
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa
File: 488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa (raw, json)
Hash identifier: YkQXmOhlT2oN4A2tvSt05vCENE6Nn8dBTdlsh785N7Q=
Subject key identifier: 9E:23:05:04:CB:97:BC:A2:E3:40:0C:40:1C:8F:4F:03:8A:05:8A:E3
Certificate issuer: /CN=86906b9d-26ff-4ce8-b900-62739db43657
Certificate serial: 010D0C9F4328584F4973EECCD2B9173CA5469F18
Authority key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 6653
IP address blocks: 204.10.124.0/22 maxlen: 24
204.16.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:ee:cc:d2:b9:17:3c:a5:46:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86906b9d-26ff-4ce8-b900-62739db43657
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=512f1c19-ae8f-404e-8c23-261c5b4b3905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:5b:1a:e2:9a:da:67:fe:c8:6c:86:49:0a:
11:c0:d5:14:e9:42:b7:c1:c8:d3:54:87:d9:45:a2:
96:fa:6e:f0:a7:d2:f9:34:be:6c:e6:ff:95:d8:4b:
46:b8:c6:95:46:b2:53:67:87:ee:c7:5f:2b:36:a1:
d4:16:37:96:83:ce:99:41:f2:79:69:5c:a8:62:1f:
1a:31:fd:d2:c0:8e:92:f4:d0:84:47:61:c0:83:0c:
c3:fc:95:e6:08:f3:5d:9b:ec:00:e0:90:0b:99:f9:
c0:7e:84:4b:7e:65:82:c1:98:a9:18:e8:fc:ea:6b:
a5:cf:4d:90:52:7b:ad:a1:26:34:3b:f0:52:6a:40:
7e:9a:dc:cc:6f:6c:8d:aa:be:63:c3:81:0b:68:04:
dc:ab:03:be:8d:f9:2b:b6:83:3c:bc:51:3e:8f:dc:
73:c2:9d:1f:32:07:69:f1:4b:e6:a6:6f:62:b1:59:
9d:ef:72:73:f7:cb:94:50:58:a4:46:9f:55:57:8b:
61:1f:3e:fd:1a:e1:61:26:ca:5b:69:ca:e4:72:e2:
bf:d1:8a:72:5c:ec:cd:a0:c0:f8:4f:55:a9:f2:9b:
7f:1d:9e:41:84:0e:70:17:0f:c6:b8:e7:81:fd:32:
3a:d0:52:52:41:3f:3a:60:fd:a6:e8:ac:a4:a4:f5:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:05:04:CB:97:BC:A2:E3:40:0C:40:1C:8F:4F:03:8A:05:8A:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl
X509v3 Authority Key Identifier:
keyid:5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.124.0/22
204.16.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:2f:0a:29:3f:43:d4:ef:db:f7:b8:9d:bc:6e:be:03:46:d7:
c9:4a:c3:64:f1:bd:08:fc:e0:3f:db:e7:ad:90:db:13:f3:bd:
f6:43:b9:18:d0:79:f3:e0:d2:1f:e4:ca:50:1d:76:ae:ea:4c:
cc:c3:8a:ff:38:9b:e0:06:66:c4:8c:5f:8b:ce:5d:1d:04:d4:
8c:f2:b1:04:99:1e:a4:a7:15:a8:dd:fb:fa:dd:d2:fb:4e:06:
e5:42:ba:63:0f:31:a5:36:55:85:7e:5b:b4:71:d2:7b:08:d1:
76:bc:c1:09:64:e1:c8:df:51:28:65:dd:64:95:fb:bd:34:b9:
75:40:a4:d8:ab:e3:86:22:41:57:df:18:d0:61:11:c9:9b:83:
b4:82:29:72:dc:2f:e8:f7:8d:9f:b7:18:ed:16:56:14:1e:ee:
cb:c7:8d:04:a4:d8:87:88:d4:5c:11:14:2c:dd:93:d3:e8:99:
97:ed:7e:2a:a2:42:bf:7c:a7:bb:81:bc:08:78:25:f0:67:02:
fb:df:a6:f6:76:37:aa:11:eb:9a:cd:cf:da:88:fe:15:fa:79:
7e:0a:58:09:74:65:1d:f3:df:c2:5a:50:9d:0c:db:e7:dc:20:
a4:20:8e:4e:90:4c:6b:ce:fd:34:1a:1f:34:34:a8:d7:49:74:
81:a9:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:39 2026 by rpki-client