
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/982dc959-7007-38bd-872b-7b5338a49095.roa
File: 982dc959-7007-38bd-872b-7b5338a49095.roa (raw, json)
Hash identifier: JCk3s4vbVns2mPf9eXIKP7mNRYzAWt+2jffLrb4qZRM=
Subject key identifier: DD:A0:C7:51:44:3A:2D:22:A1:CC:9E:66:40:95:94:15:A8:06:E6:35
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584DF210825F5FFE0812D9F65C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/982dc959-7007-38bd-872b-7b5338a49095.roa
Signing time: Mon 25 May 2026 01:00:24 +0000
ROA not before: Mon 25 May 2026 01:00:24 +0000
ROA not after: Sun 23 Aug 2026 01:00:24 +0000
asID: 7861
IP address blocks: 209.91.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f2:10:82:5f:5f:fe:08:12:d9:f6:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: May 25 01:00:24 2026 GMT
Not After : Aug 23 01:00:24 2026 GMT
Subject: CN=281f94e5-e1e1-4fa1-8b44-78bcf3950c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:5c:fd:af:a2:de:57:12:30:1d:83:00:de:
32:3a:d6:b7:79:fb:4f:03:c5:93:a5:ee:ce:66:32:
d6:dc:9a:c7:75:69:2d:c4:0f:57:39:b6:98:4a:1f:
ea:ff:cd:af:fb:f9:cb:1b:c2:fa:1b:b8:bf:5c:8f:
b8:97:ee:55:7c:35:87:7d:40:e1:cc:9a:f8:be:95:
b2:d6:3e:dc:94:d7:df:81:f2:7c:b6:51:9e:d2:9f:
bd:07:17:a2:88:74:b5:8b:6e:cb:21:2b:84:0f:aa:
ed:21:7f:6f:ad:a7:6b:c4:48:6d:cf:6e:ef:ee:88:
a5:1c:ab:cc:94:a0:52:eb:92:42:7b:0b:2a:2c:08:
98:28:9c:35:03:35:53:26:ff:06:c8:22:4c:0f:25:
4a:4f:31:f9:7f:2b:0c:dc:c9:9c:81:14:b7:91:f9:
67:c8:a7:f5:ab:19:dc:84:0c:c3:cd:fc:41:e9:b6:
d7:67:f3:94:4d:0e:6e:32:76:8a:18:0c:c5:fe:7e:
11:08:d7:97:5c:ea:55:c9:3a:d6:31:75:ae:e1:25:
1c:b8:17:62:25:83:26:3a:4a:c7:e3:0b:7e:45:01:
60:f4:36:2e:5b:87:ff:33:11:27:66:83:99:51:45:
ab:ec:39:78:7f:8f:ec:6a:51:87:d8:f8:a9:1e:5b:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:C7:51:44:3A:2D:22:A1:CC:9E:66:40:95:94:15:A8:06:E6:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/982dc959-7007-38bd-872b-7b5338a49095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.91.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:7b:30:3d:76:99:3f:cd:a9:f3:61:ae:6d:dd:21:57:ab:14:
68:e1:1c:13:f5:b5:b0:83:e6:a1:24:a7:a2:80:07:54:59:0e:
b6:0f:28:67:8b:f5:f2:fa:00:5a:fd:af:ac:e9:8f:91:18:53:
be:d5:7d:51:fd:6f:20:4f:64:a9:a5:51:10:47:e3:99:22:f0:
ef:bb:fb:5f:41:d0:5f:b8:4e:8b:41:d4:75:35:9a:85:36:15:
f5:9b:8f:3b:40:37:80:43:50:a5:f9:78:30:c4:9d:48:ca:e4:
c9:68:94:80:a3:18:7b:cb:ca:e8:f2:17:1f:6b:0f:d0:e7:e5:
d9:b0:b1:d7:54:8a:e5:59:eb:8c:72:3a:2a:c7:46:ca:19:92:
fa:b8:19:10:37:43:33:95:57:26:cd:f0:a6:4a:8e:2e:42:ed:
1f:83:05:8d:4d:bf:a1:d3:aa:55:3a:95:61:b2:5a:54:3a:bb:
e2:56:12:2e:78:50:97:d8:8b:a2:0f:35:a5:83:03:a9:0b:91:
4a:9f:23:6b:df:8e:ac:4b:f7:98:09:08:06:7e:bb:be:00:65:
8f:fd:36:6d:ab:27:b3:6c:92:59:c5:48:f9:a5:98:1d:87:34:
32:39:60:6a:e5:ab:a7:5e:4b:9d:0b:2e:32:48:54:b9:56:ce:
7d:cd:4d:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIJfX/4IEtn2XIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk
MjgxZjk0ZTUtZTFlMS00ZmExLThiNDQtNzhiY2YzOTUwYzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx71c/a+i3lcSMB2DAN4yOta3eftPA8WTpe7O
ZjLW3JrHdWktxA9XObaYSh/q/82v+/nLG8L6G7i/XI+4l+5VfDWHfUDhzJr4vpWy
1j7clNffgfJ8tlGe0p+9BxeiiHS1i27LISuED6rtIX9vradrxEhtz27v7oilHKvM
lKBS65JCewsqLAiYKJw1AzVTJv8GyCJMDyVKTzH5fysM3MmcgRS3kflnyKf1qxnc
hAzDzfxB6bbXZ/OUTQ5uMnaKGAzF/n4RCNeXXOpVyTrWMXWu4SUcuBdiJYMmOkrH
4wt+RQFg9DYuW4f/MxEnZoOZUUWr7Dl4f4/salGH2PipHlsowQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2gx1FEOi0iocyeZkCVlBWoBuY1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTgyZGM5NTktNzAwNy0z
OGJkLTg3MmItN2I1MzM4YTQ5MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VtfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMB7MD12mT/NqfNhrm3dIVerFGjhHBP1tbCD5qEkp6KAB1RZDrYPKGeL
9fL6AFr9r6zpj5EYU77VfVH9byBPZKmlURBH45ki8O+7+19B0F+4TotB1HU1moU2
FfWbjztAN4BDUKX5eDDEnUjK5MlolICjGHvLyujyFx9rD9Dn5dmwsddUiuVZ64xy
OirHRsoZkvq4GRA3QzOVVybN8KZKji5C7R+DBY1Nv6HTqlU6lWGyWlQ6u+JWEi54
UJfYi6IPNaWDA6kLkUqfI2vfjqxL95gJCAZ+u74AZY/9Nm2rJ7NsklnFSPmlmB2H
NDI5YGrlq6deS50LLjJIVLlWzn3NTT8=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:57:11 2026 by rpki-client