e:81:0e:68:0e:af:a7:60:7b:d9:56:9c:6f:b6:6e:
de:d2:92:93:5e:4b:65:b7:8d:05:e8:0d:05:8b:a9:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:3B:C8:0A:9D:51:2A:79:0D:37:C3:10:DB:5A:7F:75:7D:2E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:48:fe:1f:8d:df:ab:c1:df:e7:9e:31:06:1f:54:a9:08:98:
99:af:c5:a7:a1:6d:0c:eb:2d:0c:85:26:b8:0e:7e:ea:bd:8a:
c3:da:c6:01:70:9c:df:5b:84:52:b2:03:de:db:78:95:fd:ad:
0c:a1:46:57:24:45:e9:15:e9:1b:c6:dc:19:f0:9e:1c:ad:03:
fa:5e:af:d3:68:d3:2f:1d:33:57:d3:77:9f:1b:ff:3d:89:0f:
9a:11:4f:68:1a:ac:4f:6b:56:6a:72:c1:b0:ec:c0:4c:70:21:
05:e1:8b:2b:68:4b:06:60:85:c0:17:b8:b6:ed:fd:a7:55:c7:
ee:80:bf:d5:8d:e4:7a:3e:83:73:10:c7:aa:48:1b:08:b1:ef:
79:6d:ae:ac:92:f0:b3:44:f1:88:01:b9:40:e8:b5:bd:5f:f4:
d4:9b:b6:ed:ea:fc:cb:e3:c1:19:ce:3f:c8:fa:70:36:97:3d:
5f:ac:e5:ef:05:b6:ab:89:b9:97:f1:88:82:02:cd:2c:88:50:
eb:45:d0:a6:6e:69:f1:54:78:3d:78:0e:d4:f8:a4:be:b7:ce:
f8:64:09:ee:af:11:df:30:44:31:e0:97:78:9b:ad:9f:82:3f:
f6:d7:fe:a4:68:77:45:63:04:d7:b9:ec:f8:00:b4:c4:11:c5:
1d:8a:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 21:00:29 2026 by rpki-client