
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa
File: f907b106-313a-3349-af6e-4565427f5b0c.roa (raw, json)
Hash identifier: oTjR2YkwwXGwRWiUpuPr7X/2N2ZlxZ0vQ0liau5HTHk=
Subject key identifier: 38:A6:5E:79:0A:F6:66:8E:2A:FD:5A:3A:AE:F9:76:2F:45:2A:16:CA
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584F20F7BB2DC45FD0CAD5E98D80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 21949
IP address blocks: 2607:f0c8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:bb:2d:c4:5f:d0:ca:d5:e9:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=812bdef1-678f-476b-8185-5ea04f19b6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:15:5d:c3:eb:c8:6a:f9:e8:13:b9:0b:87:
57:6c:90:28:f2:c8:bf:56:54:61:63:de:94:a9:1c:
f3:59:6a:c2:a7:ba:0f:df:3d:f6:ab:f5:7d:4c:c4:
5b:5e:33:2c:ad:45:fb:4d:4b:9c:74:4c:d5:69:cd:
75:8f:b3:70:e8:45:8c:e6:2e:2c:07:4d:e2:8f:12:
ed:c1:2c:18:1e:40:fd:d3:7f:6f:22:3d:28:0e:97:
70:f7:5d:01:25:3f:e7:02:ee:33:bd:57:cb:bd:f0:
4d:13:7d:a9:ec:bc:d6:96:e5:5f:ef:90:b3:00:75:
47:60:4f:f4:8d:87:84:94:23:de:3f:68:74:b2:2d:
10:00:6e:ad:42:8c:7f:15:56:5b:0d:06:7c:8c:3e:
c2:72:90:3e:59:74:5b:73:21:3a:d7:f6:f6:02:b3:
6b:2f:ce:f1:cf:6c:4f:c1:b0:d8:ac:25:d9:2f:2f:
03:dc:e6:31:3e:ed:67:f1:f8:ea:4b:3e:f4:e0:6c:
bc:7d:a1:ab:a2:8f:d9:f2:c1:97:c3:e7:ae:41:f1:
fc:da:ce:a8:e8:55:7f:16:ab:df:5f:f8:e8:cc:a4:
cf:98:20:9c:3c:77:1a:3e:ed:76:dd:9c:ca:03:ac:
b6:32:65:5d:87:fa:54:ef:5f:af:0a:19:8f:cf:90:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:5E:79:0A:F6:66:8E:2A:FD:5A:3A:AE:F9:76:2F:45:2A:16:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f0c8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:8c:5f:b0:2d:08:53:63:c8:04:8f:c7:77:83:a6:d7:1e:2b:
4b:8c:74:99:ba:50:80:c7:f9:21:b8:22:eb:62:ed:5a:3c:24:
73:cf:7b:d6:20:16:07:b9:8c:3d:26:77:41:9b:ff:a1:36:53:
b2:17:8e:a3:66:8b:10:31:b9:a8:1a:57:0e:c7:dd:86:43:67:
59:d0:8e:1e:3c:dc:ec:2f:f4:07:c1:b3:03:62:f3:72:ce:b7:
8b:e1:44:fa:9c:96:85:75:9d:51:38:d6:96:e6:08:0b:7f:fc:
84:7f:91:35:69:87:7f:3a:7f:49:34:4e:b6:95:ad:0e:b1:60:
52:5c:b6:69:38:5d:a4:bb:71:04:11:33:04:82:04:18:69:8f:
e0:84:d0:74:db:84:22:2a:7b:6d:c3:84:9b:7c:e9:a3:f9:d7:
8b:7c:11:65:eb:8d:c8:f9:03:cd:91:f1:f4:5a:45:1a:97:dc:
19:21:a2:59:61:6b:90:09:f6:fb:01:75:07:5a:2c:d4:fb:47:
25:2e:cd:9d:4b:6b:be:7e:d8:ab:34:b4:e8:56:46:3b:b3:44:
29:4a:c0:af:48:89:21:b3:e1:3a:32:f3:fd:a5:b4:b5:9b:40:
ec:03:a0:31:74:19:46:b0:5c:00:da:98:c4:74:66:18:61:79:
f8:98:47:6e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8g97stxF/QytXpjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
ODEyYmRlZjEtNjc4Zi00NzZiLTgxODUtNWVhMDRmMTliNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL0VXcPryGr56BO5C4dXbJAo8si/VlRhY96U
qRzzWWrCp7oP3z32q/V9TMRbXjMsrUX7TUucdEzVac11j7Nw6EWM5i4sB03ijxLt
wSwYHkD9039vIj0oDpdw910BJT/nAu4zvVfLvfBNE32p7LzWluVf75CzAHVHYE/0
jYeElCPeP2h0si0QAG6tQox/FVZbDQZ8jD7CcpA+WXRbcyE61/b2ArNrL87xz2xP
wbDYrCXZLy8D3OYxPu1n8fjqSz704Gy8faGroo/Z8sGXw+euQfH82s6o6FV/Fqvf
X/jozKTPmCCcPHcaPu123ZzKA6y2MmVdh/pU71+vChmPz5DXkQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDimXnkK9maOKv1aOq75di9FKhbKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkwN2IxMDYtMzEzYS0z
MzQ5LWFmNmUtNDU2NTQyN2Y1YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwyDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5jF+wLQhTY8gEj8d3g6bXHitLjHSZulCAx/khuCLrYu1aPCRzz3vW
IBYHuYw9JndBm/+hNlOyF46jZosQMbmoGlcOx92GQ2dZ0I4ePNzsL/QHwbMDYvNy
zreL4UT6nJaFdZ1RONaW5ggLf/yEf5E1aYd/On9JNE62la0OsWBSXLZpOF2ku3EE
ETMEggQYaY/ghNB024QiKnttw4SbfOmj+deLfBFl643I+QPNkfH0WkUal9wZIaJZ
YWuQCfb7AXUHWizU+0clLs2dS2u+ftirNLToVkY7s0QpSsCvSIkhs+E6MvP9pbS1
m0DsA6AxdBlGsFwA2pjEdGYYYXn4mEdu
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:23:08 2026 by rpki-client