
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa
File: d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa (raw, json)
Hash identifier: SxvMdA55BwtxJLEKJRg0jGz+TzWLovHu3DAbF8nUgDs=
Subject key identifier: FB:7B:82:79:94:95:2D:FD:F7:CA:D6:16:94:07:11:CD:69:6A:BB:10
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584D1F4A35FC68F0310789007480
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 6079
IP address blocks: 209.236.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:35:fc:68:f0:31:07:89:00:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=d03615cd-e51f-41f9-a30f-32da5818cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:ab:ca:d6:9c:54:02:f3:09:60:b4:a6:eb:
ab:a0:b4:30:96:1f:e9:51:d1:73:a6:cc:de:ef:58:
38:32:b4:48:53:76:a3:81:d4:71:ef:d1:b2:29:f9:
2d:21:3a:4b:3c:9b:87:0a:e3:5f:e6:3d:9e:68:1b:
a6:5a:12:ec:a4:22:b2:45:41:d2:08:97:ab:2e:7c:
3b:03:98:a6:0c:ae:80:85:71:b9:1a:81:a8:db:ae:
f4:38:2d:9b:22:01:a7:4a:47:96:7b:39:65:2c:64:
89:1c:f5:ad:98:3a:4a:81:d5:dd:57:ed:47:9a:d2:
ba:92:4b:91:ee:89:cf:80:59:98:e0:52:59:70:84:
2a:04:db:1a:88:0d:0a:cc:d1:c4:bf:53:1d:c1:71:
cc:3c:ca:23:77:e9:eb:0e:0d:0f:33:4f:61:42:80:
2e:fa:93:9c:1a:fe:26:21:94:5f:9c:bc:f5:5c:67:
d0:2b:69:05:1a:70:f0:93:68:de:66:44:10:21:bc:
ba:4b:b1:79:ec:12:47:32:9e:30:0d:f4:82:83:81:
c5:b6:cf:e4:26:3d:8c:7d:a3:2f:89:fb:9b:72:b2:
c2:b8:a9:40:fb:73:3f:7b:51:1f:bb:83:bc:0b:fb:
67:ae:a6:56:49:9e:cb:5b:c6:02:a9:5e:5c:e4:a3:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:82:79:94:95:2D:FD:F7:CA:D6:16:94:07:11:CD:69:6A:BB:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:5d:02:b5:20:e7:ba:f0:80:07:93:38:5b:48:a1:0f:e3:26:
d6:9d:a3:99:db:ae:34:e0:72:53:ac:26:09:b7:e5:9c:d0:8a:
35:f7:97:f6:74:1c:f5:65:7b:c0:af:29:33:ac:1b:98:5f:0e:
42:bf:55:8f:be:74:a1:3f:36:d4:7d:3c:59:3a:47:1d:f2:2b:
29:88:c6:ea:71:33:bc:42:ec:10:bd:47:63:97:42:8f:66:0b:
54:c3:74:08:b0:b2:fe:ae:d1:2b:85:98:48:6c:e8:55:6c:81:
d2:97:f5:3f:5e:f6:ee:e1:53:92:d5:75:83:a0:37:72:0a:8b:
a0:f8:4f:44:b9:56:13:34:b5:5a:bd:5e:2b:f7:5a:94:ae:f1:
dd:2c:6f:b0:00:4c:10:34:1f:21:61:75:09:69:6c:33:3d:53:
b6:e7:4f:88:2e:88:77:3e:57:10:3b:93:a9:14:84:fd:11:df:
54:cf:75:12:77:5d:8a:87:6e:84:32:bb:05:a7:35:28:ee:e2:
5d:0e:22:7d:42:99:9e:75:d2:9d:7e:95:ab:04:25:84:e2:97:
06:76:44:d3:19:2d:21:a7:e4:94:c5:e5:74:61:3c:7b:c8:c6:
fa:aa:dd:0b:97:1a:86:f0:08:70:e1:d8:0c:cf:04:87:17:3f:
0c:19:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:12 2026 by rpki-client