
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/521708c8-f781-3ba7-aa98-439006b542d4.roa
File: 521708c8-f781-3ba7-aa98-439006b542d4.roa (raw, json)
Hash identifier: CEMcrSwVKLxbjUERRffs+1oMI3f7J9xpIWBw1KzOuNo=
Subject key identifier: 34:D3:CF:5F:42:05:E8:0F:52:7A:14:8E:C5:57:32:7D:49:08:32:62
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584F0ED22C0A0216B34BB11DF780
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/521708c8-f781-3ba7-aa98-439006b542d4.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 402236
IP address blocks: 199.48.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:2c:0a:02:16:b3:4b:b1:1d:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=59bc2f45-380e-4761-afdc-436a3ac658ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:fd:df:6b:6d:f1:2d:b6:8f:8f:20:70:05:
dd:0f:26:15:e2:93:53:35:bf:b5:ad:b8:e4:3d:ea:
3e:c4:b5:99:e7:ed:47:ed:cb:3e:85:79:7d:7b:d6:
f7:78:b7:c3:81:80:41:30:96:1a:92:0b:b0:31:eb:
50:b9:5d:c9:e6:10:4a:f9:06:43:12:0a:b0:a1:c7:
f5:38:c0:9f:11:e4:19:ae:0b:c8:53:a2:95:da:8e:
0e:50:d6:3d:1a:4d:ac:bd:b8:80:eb:bc:ff:64:18:
2b:2a:1b:db:64:9e:4e:29:ea:21:39:41:44:1a:90:
d0:0b:21:fe:a1:8a:32:78:71:e7:d3:ad:85:7b:93:
89:f5:08:53:a7:ea:40:cb:c2:bb:7e:d0:2b:51:f1:
94:41:3d:d8:f4:e4:6f:82:16:3e:26:54:38:d7:0b:
3f:79:02:82:f3:10:ac:00:a7:1c:9e:ff:06:42:f7:
3e:37:ab:5b:6a:a6:f1:7a:34:7b:f8:ab:81:7f:87:
50:e8:27:49:33:f9:19:37:27:0e:36:da:cf:96:67:
5a:ab:c9:81:ed:db:a6:53:c7:73:1b:1d:6f:0c:f7:
5b:54:d0:ef:ef:65:1e:00:8a:6e:86:e5:be:8a:03:
3d:6d:e2:c7:51:4a:d5:3e:b6:26:9a:a5:6f:84:af:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D3:CF:5F:42:05:E8:0F:52:7A:14:8E:C5:57:32:7D:49:08:32:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/521708c8-f781-3ba7-aa98-439006b542d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:58:7b:bf:a6:2f:14:d2:a8:ea:8e:4e:69:cf:61:75:e1:4d:
81:23:d7:23:6b:d5:19:f3:e9:f0:04:62:5e:47:ca:7d:db:67:
73:8f:b7:e2:41:75:d8:00:49:61:3a:7b:87:91:60:19:28:8b:
3e:e6:f9:80:48:99:11:6d:a3:e2:e6:f7:7b:4d:6a:fe:38:75:
c2:17:75:3b:c8:25:01:8c:00:a6:2c:96:e9:e1:9d:71:b4:a4:
59:05:cd:cd:94:57:0e:b9:ef:2a:bb:32:b9:51:df:f8:55:12:
d1:56:65:81:4f:dd:9b:75:f9:6e:97:34:a1:16:ef:36:8d:05:
7e:dd:c9:aa:bd:6b:9c:a3:e3:10:c6:ee:8b:88:5f:b0:a1:c8:
c3:41:d0:3e:71:b0:78:f7:32:a2:34:1e:38:49:5e:a4:e3:80:
2c:07:fb:8f:60:7f:c9:98:a8:c2:9d:0e:b5:75:90:a1:2e:d2:
1f:c1:7d:8d:db:b8:97:35:cb:e5:83:ae:07:fd:fa:d0:e8:68:
92:c8:6b:c1:24:1f:de:6e:25:75:4c:2e:b2:e2:63:15:ed:3a:
b5:c9:23:9e:71:1f:43:fe:6f:4e:f9:2d:bf:de:23:2f:f3:fb:
f5:f8:36:8a:ae:90:63:6f:6e:c9:51:5e:e4:e0:2d:1f:bc:e1:
09:58:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:45 2026 by rpki-client