
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
File: d5309438-77a7-3911-b8df-e43cb484204d.roa (raw, json)
Hash identifier: 8fLJkQoB9hv5wwhxT1Gh3FZDuytAGnJ+ThOERgKYIok=
Subject key identifier: D2:98:FE:3D:22:C7:97:69:4B:04:F1:80:F1:A1:44:37:4F:35:ED:A5
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584EA79A455F08AFC2708BDD6900
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11404
IP address blocks: 209.236.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:45:5f:08:af:c2:70:8b:dd:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=092de90b-91e6-4efd-9201-a19571903135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:98:5d:9d:2b:99:91:83:70:5a:e9:59:dd:
a0:eb:5e:5e:44:75:1a:65:95:e7:f9:34:0b:98:8b:
c1:c4:b4:db:62:3d:2d:05:72:65:8d:18:52:f6:5b:
b4:19:88:9c:4f:3d:fd:11:ff:4a:6d:d9:57:3f:e5:
63:83:99:c6:ec:80:88:7f:dd:ba:8e:fa:c4:fa:35:
d8:f2:8d:07:76:df:f5:78:6e:98:2c:fd:34:bd:77:
1d:54:01:e5:ff:ad:a7:18:45:dc:46:70:f9:0a:15:
ef:ad:46:02:0f:b6:86:7e:ea:0d:85:65:42:a4:e0:
5d:1d:dc:0f:4a:5e:07:ac:7f:77:87:31:a4:8e:5a:
8c:b5:43:14:ff:24:c5:86:ce:56:0c:92:f6:33:a0:
83:3e:6b:54:da:dc:f6:2b:01:e2:80:09:f1:aa:2f:
6c:6f:ab:2d:ba:b8:75:b8:f7:73:14:b1:75:bf:a6:
08:e3:9a:19:68:d5:d8:a6:c3:40:ca:3c:22:01:36:
28:71:cd:df:1e:cf:c2:37:68:c7:e0:68:17:29:e5:
c9:69:00:e1:08:f1:e4:d7:2f:3a:af:e5:28:0b:50:
52:4e:46:5b:21:59:83:7c:60:46:43:01:e3:ae:7c:
74:3a:69:44:53:ee:97:da:54:5e:86:f7:2c:62:95:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:FE:3D:22:C7:97:69:4B:04:F1:80:F1:A1:44:37:4F:35:ED:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d8:0f:26:38:11:c5:c7:7d:fc:5e:9d:e2:dc:7e:f1:54:c7:
0f:a8:69:95:5e:4e:a7:19:af:43:7e:ed:75:73:2e:00:27:a3:
cc:c3:6c:15:ab:c6:75:82:00:e7:45:3d:71:32:f0:27:78:02:
be:e8:0f:13:aa:56:c6:68:83:36:a6:9c:38:21:ab:1a:79:dc:
80:80:e8:e8:a5:2f:a7:5d:5c:fa:aa:cf:49:16:bf:cb:c6:b7:
33:36:07:26:a8:0b:5b:9e:e2:f6:6f:e3:b5:65:a8:58:fc:4e:
90:5b:d0:a8:d2:21:4f:f8:6f:de:ac:4e:83:5d:85:48:eb:fe:
56:32:8e:cd:f6:43:5f:10:b4:fd:a4:a4:79:8e:db:90:0c:85:
75:67:4b:de:f4:54:a3:a8:dc:51:b2:d0:63:1a:af:a2:09:17:
16:dc:f8:23:01:da:97:28:50:71:e6:e0:cb:50:83:6b:26:30:
28:37:ba:93:f1:96:e4:35:62:53:6a:fc:38:0f:76:36:00:45:
be:54:63:ef:90:7f:bd:97:3c:8f:bc:55:8b:8f:e7:36:e6:9c:
59:eb:6d:48:fb:cf:3a:e7:a0:6e:e3:1d:51:5b:12:4b:d7:2b:
fc:03:94:ee:bb:fc:21:ac:0d:10:a4:01:5e:aa:0f:05:69:c5:
c5:4e:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 06:44:45 2026 by rpki-client