
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa
File: f3afbd83-49e1-3165-a905-705c78b5f80a.roa (raw, json)
Hash identifier: /MqlKtLSgTPRzrYk6jqRYGFeqLRE5yRhjz72URjB4WI=
Subject key identifier: 1D:DD:E7:4D:47:ED:F5:69:8C:AF:7E:FD:AF:99:A2:81:0D:2B:89:32
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584F4973BD696FA34295F0872200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 209.53.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:bd:69:6f:a3:42:95:f0:87:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6267500d-9b79-4a43-8a2e-7112040174e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:96:34:4c:d0:58:cb:89:f0:8e:a0:fa:2b:
c1:42:b1:d8:06:99:81:76:9a:08:17:4d:80:ad:33:
ca:78:de:9c:b8:f0:2a:f0:80:c0:37:87:de:e5:96:
3a:5b:cc:2b:1f:e0:27:33:dd:e1:bf:d7:9e:28:f7:
f9:23:e0:a2:f7:10:b0:57:0b:71:92:9b:97:8b:29:
e3:dd:9d:cf:ad:fb:dc:02:e0:0b:c5:7c:f8:e9:ad:
bc:0d:bf:1d:64:e5:40:29:76:1d:6f:f2:21:c1:73:
7a:77:73:0d:4c:00:f2:c8:63:68:67:48:9e:bc:64:
90:d2:52:3c:ce:c2:2b:c1:81:ea:3d:52:22:66:64:
04:41:9a:f9:34:fb:d1:9d:c8:22:04:e4:e8:ed:36:
da:94:fd:bc:b3:94:5a:55:e4:c4:23:36:34:25:8e:
00:09:22:b7:12:e1:20:d2:95:e1:f4:28:2c:35:19:
59:a8:30:91:7c:cb:c6:4f:08:b6:8c:9c:85:35:94:
18:4f:b6:40:52:ea:83:e0:33:2b:31:a2:03:44:22:
cb:5a:06:b1:51:c0:8b:c2:7d:1f:27:f4:a1:0f:46:
9e:2e:dd:f6:4a:e8:0b:15:76:62:26:57:21:4e:ba:
39:5e:a6:1f:df:67:de:d9:5e:ce:3f:ff:9a:ca:d4:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:E7:4D:47:ED:F5:69:8C:AF:7E:FD:AF:99:A2:81:0D:2B:89:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
f0:9a:7b:17:13:52:93:02:1f:31:d3:d5:12:74:13:5f:62:e5:
fd:28:85:2e:e4:27:07:04:f7:f8:19:40:5e:bc:84:c6:c6:4b:
5f:1c:5a:08:04:e6:cd:77:2d:7d:35:3d:cd:1c:5e:c4:90:d2:
fb:7a:c7:2b:2c:ed:db:b9:28:68:c8:ac:cd:a1:34:f5:e0:72:
7d:ee:92:7a:86:18:68:61:ef:c8:70:8c:62:0b:37:e2:7b:80:
ec:36:fa:7d:ee:57:7b:26:ed:4b:51:04:bd:f9:c1:ff:41:2d:
ab:50:c2:a1:34:65:46:ec:ee:38:e7:98:46:14:fd:23:14:f4:
90:c5:b5:57:83:af:d1:6b:2e:4f:a3:36:ee:9e:fc:26:2a:e1:
aa:ac:8b:27:3b:58:7d:63:6f:86:44:51:1b:8c:9c:39:45:7c:
b6:cb:de:34:ce:c7:7f:bb:f0:87:e8:96:82:ae:b9:b7:98:9e:
63:08:a2:35:99:9c:46:74:c9:db:a8:7f:07:ab:c0:2c:7d:f7:
55:cb:43:36:42:c8:a3:34:c6:36:54:ac:ad:cc:aa:dc:9b:ec:
d5:f6:c3:e9:20:b2:75:66:26:e0:1e:5c:97:4a:74:e6:fe:67:
d7:75:95:0f:c4:03:1a:d3:28:40:1e:a5:e9:3c:ed:f0:89:60:
95:9c:75:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc71pb6NClfCHIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjI2NzUwMGQtOWI3OS00YTQzLThhMmUtNzExMjA0MDE3NGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrCWNEzQWMuJ8I6g+ivBQrHYBpmBdpoIF02A
rTPKeN6cuPAq8IDAN4fe5ZY6W8wrH+AnM93hv9eeKPf5I+Ci9xCwVwtxkpuXiynj
3Z3PrfvcAuALxXz46a28Db8dZOVAKXYdb/IhwXN6d3MNTADyyGNoZ0ievGSQ0lI8
zsIrwYHqPVIiZmQEQZr5NPvRncgiBOTo7TbalP28s5RaVeTEIzY0JY4ACSK3EuEg
0pXh9CgsNRlZqDCRfMvGTwi2jJyFNZQYT7ZAUuqD4DMrMaIDRCLLWgaxUcCLwn0f
J/ShD0aeLt32SugLFXZiJlchTro5XqYf32fe2V7OP/+aytRyvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3d501H7fVpjK9+/a+ZooENK4kyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjNhZmJkODMtNDllMS0z
MTY1LWE5MDUtNzA1Yzc4YjVmODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAPCaexcTUpMCHzHT1RJ0E19i5f0ohS7kJwcE9/gZQF68hMbGS18cWggE
5s13LX01Pc0cXsSQ0vt6xyss7du5KGjIrM2hNPXgcn3uknqGGGhh78hwjGILN+J7
gOw2+n3uV3sm7UtRBL35wf9BLatQwqE0ZUbs7jjnmEYU/SMU9JDFtVeDr9FrLk+j
Nu6e/CYq4aqsiyc7WH1jb4ZEURuMnDlFfLbL3jTOx3+78IfoloKuubeYnmMIojWZ
nEZ0yduofwerwCx991XLQzZCyKM0xjZUrK3Mqtyb7NX2w+kgsnVmJuAeXJdKdOb+
Z9d1lQ/EAxrTKEAepek87fCJYJWcdbw=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:27:50 2026 by rpki-client