
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50ffd74b-9f06-37ef-b11e-0376266355c8.roa
File: 50ffd74b-9f06-37ef-b11e-0376266355c8.roa (raw, json)
Hash identifier: xfhb7M2XcSJRRVfsRnNPNo8EZZaOt2ADDgUJ6J1J0oE=
Subject key identifier: E5:7E:C8:07:1F:01:06:16:10:DC:C8:32:71:72:47:19:5A:49:24:F1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EAF234A63775EBA961594BBC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50ffd74b-9f06-37ef-b11e-0376266355c8.roa
Signing time: Fri 31 Jul 2026 18:26:05 +0000
ROA not before: Fri 31 Jul 2026 18:26:05 +0000
ROA not after: Thu 29 Oct 2026 18:26:05 +0000
asID: 81
IP address blocks: 128.109.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:23:4a:63:77:5e:ba:96:15:94:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 31 18:26:05 2026 GMT
Not After : Oct 29 18:26:05 2026 GMT
Subject: CN=128ea125-a86c-46b2-8c86-460e466ce858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:70:c3:b2:63:8f:7b:a9:a1:a5:88:1f:d3:
5c:af:e1:f9:34:5e:b0:9d:73:f0:31:32:85:9f:6e:
35:2e:99:30:fe:d1:34:25:64:68:97:1b:9f:21:5b:
b0:dc:0c:8c:17:9a:62:8a:3f:4a:10:a6:4f:a4:d9:
43:d8:3f:57:a3:e1:77:4c:af:88:dc:f0:02:5b:d8:
a4:1f:ef:ba:24:7a:a2:45:a1:81:ee:c9:8c:93:12:
13:6c:af:32:2f:e7:43:88:10:b8:ee:22:c8:0a:b2:
a1:f4:ab:43:75:35:e6:ff:5c:ad:40:e0:3a:74:a3:
90:cb:9e:e5:5d:b5:98:d9:cb:a4:a4:03:42:58:a0:
e6:ad:56:bf:7c:88:6c:ae:2b:00:27:f6:b4:7e:0b:
bc:2b:b3:18:6d:8c:da:8b:4b:ec:c6:22:a8:6f:a5:
d8:2d:a2:73:c0:f0:27:f2:0d:25:e7:5f:5f:f2:74:
86:56:a2:8d:9e:13:4c:74:e9:02:20:9a:89:43:ee:
6d:a1:fe:50:84:bd:fe:da:30:26:a2:1b:22:eb:48:
98:2d:d7:59:50:5a:d4:80:60:83:e6:ff:e8:c1:dd:
0f:a7:ee:e5:0a:79:41:90:ea:95:2a:d5:9b:d3:42:
47:04:64:4d:10:ee:3f:5a:d3:69:87:46:a0:02:67:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:C8:07:1F:01:06:16:10:DC:C8:32:71:72:47:19:5A:49:24:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50ffd74b-9f06-37ef-b11e-0376266355c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:24:7f:c8:1e:a1:95:79:19:a0:c3:22:90:5f:b5:a8:4a:d9:
1c:46:8b:54:e4:ac:83:4e:77:40:97:dc:73:f5:46:42:14:59:
c0:7c:40:03:4c:b2:05:d0:be:02:59:04:f0:6f:76:e9:bc:01:
3e:92:19:ad:c1:d5:37:a1:08:7f:18:e4:34:38:af:c9:c9:b1:
0b:e3:39:cf:65:d1:9d:21:0a:bc:7c:a5:d9:e7:74:19:4e:2e:
33:49:b1:ae:ae:d0:f5:d3:11:ea:36:18:50:e5:d2:79:84:e7:
ce:cf:48:42:df:35:7b:6d:f8:d2:01:dd:3b:fb:28:29:c2:d7:
c1:ea:50:ab:27:c3:27:c6:af:b9:f7:58:a8:42:1c:83:5d:64:
8b:d7:4b:05:ae:61:8d:63:e6:1d:6b:e4:b6:0b:50:18:26:1a:
d7:db:b3:f4:88:02:7a:b4:38:57:ad:9e:91:f0:9a:e6:9a:90:
01:63:0c:7c:d6:0d:e0:e8:1a:3f:ee:3c:54:ce:92:c7:a9:78:
70:eb:13:e5:f6:a2:63:02:a6:7a:5d:f3:d1:17:d4:32:89:98:
32:f6:d7:23:00:a5:ec:06:bc:b1:0f:a5:93:23:7c:2b:84:f8:
9b:38:72:55:e6:e1:72:9e:19:67:e7:1b:20:b1:70:31:dd:06:
44:96:18:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vI0pjd166lhWUu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDczMTE4MjYwNVoXDTI2MTAyOTE4MjYwNVowLzEtMCsGA1UEAxMk
MTI4ZWExMjUtYTg2Yy00NmIyLThjODYtNDYwZTQ2NmNlODU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArudww7Jjj3upoaWIH9Ncr+H5NF6wnXPwMTKF
n241Lpkw/tE0JWRolxufIVuw3AyMF5piij9KEKZPpNlD2D9Xo+F3TK+I3PACW9ik
H++6JHqiRaGB7smMkxITbK8yL+dDiBC47iLICrKh9KtDdTXm/1ytQOA6dKOQy57l
XbWY2cukpANCWKDmrVa/fIhsrisAJ/a0fgu8K7MYbYzai0vsxiKob6XYLaJzwPAn
8g0l519f8nSGVqKNnhNMdOkCIJqJQ+5tof5QhL3+2jAmohsi60iYLddZUFrUgGCD
5v/owd0Pp+7lCnlBkOqVKtWb00JHBGRNEO4/WtNph0agAmeAEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOV+yAcfAQYWENzIMnFyRxlaSSTxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTBmZmQ3NGItOWYwNi0z
N2VmLWIxMWUtMDM3NjI2NjM1NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG17MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4kf8geoZV5GaDDIpBftahK2RxGi1TkrINOd0CX3HP1RkIUWcB8QANM
sgXQvgJZBPBvdum8AT6SGa3B1TehCH8Y5DQ4r8nJsQvjOc9l0Z0hCrx8pdnndBlO
LjNJsa6u0PXTEeo2GFDl0nmE587PSELfNXtt+NIB3Tv7KCnC18HqUKsnwyfGr7n3
WKhCHINdZIvXSwWuYY1j5h1r5LYLUBgmGtfbs/SIAnq0OFetnpHwmuaakAFjDHzW
DeDoGj/uPFTOksepeHDrE+X2omMCpnpd89EX1DKJmDL21yMApewGvLEPpZMjfCuE
+Js4clXm4XKeGWfnGyCxcDHdBkSWGNk=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:00:55 2026 by rpki-client