
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa
File: a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa (raw, json)
Hash identifier: KgBHakB3PWJvWlJyHIrYohnsi/dm01sew1BHYypz15s=
Subject key identifier: 13:E8:40:11:58:23:FE:B1:45:09:D9:0C:C3:82:91:E2:C8:42:3F:98
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584D1F4A36FBB9FAA21795664F40
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 11404
IP address blocks: 209.236.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:36:fb:b9:fa:a2:17:95:66:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=05e098fd-d308-4e5e-a9b3-210962b6d780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:6c:e8:f4:31:76:fc:d5:68:fe:d3:ac:2e:
5f:59:be:4b:d4:6e:1c:f2:df:b0:a4:9a:f3:73:42:
aa:29:d5:bd:1f:94:fc:e4:03:54:b1:58:44:a0:54:
5f:c3:b4:a1:9e:ff:21:0c:75:83:3d:73:12:06:08:
bd:d3:3b:a5:18:30:f4:aa:75:1e:ef:59:03:d0:52:
c2:1e:ca:8d:95:f1:3f:51:68:ca:5a:22:cf:17:85:
7d:e6:0c:8f:98:5c:2f:b4:15:f3:3d:53:20:08:d4:
05:d4:41:89:14:fc:c7:a0:4c:9c:b5:4f:28:a8:72:
30:21:c7:c9:ed:0f:81:26:4f:22:eb:de:4e:dc:23:
b4:e1:93:fd:ac:a7:7b:75:9e:cc:da:8d:f9:14:c1:
87:87:05:b6:9a:55:98:9f:c0:52:41:a6:fa:96:30:
6e:b1:6d:bc:9e:62:31:b6:95:b0:f0:ba:04:01:e5:
25:e1:85:46:26:bd:12:d6:7d:a8:b3:62:5b:ec:b0:
92:36:f8:32:51:bc:69:59:6e:c1:5e:76:6c:f3:d0:
9d:a9:95:43:64:c9:46:77:5c:19:fc:0b:40:fa:11:
9d:97:ea:cd:18:bf:d5:c8:3c:45:af:fa:9d:30:a1:
3a:ea:d2:16:75:c0:1c:f0:e6:7d:e4:b1:c8:42:62:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:40:11:58:23:FE:B1:45:09:D9:0C:C3:82:91:E2:C8:42:3F:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d7:ec:40:67:b7:f5:47:23:5d:3c:1c:ad:11:41:68:d2:30:
d3:8a:a1:2a:0b:95:91:a8:35:ad:e3:f6:f3:62:ea:8e:31:a4:
57:a1:6c:b8:10:13:7a:bc:d2:62:f9:32:30:06:1a:16:71:a4:
a4:20:42:25:0c:f5:3d:ab:69:18:4e:f7:73:d5:99:02:0d:3d:
0f:6c:4b:e3:18:65:1d:48:c6:3c:99:85:9e:ea:41:a1:62:67:
51:2a:be:7f:83:33:11:71:61:68:b0:70:c5:d1:2c:8a:7b:18:
ed:ce:3e:8c:b2:51:42:24:c9:07:6d:f2:dd:ba:d6:86:c7:67:
f3:eb:d4:83:cc:bc:e9:48:56:a7:14:50:9a:ac:5f:5e:10:3f:
35:d1:48:84:8c:f3:32:3d:04:59:0f:d8:1b:13:62:33:4b:cd:
9c:f3:e5:a8:c4:8b:06:94:0b:aa:ae:62:a2:23:e7:c9:23:df:
04:4a:eb:8e:2f:f7:da:88:90:ed:78:5b:10:3a:99:23:e7:0e:
b1:c8:cd:0b:9e:15:1c:98:7c:36:ef:90:9b:36:51:65:35:0a:
db:bc:fb:6f:64:61:3c:78:c1:56:d4:cd:26:50:8a:45:b5:ed:
51:cf:88:83:f6:dc:9d:1d:c8:24:cf:76:75:fb:52:81:c2:17:
8d:45:e8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:29 2026 by rpki-client