
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
File: 825b10e9-fa31-33b9-a80e-e58c85226acf.roa (raw, json)
Hash identifier: iVNHy2zUICwejmU7MDCtmAbZTs5sqe1pGBvXASQb98E=
Subject key identifier: BA:2D:15:65:2A:AD:00:24:01:3A:54:1D:56:3E:FF:6E:6E:9D:B3:D5
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F4973FF4E86D5E6DC61C16F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 852
IP address blocks: 209.29.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:ff:4e:86:d5:e6:dc:61:c1:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a5484466-46ca-46b5-a3a4-3b0d0c257859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:06:30:79:2a:ec:ff:af:c7:76:f5:cc:14:
a4:26:16:90:bf:06:7d:21:06:8b:49:84:ad:1f:5c:
15:89:cc:48:41:77:d7:4a:1b:e4:5a:36:01:db:31:
43:c1:44:eb:75:43:33:53:ed:5f:ee:3a:68:9e:09:
c7:34:57:0a:09:75:d7:bb:04:f2:a3:e0:e4:21:fc:
a2:f7:08:52:df:b4:89:d5:46:31:71:00:50:b7:7a:
5c:87:aa:cf:3b:59:8c:5e:79:d8:46:06:ee:c1:27:
a3:1e:a8:f6:4a:70:a4:c6:6c:03:76:26:73:14:af:
30:52:a9:e1:1f:bd:a3:2b:5f:90:f6:51:50:a6:c8:
e8:7c:0d:e9:e2:9b:11:8c:12:de:b7:ee:c0:f1:32:
95:1c:0d:91:f3:c5:d1:f2:73:3c:f0:3b:c2:16:4c:
fe:a6:74:58:41:fb:84:de:48:0e:2a:c6:ce:42:a1:
40:ff:42:7b:95:3e:5a:5a:92:7d:2d:f5:3d:ae:fb:
dd:b5:74:81:d7:92:f5:be:35:2f:23:3b:57:03:b9:
1c:5f:5f:4a:2e:18:2b:f4:50:3c:6f:c9:85:a7:f1:
7d:3e:99:af:56:34:d2:8e:f0:47:5c:9a:41:a9:0a:
5a:d8:90:73:a2:41:7f:6d:5c:08:87:e1:fe:15:55:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:15:65:2A:AD:00:24:01:3A:54:1D:56:3E:FF:6E:6E:9D:B3:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:69:af:ef:31:08:23:3d:c4:4d:d9:04:a9:8e:73:9b:74:b7:
99:f4:2f:52:18:3b:03:ed:fe:83:b1:5a:ab:ef:b0:ed:50:c7:
8e:21:b4:06:39:25:89:88:c4:49:52:c3:ca:14:8c:d5:65:14:
81:44:7e:65:82:54:88:dc:1e:53:a9:35:16:df:76:23:e7:d6:
f9:b4:a6:b8:0e:53:31:8e:3b:fc:7b:72:68:6a:15:d8:aa:65:
9b:92:fe:30:f1:55:88:d2:a9:56:7d:c8:c5:3d:87:aa:dd:ea:
3d:2f:5f:f3:a5:4c:c7:95:2d:9c:3c:21:16:0b:f4:b6:b2:fc:
4a:71:47:c3:44:6a:80:02:c5:b4:29:1e:45:d1:1b:6c:24:74:
02:bd:2e:1d:c0:80:76:2f:8d:d3:85:d4:80:19:ac:04:38:90:
06:81:72:17:68:36:8c:10:9a:06:75:e7:1c:51:de:54:61:ec:
98:b6:ae:a0:08:bd:54:f7:f9:ae:b7:29:1d:36:01:e2:1e:56:
6a:bf:dd:df:a5:80:ed:54:cd:70:89:44:56:14:3b:e6:c6:21:
4d:3e:3b:7d:4a:2b:18:1b:43:d5:ba:c2:8a:81:28:c0:7a:4a:
dd:38:30:3d:a3:45:1d:0b:02:7b:b8:a1:57:d5:8d:bd:88:c8:
b3:66:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:12:59 2026 by rpki-client