
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
File: 243cb8c9-f327-32cd-ae01-b4a75520d28d.roa (raw, json)
Hash identifier: IdqIGhLEeCDMzVgFAi6J0rIyfv3WnvMAxzC632vNw/o=
Subject key identifier: 94:3B:BE:1E:BF:2C:57:2C:39:9D:14:10:85:19:5F:2B:19:EF:79:BC
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA79A2AA387674B8E3EA20980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 209.89.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:2a:a3:87:67:4b:8e:3e:a2:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f39a220c-b8cd-4b34-908d-e657675168d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:66:80:c5:9e:a3:0d:78:4c:ea:24:d9:ff:
6e:ac:aa:74:e0:80:f5:fd:89:91:a0:62:fc:c1:70:
8b:8a:f6:65:41:de:3c:27:c5:78:44:18:f0:1b:31:
b1:f0:9f:e0:51:d3:7b:d0:59:da:58:a0:9c:f4:2e:
cf:ec:65:03:c3:93:8f:58:ee:a4:c8:cc:b0:0f:f4:
a2:ff:e1:eb:14:54:12:03:a5:d5:27:7b:43:a2:b9:
73:33:3b:49:90:ab:d7:b7:d1:c1:37:a8:c9:8b:0a:
1f:d7:94:92:37:61:ed:dc:72:c8:6c:d1:a2:4e:d8:
8b:19:03:3e:60:5c:b1:46:32:a2:cf:a7:36:f1:57:
94:dd:6f:29:0f:7c:f7:b3:f1:b1:43:29:e5:5a:ea:
46:62:76:83:ba:be:1e:18:7f:ca:12:ed:3d:db:3b:
27:00:07:5e:a9:65:2a:1d:40:38:77:d8:29:a7:95:
37:0b:15:a9:b9:c9:b7:7b:79:1f:e7:e5:83:f8:32:
0e:36:f2:91:ac:e1:ed:2e:fe:24:0e:bb:95:aa:7a:
4e:f3:19:90:50:0c:b7:b6:05:19:95:92:06:15:94:
0c:0e:af:1a:e1:8d:94:d3:f3:12:49:b8:57:26:f4:
21:52:d8:0c:d9:99:15:61:2e:8a:68:79:56:6f:f7:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:BE:1E:BF:2C:57:2C:39:9D:14:10:85:19:5F:2B:19:EF:79:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:9c:12:a8:17:d7:e2:94:4b:b4:e3:3e:9f:ef:31:91:6f:0f:
16:22:e3:65:13:d0:37:ce:8b:3e:84:26:34:b1:6d:76:58:b0:
2e:db:a1:41:b9:fb:81:a5:65:bf:f6:81:76:88:bd:f0:7c:05:
73:a8:00:7d:22:bc:e7:ed:1f:36:4f:e2:01:9c:ad:6d:f6:a0:
d0:74:d2:71:66:0f:fe:fd:84:b7:fb:91:80:71:65:94:33:1a:
6a:91:f9:1b:c6:b6:e1:bf:7c:91:e9:62:10:de:da:f7:95:af:
d3:e5:5a:53:e9:05:6d:f9:f6:29:43:34:f6:bb:8e:9e:47:e7:
f6:38:81:40:e7:37:c9:4c:65:05:7a:ef:0e:9a:35:83:c9:15:
77:92:33:28:cb:dd:a9:0d:2b:80:f1:0e:01:bd:a4:42:60:11:
03:65:74:39:0c:7e:86:1f:ee:35:0e:9e:be:14:f8:3f:88:c1:
cc:38:bd:1f:d4:b9:32:2e:76:02:46:e2:b7:de:94:13:fd:02:
d0:20:88:f6:82:dc:6a:da:7c:4b:a1:b6:b7:af:ee:45:78:8a:
44:42:d6:c7:82:8f:a0:4b:72:2a:01:2e:b6:19:8a:65:00:13:
99:82:49:05:6b:d3:af:a1:7f:89:cd:c0:e5:c6:26:d9:f4:8f:
65:24:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:43:32 2026 by rpki-client