
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa
File: 8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa (raw, json)
Hash identifier: UhtmOnoSw/owaz61WUu4V1WhvazKlnljqpXlScLKJbQ=
Subject key identifier: D3:FC:8F:42:05:24:63:4C:BE:27:67:7E:F6:0B:84:A8:E1:33:D3:A8
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584E0005CCAB59F44FA281C0B680
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 7029
IP address blocks: 209.236.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:05:cc:ab:59:f4:4f:a2:81:c0:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=4771f859-2dde-4072-a5c0-b269b026b5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:4b:cc:ae:3b:e1:3f:9f:6d:cd:6a:ee:0b:
bd:76:d0:1d:f8:64:db:be:aa:38:10:72:0d:d0:6f:
e9:75:2b:48:a3:59:3b:7b:72:33:2c:02:ea:31:2e:
6e:9f:cc:96:0b:d8:97:21:ae:88:8e:0b:3b:96:3d:
08:b7:77:12:40:06:b5:20:45:aa:c8:ce:85:e8:31:
b3:6f:ba:af:4b:84:f1:34:41:6e:18:ea:47:61:11:
1e:ab:52:55:88:80:f2:ad:97:81:d3:eb:09:4d:ff:
3d:bf:12:f9:0a:05:1d:82:85:1d:f0:1c:3b:35:02:
0f:bc:a3:ef:86:8b:51:44:5d:a5:98:ae:c5:54:59:
b6:c3:43:63:a7:76:a0:13:b5:5b:6f:94:f9:1e:93:
f2:4d:45:a8:e8:b3:52:ff:c5:05:e8:b8:bd:4d:bd:
75:23:d1:fa:f6:bb:3e:4e:77:65:fd:3c:12:ec:3b:
47:8c:77:03:56:73:fa:5b:26:8c:15:a5:5a:78:2a:
d8:e6:b7:d5:40:10:53:ef:3b:56:d2:6e:8b:06:54:
c3:2b:42:8f:70:a5:18:d1:5c:c7:d5:c0:1e:b1:d1:
ef:55:84:37:cf:32:54:f5:0e:91:1c:59:5f:98:40:
ff:bd:e8:4e:24:87:a5:96:4b:42:62:53:34:5b:42:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:8F:42:05:24:63:4C:BE:27:67:7E:F6:0B:84:A8:E1:33:D3:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ab:7b:89:79:82:20:38:fd:0f:ab:86:f5:53:19:0b:a7:d9:
a0:57:87:05:5b:ee:50:e8:dd:19:29:ee:a4:65:18:0a:e5:0b:
b3:8e:42:f2:8a:08:a4:ee:44:ae:33:40:63:81:a9:f7:0b:2f:
bd:93:6a:f8:d1:51:18:62:f0:5f:4b:6e:7c:54:1c:d0:43:dc:
9a:6e:67:e8:93:1d:54:73:64:a7:25:b6:f2:db:c5:f3:97:b5:
e1:e1:0f:05:21:7d:22:96:0e:dd:e3:ad:c4:01:56:da:9a:b7:
20:44:0a:0b:91:f6:92:3d:e3:ad:21:ea:41:ba:01:c0:6d:38:
ef:78:18:6a:36:45:97:59:ad:04:90:09:54:26:c5:25:20:df:
17:b0:74:ab:17:86:09:6b:9a:89:0d:8f:a7:3e:a7:ef:13:89:
3d:71:49:8a:c5:9b:31:e4:22:9b:96:a8:05:3a:c8:8c:f8:d5:
f7:86:ae:45:ad:d0:58:8a:10:7a:e8:9a:23:0b:db:7b:47:2d:
c4:87:e7:ae:0f:d5:fc:15:1d:60:2c:dd:28:4f:33:64:64:9d:
31:a7:40:05:c6:7b:51:53:bd:e2:76:e8:e8:9f:bc:73:52:59:
86:55:38:ed:68:59:1b:7d:73:67:70:20:e1:87:c4:35:bd:b4:
c6:2b:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:24:21 2026 by rpki-client