
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
File: 243cb8c9-f327-32cd-ae01-b4a75520d28d.roa (raw, json)
Hash identifier: 91mS78PHYWHG6ssBeSHU3XE56kRrAv4yokaCLknZG4A=
Subject key identifier: BC:11:72:98:74:83:10:FE:41:E2:F3:A6:9B:74:E3:A6:18:35:77:9A
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F497403B5069A2BA14F0B2E80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 852
IP address blocks: 209.89.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:03:b5:06:9a:2b:a1:4f:0b:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5e53af43-7684-44e5-9cab-fa552c52f02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:09:b3:b5:35:6a:9a:73:6e:aa:cd:b5:78:
de:7a:09:fb:4f:fe:8b:fd:54:19:40:d7:6b:4c:dc:
b1:13:48:23:68:1c:76:37:51:f7:25:12:f0:94:49:
37:dd:c4:7f:f7:73:de:68:d1:ac:18:60:92:64:57:
ed:1b:4c:26:f7:8b:d2:03:4f:8e:de:94:6e:9a:dd:
1c:d0:ae:e1:9b:e1:1d:db:64:08:d2:38:54:91:ce:
d2:4e:e1:a3:7b:d3:a7:fb:a7:e1:20:5e:c7:c5:f5:
91:2e:5d:b5:90:8e:3e:1d:80:82:4a:6c:e6:e6:02:
a3:14:58:5c:25:92:f1:ed:ba:1d:bb:0c:5d:e9:ae:
0b:ba:73:b6:10:ff:7b:e5:22:89:d5:d2:ce:d8:da:
fc:6a:82:62:5f:04:a3:f5:20:58:0d:d0:90:0b:14:
5a:2d:25:35:56:70:29:eb:e1:a6:37:f5:a9:23:c7:
21:01:28:4d:de:ba:7f:ac:77:65:7a:96:c4:39:d0:
9c:90:5e:dc:0b:f6:07:9c:72:ee:3a:dc:ed:78:9b:
a0:4d:53:86:b0:4e:f5:f3:c9:83:19:e2:32:f9:86:
6f:ac:b7:48:9e:c0:83:fe:3a:f8:1e:49:d0:58:ff:
e7:be:e3:12:f0:3c:30:c1:0f:9e:2f:bb:fb:4e:8a:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:11:72:98:74:83:10:FE:41:E2:F3:A6:9B:74:E3:A6:18:35:77:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:09:3b:eb:38:81:5c:fa:3c:bf:c5:a7:cd:41:ee:cc:99:e4:
56:44:5e:f6:52:2b:3b:58:7b:03:fb:c6:15:07:18:88:bf:6a:
5f:fa:7d:3f:bf:26:06:27:e7:bd:70:6a:32:ae:1d:7d:c5:af:
0d:19:93:64:8c:5e:41:9b:73:dd:71:05:d8:b8:fe:9f:f2:1f:
75:78:5a:1e:da:82:14:aa:87:a4:cc:67:74:c8:ec:89:1f:de:
b7:49:93:69:3f:5e:db:3f:61:16:eb:8c:94:06:b0:23:70:0e:
2c:83:ff:bf:4f:28:69:90:c6:c2:60:c9:52:9a:37:64:37:0f:
6c:3d:54:40:50:4d:ac:a1:9b:30:bd:e3:45:3a:dc:7f:18:ec:
0b:be:a7:16:27:e3:92:0a:ba:49:b9:6a:a1:b1:3f:4c:98:67:
2a:41:bc:58:b9:e3:6d:fb:e1:7f:9b:22:2e:e4:34:b9:07:79:
d2:5f:8e:9b:b2:6c:eb:76:b0:a5:d7:d6:e9:2c:be:43:32:63:
4f:65:b8:da:b2:83:db:77:ec:43:a3:72:af:5b:35:de:2b:7e:
d8:40:c6:63:14:5e:90:a0:6c:dc:5f:34:6d:e9:50:ec:64:5f:
d3:f0:7f:b6:a6:9c:5e:c6:d4:08:00:3d:b0:d9:61:30:22:55:
e2:53:30:f2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdAO1BporoU8LLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWU1M2FmNDMtNzY4NC00NGU1LTljYWItZmE1NTJjNTJmMDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47oJs7U1appzbqrNtXjeegn7T/6L/VQZQNdr
TNyxE0gjaBx2N1H3JRLwlEk33cR/93PeaNGsGGCSZFftG0wm94vSA0+O3pRumt0c
0K7hm+Ed22QI0jhUkc7STuGje9On+6fhIF7HxfWRLl21kI4+HYCCSmzm5gKjFFhc
JZLx7boduwxd6a4LunO2EP975SKJ1dLO2Nr8aoJiXwSj9SBYDdCQCxRaLSU1VnAp
6+GmN/WpI8chAShN3rp/rHdlepbEOdCckF7cC/YHnHLuOtzteJugTVOGsE7188mD
GeIy+YZvrLdInsCD/jr4HknQWP/nvuMS8DwwwQ+eL7v7ToqdPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLwRcph0gxD+QeLzppt046YYNXeaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjQzY2I4YzktZjMyNy0z
MmNkLWFlMDEtYjRhNzU1MjBkMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0VkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfwk76ziBXPo8v8WnzUHuzJnkVkRe9lIrO1h7A/vGFQcYiL9qX/p9P78m
BifnvXBqMq4dfcWvDRmTZIxeQZtz3XEF2Lj+n/IfdXhaHtqCFKqHpMxndMjsiR/e
t0mTaT9e2z9hFuuMlAawI3AOLIP/v08oaZDGwmDJUpo3ZDcPbD1UQFBNrKGbML3j
RTrcfxjsC76nFifjkgq6SblqobE/TJhnKkG8WLnjbfvhf5siLuQ0uQd50l+Om7Js
63awpdfW6Sy+QzJjT2W42rKD23fsQ6Nyr1s13it+2EDGYxRekKBs3F80belQ7GRf
0/B/tqacXsbUCAA9sNlhMCJV4lMw8g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:33:16 2026 by rpki-client