
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
File: d5309438-77a7-3911-b8df-e43cb484204d.roa (raw, json)
Hash identifier: qrJ481+Fz0GUoDovPYWI/o+HaajzuD6cNOoHZvThOHw=
Subject key identifier: F1:1C:8D:C1:1D:A8:D6:0B:54:F1:C0:D7:F8:72:6B:97:E9:DE:77:2C
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584F4974CEB69D6E87C626F24D80
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11404
IP address blocks: 209.236.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:ce:b6:9d:6e:87:c6:26:f2:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=37e3b655-a0bf-4355-aaf8-3d183e7fd64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:5d:30:7e:55:4a:a7:62:a7:2a:1d:4d:4a:
32:ea:3f:ba:fc:e9:cc:b6:35:45:f4:5e:10:ce:30:
53:f1:e1:88:55:a1:e0:19:99:da:dd:98:ac:c0:5a:
3a:59:28:f7:67:00:c5:5a:78:b7:ab:8a:66:34:f5:
0f:f0:1d:f6:27:de:fb:c5:fe:50:2d:c4:12:62:9f:
db:b6:2a:5e:38:fb:4f:06:b3:7c:de:f0:62:2b:95:
a9:67:d1:01:2e:f4:d8:ad:7c:eb:8c:f6:bf:9c:7f:
c3:b9:d5:52:eb:d1:76:f7:29:18:4e:6f:f1:48:26:
14:d5:64:ef:03:0f:d6:96:79:24:6b:74:6b:d2:16:
99:42:ea:6e:24:ae:05:ca:9b:58:f5:ac:69:34:77:
9b:cf:b8:19:31:42:92:0e:a3:dd:96:e1:71:ba:dc:
f4:62:e6:02:51:d3:c0:85:de:63:ba:af:30:23:13:
58:1b:ef:49:e6:ab:da:71:55:b9:8d:a0:b0:a5:65:
58:24:07:a1:b4:4a:35:15:b5:e3:59:32:f7:9f:53:
4c:e3:ae:49:f5:2f:b2:6f:f3:5a:d4:05:0e:50:fd:
33:7a:3a:d8:a1:c5:7a:b5:03:31:b5:c8:7b:25:15:
1f:37:99:d8:df:85:23:4f:13:7a:ae:57:4d:93:0a:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:8D:C1:1D:A8:D6:0B:54:F1:C0:D7:F8:72:6B:97:E9:DE:77:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:41:49:c8:60:ac:70:89:bd:8b:6b:1b:e0:32:1d:c3:e5:65:
86:ba:5c:b5:dc:51:7d:8a:e1:b9:d8:3b:24:96:9f:72:a5:78:
f2:a0:20:16:61:c1:4e:b7:d1:76:54:5f:3a:7d:93:f8:4d:5e:
07:9a:b0:dd:ac:fe:9d:d1:3c:53:e2:e1:e9:2d:b2:f6:60:86:
28:25:92:16:72:79:d6:90:2e:8a:9e:9e:05:ce:0e:eb:54:7e:
53:09:a9:97:f4:1e:1e:c6:64:6d:d4:32:f2:53:9a:db:bd:d3:
8c:53:4a:a7:8f:4c:26:94:2f:26:96:9c:e5:17:31:51:51:69:
23:f0:01:db:f6:6d:bf:5c:31:55:8a:5e:61:d8:da:7f:33:d9:
51:74:d3:2e:a1:cc:65:35:be:13:65:79:11:b5:f7:1d:8f:69:
65:c1:7b:24:12:ed:70:24:d3:32:9d:da:49:26:97:e1:ca:2d:
c3:b3:6b:ed:51:8f:09:f1:aa:d4:5e:5e:13:9d:d1:a2:28:90:
6e:36:f0:f7:b3:87:ab:cd:91:97:45:17:3a:1b:e0:81:eb:98:
79:4c:69:74:aa:b6:68:bb:ee:24:c8:ed:10:8b:ba:79:01:8e:
d4:ba:95:f7:38:30:a7:42:49:80:4d:1c:f7:89:7c:28:b9:70:
4b:5a:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:12:38 2026 by rpki-client