
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
File: 22885b19-ffae-32cf-b022-3d5558dc4f90.roa (raw, json)
Hash identifier: BIRmArj3/UzYNHUpEmckvp45dp2Ff55Che2bUsBT+Bs=
Subject key identifier: 9B:55:75:C3:4C:56:AD:BC:7C:F8:59:89:09:9D:FE:AB:B4:9C:6E:0E
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584CAFBC85CB7D1FFFBF8377B600
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 7029
IP address blocks: 206.245.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:85:cb:7d:1f:ff:bf:83:77:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=978e490e-828b-4ddd-8afd-1d7b8950dee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:16:c2:b1:ef:98:10:60:40:23:5a:fa:26:
11:52:e9:31:07:e0:22:51:17:3b:37:57:6e:d9:61:
68:12:7a:1a:d0:cb:c3:37:c9:c9:c1:a8:5e:f3:e7:
5e:24:f7:7a:66:4a:e0:f7:85:a8:6e:11:8c:b3:e2:
00:dd:34:a6:63:dc:e7:3a:13:bd:16:3b:7f:36:04:
42:0b:58:f1:9a:c7:0a:71:60:f9:bd:c1:a1:9e:c3:
65:d2:73:66:7a:fc:0a:ae:df:71:13:f3:08:46:3c:
e2:4f:98:14:2f:84:ca:2f:a8:b5:d1:6a:e6:9b:be:
2a:e3:f8:54:05:cf:78:9d:11:4c:6a:95:88:b8:b3:
2c:89:32:90:2b:2f:7a:89:c0:43:4f:49:ee:93:7c:
d8:79:2b:f6:50:0f:64:1d:18:ec:70:be:d7:00:7e:
7d:77:13:58:a6:96:4f:9d:c0:7f:06:40:25:20:41:
e9:db:10:ff:cd:a0:3f:b8:d8:42:bf:0a:ac:5a:00:
e5:3a:7a:2e:ba:5b:3c:93:9f:60:38:5a:80:5c:f7:
43:a9:5a:4f:41:7d:4f:ce:bf:a9:d7:d3:f9:3a:06:
66:30:cb:40:c7:1f:5a:79:3b:86:45:c4:92:19:26:
02:6e:6e:fa:63:44:83:7a:d0:a4:41:0e:4a:44:fb:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:55:75:C3:4C:56:AD:BC:7C:F8:59:89:09:9D:FE:AB:B4:9C:6E:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
206.245.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:52:64:2f:28:83:e5:40:5a:d2:a7:fb:b5:3f:48:1e:94:df:
23:4c:3c:23:8e:d5:12:2f:83:c5:4c:1e:35:02:a5:58:ff:1e:
56:eb:7a:e0:80:01:97:13:95:ea:84:78:66:60:34:aa:48:d4:
69:31:09:3c:e7:83:09:8c:3c:17:ff:9e:10:fe:8f:43:54:73:
56:59:f6:6f:34:3d:ab:27:b9:76:a7:20:20:85:70:cb:48:7c:
63:65:b0:45:7b:38:f8:84:68:eb:f3:a8:a9:2d:98:8b:2c:99:
4e:fb:21:94:bb:ca:aa:65:85:8b:fd:df:da:d7:f2:d4:4e:95:
e0:71:a9:96:be:29:35:69:be:2e:fa:81:a7:f2:ac:c1:40:c4:
55:0f:5d:18:78:cd:41:fa:4c:1e:90:a4:87:9b:2e:f2:07:ac:
40:60:f0:3c:dc:2d:ac:ad:d5:5b:c7:64:dd:2c:ee:75:0d:07:
64:27:2c:f9:32:fb:2a:79:d0:a3:5e:4b:32:a5:17:ff:4c:9e:
c0:f7:88:85:de:34:08:d0:8c:12:07:54:0a:4b:e5:02:d9:59:
91:70:b1:81:f4:00:d5:c5:55:eb:d4:2c:4a:7a:d0:4d:11:02:
dd:43:f1:a3:6d:61:be:69:5f:6c:24:45:ea:e3:f4:b4:7e:bd:
58:8a:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:12:45 2026 by rpki-client