
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
File: 68f886e6-3ee4-396a-852d-a801badb904f.roa (raw, json)
Hash identifier: IXPb+6FMI5TZbsDArMv0dT02CyDJff6V0yIwrh+7PYs=
Subject key identifier: 7D:5C:B1:A5:CA:30:5B:FA:6E:86:D1:C5:18:AA:C7:FC:7A:E8:83:AF
Certificate issuer: /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial: 010D0C9F4328584F2D87C825448B0F9244568A80
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 398025
IP address blocks: 143.109.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:c8:25:44:8b:0f:92:44:56:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=8b9856cd-b802-4581-8b77-1c5efe2f6000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:0e:89:75:2d:18:12:c9:5e:a7:ef:05:6f:
00:a5:11:07:73:5d:4c:aa:a5:57:26:ea:ed:3a:49:
20:ad:bf:61:af:79:04:bc:f1:ec:db:3d:11:2e:52:
ad:bf:aa:bb:0b:64:87:8b:5c:c8:fb:32:95:c4:67:
0f:7e:4d:5b:4a:a9:12:a3:f4:22:e3:42:14:67:50:
ca:db:96:3d:3d:fd:3a:7d:af:f4:a4:6e:23:f6:bb:
7a:69:46:81:22:20:72:a0:81:01:fc:12:7d:d9:7e:
2f:ea:b3:9d:24:21:e2:72:2e:eb:4a:76:b6:6b:a6:
f6:e4:e0:3b:2a:90:a9:42:96:0c:00:e9:f3:a0:2f:
99:f6:13:ea:ed:cc:34:33:86:19:8a:4d:2a:9b:c7:
41:0b:c9:5d:b8:dc:3b:67:e8:b5:9b:0c:90:c7:41:
62:10:60:81:48:e1:2b:ac:e2:11:b3:6d:88:a5:cd:
26:e4:1b:c2:d8:f0:27:7d:fa:ed:14:2e:54:fe:db:
10:a7:5f:6c:17:54:55:74:ea:23:1b:a5:bd:f9:1b:
e7:b7:ab:35:62:6f:6f:4b:2c:e4:31:30:c9:53:7e:
8b:95:31:2b:a9:98:a5:bd:1a:ec:07:88:14:d9:a7:
04:9c:09:94:1f:53:3c:2c:40:98:03:3e:b7:be:8d:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:B1:A5:CA:30:5B:FA:6E:86:D1:C5:18:AA:C7:FC:7A:E8:83:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
X509v3 Authority Key Identifier:
keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
sbgp-ipAddrBlock: critical
IPv4:
143.109.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:d6:6c:31:e0:93:0f:31:b2:30:bd:f2:ad:a1:a7:ee:4c:ab:
c7:01:47:df:ee:89:e5:f6:ab:c1:87:54:a0:bb:18:b5:77:b5:
b0:a1:94:bf:60:f9:fe:0b:09:66:e1:ce:75:59:16:0f:f1:7a:
c1:3e:bd:5e:dd:a6:3a:1f:2e:d6:0a:47:db:f6:ab:17:97:a7:
09:a2:60:30:a9:5a:b2:04:bf:50:40:56:50:80:db:06:bc:f7:
0f:a2:5e:62:f7:1f:02:04:94:51:c4:26:72:2b:53:90:9f:3f:
21:fb:be:b6:24:e4:fa:7f:e9:73:4f:a6:fc:e2:d9:15:25:46:
a4:43:0d:cb:59:cd:ff:1c:c3:f8:3c:cf:bc:ff:66:5f:55:45:
28:bb:5d:d3:c1:a5:a6:2b:39:fe:16:04:6b:d3:79:bf:2b:e6:
bf:30:d5:ed:87:c1:31:9c:4a:20:7e:ef:12:47:e3:89:96:66:
c3:a5:a9:20:d7:16:4d:dc:16:82:d9:00:a7:89:04:30:c1:39:
5a:ce:60:23:8c:76:d8:a4:c2:5a:f9:45:a3:15:a9:28:0a:b7:
70:76:4b:55:59:a8:b6:f7:66:00:9e:aa:1e:0b:3e:41:33:fe:
d6:7a:e1:51:6e:39:05:1d:d5:39:05:ed:9c:65:d1:47:3a:e9:
86:f0:6c:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8glRIsPkkRWioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI0YThjYmQtNDk1My00MzVjLWJhY2UtMDdhZjEyNzll
OWJjMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGI5ODU2Y2QtYjgwMi00NTgxLThiNzctMWM1ZWZlMmY2MDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMYOiXUtGBLJXqfvBW8ApREHc11MqqVXJurt
Okkgrb9hr3kEvPHs2z0RLlKtv6q7C2SHi1zI+zKVxGcPfk1bSqkSo/Qi40IUZ1DK
25Y9Pf06fa/0pG4j9rt6aUaBIiByoIEB/BJ92X4v6rOdJCHici7rSna2a6b25OA7
KpCpQpYMAOnzoC+Z9hPq7cw0M4YZik0qm8dBC8lduNw7Z+i1mwyQx0FiEGCBSOEr
rOIRs22Ipc0m5BvC2PAnffrtFC5U/tsQp19sF1RVdOojG6W9+Rvnt6s1Ym9vSyzk
MTDJU36LlTErqZilvRrsB4gU2acEnAmUH1M8LECYAz63vo2i+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1csaXKMFv6bobRxRiqx/x66IOvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRh
OGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3OWU5YmMvNjhmODg2ZTYtM2VlNC0z
OTZhLTg1MmQtYTgwMWJhZGI5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI0YThjYmQtNDk1My00MzVjLWJh
Y2UtMDdhZjEyNzllOWJjLzMyNGE4Y2JkLTQ5NTMtNDM1Yy1iYWNlLTA3YWYxMjc5
ZTliYy5jcmwwHwYDVR0jBBgwFoAUuVGNYC2HPrBfCSgipzOWxkslPtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2Fm
MTI3OWU5YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFj20AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/WbDHgkw8xsjC98q2hp+5Mq8cBR9/uieX2q8GHVKC7GLV3tbChlL9g
+f4LCWbhznVZFg/xesE+vV7dpjofLtYKR9v2qxeXpwmiYDCpWrIEv1BAVlCA2wa8
9w+iXmL3HwIElFHEJnIrU5CfPyH7vrYk5Pp/6XNPpvzi2RUlRqRDDctZzf8cw/g8
z7z/Zl9VRSi7XdPBpaYrOf4WBGvTeb8r5r8w1e2HwTGcSiB+7xJH44mWZsOlqSDX
Fk3cFoLZAKeJBDDBOVrOYCOMdtikwlr5RaMVqSgKt3B2S1VZqLb3ZgCeqh4LPkEz
/tZ64VFuOQUd1TkF7Zxl0Uc66YbwbLk=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:58:20 2026 by rpki-client