
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa
File: 2b8b31f3-1851-38cf-aec8-57909778d471.roa (raw, json)
Hash identifier: MY52q1+kHuCQ8uVhB4TmLGyXWsTSNJE+FpX/orLfFUg=
Subject key identifier: 98:08:90:4F:8B:ED:5E:7A:6A:CA:21:25:F3:C8:AE:C7:10:CB:EB:2F
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F4973BC490232A14CA147A220
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 25668
IP address blocks: 209.53.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:bc:49:02:32:a1:4c:a1:47:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e02b625f-e178-4355-8287-26f0e1048d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:9c:47:44:dd:a6:85:3e:a4:e6:0f:03:ae:
ce:e5:03:b6:6c:9f:f6:38:1e:ec:99:d2:05:81:f6:
df:77:61:af:b2:2b:f4:fc:c0:c8:f2:73:e7:2e:23:
05:2e:21:c8:55:d0:62:b1:82:32:cc:61:b7:9f:f3:
9f:60:17:ec:1e:a2:dd:8c:8b:81:c2:f6:1c:67:fe:
20:5b:d5:5a:b4:fe:eb:83:34:b5:a9:d0:04:22:c4:
2e:f4:d3:89:51:b7:28:ca:88:37:08:b5:c8:dd:9e:
12:a1:e8:db:7c:6a:8f:0b:ae:0f:fe:ed:2d:71:21:
f3:7d:f4:f3:47:c0:30:af:3f:27:b4:23:1c:56:af:
11:32:4e:53:3d:df:f5:2d:1b:8f:d3:12:be:4b:27:
81:8c:28:20:90:a3:1f:10:70:07:f9:52:88:8a:d0:
76:cf:ac:7e:4c:ab:f1:28:44:e8:db:eb:fa:c4:96:
2c:7f:47:31:68:77:01:df:d1:0d:55:97:18:28:31:
84:19:75:64:12:a9:82:51:98:1b:e6:55:87:7d:d4:
9f:c6:b9:8d:86:3f:1f:41:86:49:78:18:ad:fc:cf:
d4:4d:95:2e:58:4e:c0:4b:62:1b:5b:ba:99:8e:4b:
f7:f8:8b:68:1a:07:6d:57:47:d3:b8:ec:2f:72:7f:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:90:4F:8B:ED:5E:7A:6A:CA:21:25:F3:C8:AE:C7:10:CB:EB:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:84:b0:5f:0a:22:2d:e7:91:be:4b:40:16:4a:57:58:72:6c:
73:62:84:ed:68:de:70:62:a4:d8:f1:79:c0:08:3b:48:d6:87:
37:1e:ff:c4:fc:b0:79:0c:58:a6:1d:1c:c0:ca:fe:0d:52:d1:
59:4a:e4:1b:0c:d4:77:2d:d9:43:c7:f1:6c:a0:47:56:bb:30:
ee:d8:97:c4:66:1d:7d:f1:b5:c7:a0:c7:bb:f0:fb:01:07:2a:
48:e7:bb:3b:4c:21:bb:f2:00:d3:ee:75:da:42:7f:16:b3:ee:
b4:5b:96:c8:50:8c:7a:f6:22:f6:ff:ae:c2:b2:6c:45:70:d1:
cd:02:fb:01:90:b6:2a:06:1f:fb:9f:72:f5:93:f6:e1:24:95:
71:f4:eb:a5:6e:dd:38:0d:f3:e5:49:ad:11:c6:00:e3:1e:a8:
32:a4:ee:45:f6:61:b5:c1:c1:a9:bc:ed:ab:1c:bc:5e:31:da:
85:dc:7b:96:72:ed:b7:0d:00:c4:6a:a6:05:ba:4d:95:0b:b5:
1c:61:41:f9:2c:d2:17:17:f8:b2:6d:3e:71:ca:18:14:f7:1b:
2e:65:a3:82:4a:ed:55:3d:8e:7f:74:3c:3d:5c:b1:92:3f:74:
37:00:8e:81:e4:79:23:e5:49:1b:b5:79:93:c7:4a:4f:fd:59:
d5:13:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:34 2026 by rpki-client