
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/91580a50-bf6d-3148-98d5-84c302ded745.roa
File: 91580a50-bf6d-3148-98d5-84c302ded745.roa (raw, json)
Hash identifier: KrCnzV5vJqJWjxLU1J5qOoAYAtZHgqSsHtsumGH5Wbc=
Subject key identifier: 4F:63:C1:96:D1:F1:C5:96:3D:C7:90:F8:C3:E5:7E:DF:99:00:57:B3
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584E4129DE6D84774E49433A3080
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/91580a50-bf6d-3148-98d5-84c302ded745.roa
Signing time: Mon 22 Jun 2026 09:00:11 +0000
ROA not before: Mon 22 Jun 2026 09:00:11 +0000
ROA not after: Sun 20 Sep 2026 09:00:11 +0000
asID: 399439
IP address blocks: 208.53.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:29:de:6d:84:77:4e:49:43:3a:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jun 22 09:00:11 2026 GMT
Not After : Sep 20 09:00:11 2026 GMT
Subject: CN=6f1c29da-147d-4b75-92c4-c0ebcce2f078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:fe:1c:7e:6f:ea:b5:63:39:92:32:d2:d9:
fb:28:0e:fe:7d:59:4a:69:e8:c2:3d:04:61:24:59:
3c:40:61:ba:76:76:35:4c:d4:62:e5:91:7e:60:0f:
85:b4:6b:1b:aa:48:ce:2d:28:12:97:78:24:3f:0d:
bb:7d:d0:51:0a:36:3b:72:cb:9d:3b:26:ba:e0:5c:
0b:6b:09:b3:e1:6c:79:48:87:5c:98:c3:80:0b:18:
93:90:8f:84:d0:4d:6a:8f:a0:98:35:20:aa:b4:11:
ac:1a:68:0c:a0:b7:22:f6:d2:40:f8:c2:74:dc:24:
ee:3c:ec:3a:ba:26:eb:79:d3:77:a3:b0:b2:0b:96:
c7:89:92:92:58:1e:26:63:bd:b3:13:8e:26:b7:1c:
82:d4:06:ec:29:dc:f9:0e:bb:93:d0:16:26:44:f4:
42:1e:df:2a:e0:1f:0c:eb:ab:4f:d1:d7:cc:e2:05:
f3:7e:83:87:28:c1:fa:5c:b2:6a:38:70:8c:da:6e:
99:f5:c9:d8:e6:df:09:37:6d:36:b6:b3:75:17:8e:
50:f6:87:3a:1a:e6:cd:ca:17:cd:27:a7:76:b3:32:
03:a8:d0:53:8c:72:ed:70:3a:c2:c2:bb:81:bb:20:
d9:94:30:a5:9b:33:a6:bb:6c:46:cf:e7:3c:23:95:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:C1:96:D1:F1:C5:96:3D:C7:90:F8:C3:E5:7E:DF:99:00:57:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/91580a50-bf6d-3148-98d5-84c302ded745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:8f:84:c7:8a:12:aa:29:af:50:ab:16:f7:b6:95:30:1b:b3:
38:14:12:47:16:77:b9:7d:58:67:d0:e5:6f:da:26:b9:ce:ec:
71:b6:19:d6:8d:03:aa:94:83:2e:99:20:85:2a:4e:80:0d:cc:
26:dd:99:42:82:7f:c6:35:99:7e:e6:04:ed:f3:5e:20:01:18:
62:04:c1:51:4c:6f:95:9c:10:ec:3b:fb:5f:68:48:37:57:b4:
70:11:fb:d2:af:54:02:38:58:54:11:c6:d1:a8:87:ad:02:cb:
5f:09:04:1c:4d:a9:0c:29:a7:94:a6:8b:86:07:0b:6a:eb:5d:
20:83:48:0d:7a:6d:d5:01:68:31:f2:c9:a5:8b:68:b9:12:6f:
fc:b7:33:0f:e4:a6:a4:1c:ea:da:33:89:97:8a:80:81:78:43:
84:91:2f:93:12:5c:6a:9d:ea:29:bb:aa:55:a7:9d:a0:16:76:
db:87:de:90:3e:2a:5b:b7:cb:8d:ba:6a:7a:cf:1d:62:70:50:
7f:5a:c4:1d:18:a1:31:c8:d1:25:9f:19:93:ae:49:61:30:74:
2f:a7:d3:02:ff:04:63:0a:0e:96:62:6b:e2:95:9e:87:44:d8:
9f:bf:22:52:87:b3:48:bc:7c:fb:5e:8e:66:60:2b:e3:d2:aa:
ce:8e:1e:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKd5thHdOSUM6MIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
NmYxYzI5ZGEtMTQ3ZC00Yjc1LTkyYzQtYzBlYmNjZTJmMDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQT+HH5v6rVjOZIy0tn7KA7+fVlKaejCPQRh
JFk8QGG6dnY1TNRi5ZF+YA+FtGsbqkjOLSgSl3gkPw27fdBRCjY7csudOya64FwL
awmz4Wx5SIdcmMOACxiTkI+E0E1qj6CYNSCqtBGsGmgMoLci9tJA+MJ03CTuPOw6
uibredN3o7CyC5bHiZKSWB4mY72zE44mtxyC1AbsKdz5DruT0BYmRPRCHt8q4B8M
66tP0dfM4gXzfoOHKMH6XLJqOHCM2m6Z9cnY5t8JN202trN1F45Q9oc6GubNyhfN
J6d2szIDqNBTjHLtcDrCwruBuyDZlDClmzOmu2xGz+c8I5VHgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9jwZbR8cWWPceQ+MPlft+ZAFezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOTE1ODBhNTAtYmY2ZC0z
MTQ4LTk4ZDUtODRjMzAyZGVkNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSPhMeKEqopr1CrFve2lTAbszgUEkcWd7l9WGfQ5W/aJrnO7HG2GdaN
A6qUgy6ZIIUqToANzCbdmUKCf8Y1mX7mBO3zXiABGGIEwVFMb5WcEOw7+19oSDdX
tHAR+9KvVAI4WFQRxtGoh60Cy18JBBxNqQwpp5Smi4YHC2rrXSCDSA16bdUBaDHy
yaWLaLkSb/y3Mw/kpqQc6toziZeKgIF4Q4SRL5MSXGqd6im7qlWnnaAWdtuH3pA+
Klu3y426anrPHWJwUH9axB0YoTHI0SWfGZOuSWEwdC+n0wL/BGMKDpZia+KVnodE
2J+/IlKHs0i8fPtejmZgK+PSqs6OHrM=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:14 2026 by rpki-client