
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
File: 243cb8c9-f327-32cd-ae01-b4a75520d28d.roa (raw, json)
Hash identifier: Gs3pyA2InN9ASHDFGxLOg7n91TEaW67A0PtQFd030/k=
Subject key identifier: 3B:69:99:AD:20:FC:C6:E5:E7:39:2A:4B:89:2C:D2:2B:17:CE:91:66
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584E0005D4190730FD2C32F2CB00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 852
IP address blocks: 209.89.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:05:d4:19:07:30:fd:2c:32:f2:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=235bcc0d-be1f-4c38-80cb-60d631fc5aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:b4:c7:c4:57:08:8d:a2:79:d5:dc:66:fa:
42:98:29:ff:80:a7:09:0e:e9:ad:9d:d2:06:ba:12:
1f:8e:f8:d8:48:13:c0:cb:e3:d0:82:42:be:13:26:
1a:f6:99:55:6e:89:0a:97:33:f2:73:de:b5:df:45:
3d:40:dc:82:c4:08:98:47:33:8e:cf:3c:3d:2b:5e:
8e:18:47:b0:64:22:59:45:c3:d2:ce:86:da:eb:65:
d3:8f:f7:32:50:3e:d3:3a:02:0d:d6:8e:a9:1b:6c:
f6:63:63:df:3a:be:50:a4:80:72:16:ad:ce:f0:fe:
94:ed:68:46:84:ff:48:94:97:91:40:bd:b8:b7:2c:
ae:eb:c9:e4:8f:cb:e7:e8:18:e7:84:bb:04:df:a1:
02:2a:9a:0e:e4:39:86:ef:09:e5:7e:83:17:81:5b:
4c:85:47:f9:99:a1:2c:8a:c8:11:72:34:5c:e5:df:
75:4d:d2:71:92:46:b8:0a:94:2c:92:a1:14:b4:4a:
d2:d0:35:a9:bf:48:d1:d6:8e:cf:b5:9c:3c:bf:f6:
15:45:46:cf:87:5d:29:ae:61:a0:42:31:a8:13:de:
05:ef:1d:ce:70:5c:0e:e6:86:0d:1a:b4:a5:ca:f8:
55:10:1c:93:6e:6a:52:76:82:6e:34:98:44:a9:13:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:99:AD:20:FC:C6:E5:E7:39:2A:4B:89:2C:D2:2B:17:CE:91:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:86:dd:d1:cb:c9:fa:f0:7e:62:83:3a:aa:ef:ec:6c:5a:66:
72:7f:bf:38:66:66:d7:69:cf:dd:50:9f:65:7b:53:39:c7:3e:
df:24:db:9a:4a:e0:1b:49:d1:4d:df:70:0a:b7:80:3a:5e:5f:
24:7e:38:2b:9a:bb:65:a0:9b:c7:ed:e7:0a:46:2d:21:b5:b7:
1e:9b:e9:97:6e:f5:a1:f4:0b:f1:0e:02:1b:c1:a8:32:16:5c:
d9:ca:91:c3:05:50:d7:ba:ff:41:d6:63:4e:d8:dd:16:c5:1c:
14:c8:2c:52:39:24:d1:75:e6:c4:95:11:d8:ef:50:2c:e1:36:
8f:0d:fc:77:c8:bd:ee:cb:9e:de:be:b2:2a:23:9c:38:23:40:
b8:cf:5a:a2:6c:e2:15:c1:1b:db:41:f1:41:17:b7:4c:bc:98:
81:bc:19:8d:a3:df:64:bf:b4:7d:9f:60:eb:83:22:db:f9:50:
a2:05:cc:bb:5b:7b:7f:25:33:c4:db:02:34:b6:22:65:79:2a:
2c:0f:13:be:0e:18:60:a1:91:13:24:b9:fa:42:ee:91:b4:3a:
61:e4:d3:6f:3c:a2:45:a3:24:58:57:1e:09:a4:78:1b:a4:09:
d3:3b:24:58:31:34:1b:40:9c:f0:b4:f1:a8:b4:64:06:1f:09:
93:a2:68:38
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4ABdQZBzD9LDLyywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MjM1YmNjMGQtYmUxZi00YzM4LTgwY2ItNjBkNjMxZmM1YWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwq0x8RXCI2iedXcZvpCmCn/gKcJDumtndIG
uhIfjvjYSBPAy+PQgkK+EyYa9plVbokKlzPyc96130U9QNyCxAiYRzOOzzw9K16O
GEewZCJZRcPSzoba62XTj/cyUD7TOgIN1o6pG2z2Y2PfOr5QpIByFq3O8P6U7WhG
hP9IlJeRQL24tyyu68nkj8vn6BjnhLsE36ECKpoO5DmG7wnlfoMXgVtMhUf5maEs
isgRcjRc5d91TdJxkka4CpQskqEUtErS0DWpv0jR1o7PtZw8v/YVRUbPh10prmGg
QjGoE94F7x3OcFwO5oYNGrSlyvhVEByTbmpSdoJuNJhEqRPYaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDtpma0g/Mbl5zkqS4ks0isXzpFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjQzY2I4YzktZjMyNy0z
MmNkLWFlMDEtYjRhNzU1MjBkMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0VkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfobd0cvJ+vB+YoM6qu/sbFpmcn+/OGZm12nP3VCfZXtTOcc+3yTbmkrg
G0nRTd9wCreAOl5fJH44K5q7ZaCbx+3nCkYtIbW3Hpvpl271ofQL8Q4CG8GoMhZc
2cqRwwVQ17r/QdZjTtjdFsUcFMgsUjkk0XXmxJUR2O9QLOE2jw38d8i97sue3r6y
KiOcOCNAuM9aomziFcEb20HxQRe3TLyYgbwZjaPfZL+0fZ9g64Mi2/lQogXMu1t7
fyUzxNsCNLYiZXkqLA8Tvg4YYKGREyS5+kLukbQ6YeTTbzyiRaMkWFceCaR4G6QJ
0zskWDE0G0Cc8LTxqLRkBh8Jk6JoOA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:49:32 2026 by rpki-client