
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
File: 83a687bd-8f33-38a0-b954-7a7150c2e666.roa (raw, json)
Hash identifier: pKrBhT7esjP3uRqKFVqJtDOAhBCVjip2BvHWDy01Ezc=
Subject key identifier: C2:B1:A5:41:E4:2A:18:84:A0:6D:6F:74:A9:01:D2:6E:10:49:A7:43
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584EED5219D0A6844EC73917A800
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 394437
IP address blocks: 209.173.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:19:d0:a6:84:4e:c7:39:17:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=4f934667-a0ee-468a-aa11-945edfbe375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:56:8d:b8:a5:d8:da:16:f7:ae:b8:01:48:
73:8d:9d:43:85:d2:46:1f:01:20:7e:37:1d:06:c0:
12:23:bf:0d:92:30:b6:fe:fb:5b:32:16:d6:1f:84:
fe:e5:f2:70:c3:c5:d9:d9:11:b0:4a:b1:b8:10:62:
61:42:01:ef:e3:d3:1e:66:30:18:bf:c9:21:fa:69:
28:5a:8e:5f:04:9d:8d:22:73:65:32:54:97:02:48:
99:91:00:84:2e:41:64:3a:68:96:59:e0:c0:a0:96:
b5:cb:23:b1:2f:a8:a5:2f:45:ed:39:a4:86:60:39:
1f:68:a5:98:8f:03:7f:c7:db:ee:8b:ae:6f:b7:bf:
b3:6a:4e:6a:2b:a5:16:11:a2:a8:98:fb:86:a2:da:
d7:15:98:7c:9e:f8:00:1f:d8:7f:b7:a3:c8:9f:55:
27:64:0f:1c:82:43:8f:cb:34:47:bd:75:cd:14:79:
42:e4:6e:49:96:61:92:15:2d:99:6d:a9:ba:4f:52:
7e:ee:82:a0:5b:e9:2d:a7:c2:d8:2d:ca:50:db:57:
00:7e:cc:ab:26:55:a4:34:14:e1:7a:b7:97:35:f3:
db:87:b8:c7:81:5a:90:23:2d:1b:2a:e5:23:c5:f4:
d0:1e:52:bc:5d:d5:bd:6a:15:47:2c:62:ba:01:e5:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:A5:41:E4:2A:18:84:A0:6D:6F:74:A9:01:D2:6E:10:49:A7:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:d2:6d:73:8f:60:df:2f:12:d9:34:9f:b6:60:4a:3d:2b:2d:
f8:a3:dd:f0:c0:67:58:4b:76:6c:81:61:a6:0c:17:0b:d9:d0:
1b:ec:e8:00:c6:24:3e:17:68:7a:78:df:8a:32:1d:a8:e4:6b:
ef:35:08:6b:f2:3c:e2:79:fb:93:b6:db:77:13:a1:08:bb:05:
09:c8:7a:61:1b:8d:f7:f9:f4:59:66:68:39:d0:df:8e:b3:9a:
e7:b0:41:ce:de:6e:35:9c:f3:80:1f:2e:89:9f:01:cc:b4:61:
e1:e4:3f:58:0a:93:c6:22:23:9e:d4:ed:d4:6a:b5:5c:0d:26:
bf:85:cf:95:f2:8e:86:7e:33:fc:57:35:8d:25:dd:7f:8c:85:
c0:8e:a8:a1:bc:84:51:61:6a:d5:b8:41:e1:cb:26:d0:c8:6c:
cc:1d:f5:b6:a8:9c:9c:03:dc:41:17:4f:51:60:1a:7b:56:c5:
fd:eb:9a:f3:45:15:da:df:73:d9:21:73:b7:a5:16:4b:9e:1b:
d6:50:a4:ba:57:c8:09:6f:9a:3d:bc:c9:11:dc:ba:95:a8:e1:
a2:3d:a5:ed:a6:0f:10:e8:04:73:0e:0b:e6:47:16:25:51:78:
a1:40:e4:e5:b0:ef:be:13:65:ba:1a:e9:82:4b:69:e1:c1:44:
3c:77:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:30 2026 by rpki-client