
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/260cc040-e89e-3e54-8195-0dca0e2f853b.roa
File: 260cc040-e89e-3e54-8195-0dca0e2f853b.roa (raw, json)
Hash identifier: Xky3mlvd8CW+9gCK6I9rf+supGcvU0xcJiLccc9skB8=
Subject key identifier: B2:9B:48:D4:71:01:E9:99:FC:B2:2D:5F:A8:74:E5:87:42:FE:C7:60
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584F119D12DA36B83EE31C994300
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/260cc040-e89e-3e54-8195-0dca0e2f853b.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 30238
IP address blocks: 207.54.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:12:da:36:b8:3e:e3:1c:99:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=a9b311db-19e2-439e-925e-bf4f63469fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:d5:52:a6:59:ea:75:af:73:bd:15:ac:c1:
7e:54:06:bc:7e:ac:5d:30:1a:c6:0c:df:fa:4e:a1:
20:49:f4:a3:e3:72:eb:32:4e:77:f8:2e:46:ea:c8:
a1:cf:67:82:45:3e:ef:54:83:4b:a8:a2:d9:66:08:
cb:86:eb:5b:f8:37:2c:96:bf:cb:50:ac:de:74:c0:
19:be:56:c7:d0:eb:9e:a1:26:f3:6d:e3:df:30:a5:
94:44:17:84:d5:0a:c1:fb:ef:c1:6f:8f:0d:73:24:
20:b5:c9:e5:d8:5f:3c:3b:30:e1:22:0a:8f:7f:1c:
41:d7:2c:a3:1d:e9:dd:53:c8:88:aa:da:ca:a4:85:
bc:78:08:60:94:e7:f0:80:3e:06:10:73:c5:b3:49:
89:c7:96:a8:f9:51:49:1c:13:a0:db:3b:0e:60:95:
f2:79:8e:0f:1e:bf:d5:78:fd:e0:c3:bc:eb:22:8d:
55:ae:ba:b9:88:0a:3c:3e:ae:83:84:f4:06:aa:ea:
40:a4:b0:3a:bd:3b:d8:91:b7:ad:ae:41:9f:0f:79:
83:f8:b9:79:d8:d1:bb:3f:b3:22:ad:a0:2e:05:5b:
5b:2a:de:67:8b:a3:71:50:e0:18:f2:49:1f:21:91:
9c:05:cc:9c:60:36:9f:0e:ba:6b:2c:9c:c3:07:f4:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:48:D4:71:01:E9:99:FC:B2:2D:5F:A8:74:E5:87:42:FE:C7:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/260cc040-e89e-3e54-8195-0dca0e2f853b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ce:2d:bd:c5:91:44:e0:49:ac:02:8d:eb:45:e4:d9:0c:7e:
54:23:51:d3:2e:46:fa:ec:a6:34:08:46:ea:93:56:c9:28:1b:
ab:60:72:be:92:b9:e0:46:d8:98:19:c7:2e:d5:0b:4e:c1:ac:
29:b7:60:23:26:07:31:ee:b9:39:cb:ca:a4:21:9c:47:3c:31:
94:fd:a4:e2:54:b3:84:49:48:f6:b5:d4:bc:aa:b7:e2:b6:9e:
df:32:f3:f1:e6:43:2d:fb:2d:6c:76:ce:92:6b:a5:c9:18:1e:
03:37:33:5e:6a:d3:43:c1:5b:11:93:92:ef:95:6f:74:9f:e9:
8e:21:3d:de:79:ca:fd:90:36:d6:26:47:07:52:72:f6:66:8e:
bb:54:1b:54:53:2f:3c:95:46:7f:08:68:2c:0a:07:6e:75:5c:
49:a3:c9:7a:78:33:cc:e8:91:42:90:5a:d7:9d:83:d7:42:11:
ca:64:59:7b:60:ea:ae:3c:00:64:94:20:77:13:37:8f:30:e6:
e7:4d:54:dc:1c:17:af:e3:c0:09:fd:13:72:63:25:d6:00:93:
29:bb:5d:f2:91:f3:96:be:24:c7:e3:61:ce:37:da:e3:fa:07:
1c:4d:93:76:5f:c2:5e:24:8f:8f:ef:f2:52:e5:29:e1:59:23:
18:6c:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:46 2026 by rpki-client