
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
File: 825b10e9-fa31-33b9-a80e-e58c85226acf.roa (raw, json)
Hash identifier: V4YlzTlUzJi46U3J64WSTtG4EL/sQcfFzXdGfOsGyQY=
Subject key identifier: 17:4E:CE:63:10:41:89:56:18:7E:43:77:68:BE:B6:E3:6D:83:5B:54
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584DFA7075C71372A3CAAA610240
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 852
IP address blocks: 209.29.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:75:c7:13:72:a3:ca:aa:61:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=d749c7ab-bebd-448b-8a74-b1952ca003a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:95:2e:ea:20:a1:0a:aa:ec:71:08:8b:82:
43:70:01:75:35:ae:23:5d:04:a1:9d:c5:a6:0f:8c:
c5:e1:86:8e:f3:f1:6a:58:f3:72:42:26:30:61:21:
02:25:d9:fe:1d:82:f4:a0:f5:ba:7c:46:08:6e:e7:
5a:52:79:3d:95:96:e9:02:b8:9e:eb:25:45:bd:d2:
85:94:d2:3d:87:ba:00:0b:e7:17:6c:7a:0b:07:9d:
10:c8:17:60:8d:c4:81:66:d1:e7:3b:66:65:c2:74:
dd:50:95:0d:5e:0c:c2:e8:c3:55:e2:66:b4:59:c3:
a3:c4:db:6f:2c:d0:7c:a8:a5:3b:f9:48:43:ac:4e:
d7:07:7a:fc:11:68:9f:81:a3:9c:32:52:1f:9e:21:
cb:82:3c:22:91:90:e0:ff:0d:60:33:c2:81:5f:07:
79:c9:63:a3:9c:6e:32:b3:a4:fd:ec:a5:cd:a0:b6:
bb:ee:21:a6:ac:58:ff:dc:87:5d:d0:10:40:86:79:
07:be:04:fa:26:95:1a:ef:b0:52:81:74:6c:d5:b0:
40:d1:4f:98:7f:cd:10:cf:de:94:a2:76:f2:99:e2:
7f:97:78:72:7d:79:72:6d:8c:ca:91:9e:69:58:79:
af:6d:0e:ae:2b:50:a4:c8:c7:57:13:a8:46:c1:fb:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:CE:63:10:41:89:56:18:7E:43:77:68:BE:B6:E3:6D:83:5B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:2f:7f:f6:b7:17:92:50:7b:6f:d5:53:b6:74:a8:d7:55:81:
30:f8:23:b4:93:d0:da:ee:33:a0:35:06:90:bd:37:1b:00:6e:
58:91:e7:67:21:88:d6:67:df:e3:b2:26:88:24:ea:d3:fd:97:
d1:53:4b:53:38:7f:b2:69:e8:c0:0c:b9:8e:bf:b5:7f:e4:c3:
dc:20:d7:2b:50:06:7d:5c:12:1c:2d:54:30:3a:a1:61:80:39:
84:ae:ce:85:02:fe:2e:37:e3:f0:c0:16:d8:ec:16:8a:24:b7:
e9:89:44:3b:28:dd:f7:79:64:87:db:3f:62:e7:01:c1:2e:74:
56:c2:a7:36:03:b8:62:a2:f3:09:1a:2f:12:03:3b:49:77:e3:
b5:de:04:2e:d4:da:14:82:3f:21:d7:83:74:ba:20:2c:ed:5b:
15:ec:34:26:30:00:0c:d8:44:3a:50:7e:7e:9d:bd:0a:0c:12:
4f:13:56:88:79:68:50:a1:5e:18:e1:a2:bf:74:df:81:9c:50:
3d:ef:a1:2f:28:0d:b1:96:a4:29:8a:a3:bd:70:04:7c:fb:ef:
e6:3d:3b:75:ad:54:01:99:0b:ad:17:a4:b9:ab:85:18:9d:8f:
c9:8a:9b:3d:07:e4:42:2d:45:2f:86:6a:1b:05:d4:29:25:22:
f4:fc:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:50:58 2026 by rpki-client