
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/51a965ed-2012-31f5-a9b7-69457954318d.roa
File: 51a965ed-2012-31f5-a9b7-69457954318d.roa (raw, json)
Hash identifier: 06R5JHx2R7ONhXrRcxEb9URz25ogBXbOKEOfirLnxA0=
Subject key identifier: 39:90:0C:D3:38:60:3C:3A:0C:D2:F3:3C:EC:79:01:E7:EF:CD:B9:C5
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584F17324F25A182E06D63F7D080
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/51a965ed-2012-31f5-a9b7-69457954318d.roa
Signing time: Mon 07 Sep 2026 01:00:11 +0000
ROA not before: Mon 07 Sep 2026 01:00:11 +0000
ROA not after: Sun 06 Dec 2026 02:00:11 +0000
asID: 7029
IP address blocks: 208.52.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:32:4f:25:a1:82:e0:6d:63:f7:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Sep 7 01:00:11 2026 GMT
Not After : Dec 6 02:00:11 2026 GMT
Subject: CN=a7a9bb8d-b691-42c3-8f53-2690baab32a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:c7:f6:94:4e:85:7e:84:36:3e:dc:49:08:
23:13:37:ec:7d:d1:d5:85:e3:04:69:9b:08:ad:f4:
29:66:d7:fe:ab:88:7b:34:51:36:8d:08:4a:46:97:
14:65:4c:6e:a2:3a:5c:d2:09:94:0e:bc:ed:2b:24:
b5:e6:c5:cd:c6:4e:47:a4:09:88:39:c5:e6:90:b8:
71:41:ac:14:a0:27:60:3e:c6:15:d3:d7:a2:7f:5d:
78:b9:ad:c4:5f:aa:5e:4b:50:e7:03:62:e8:8f:ad:
57:e4:bd:eb:39:b8:d8:5c:38:ca:41:44:4a:77:24:
fb:1e:02:24:77:50:01:35:31:c0:3a:9c:67:80:14:
76:55:cd:b8:1e:83:38:68:9a:ab:c2:a7:ac:71:5b:
e0:da:37:1b:6e:69:13:97:eb:fe:b4:f0:75:6c:6e:
7f:c5:82:e9:79:a7:c1:a2:8a:20:f9:4a:61:be:5e:
88:66:12:2b:aa:65:4a:68:b1:5c:f8:c5:31:9a:ee:
4c:09:be:58:66:14:0d:25:80:68:b9:00:a5:61:4c:
6e:c5:ca:c8:fb:40:a2:38:91:86:04:8c:3b:b9:9e:
75:30:d7:c6:42:5c:53:0b:aa:cb:a9:09:e6:76:ca:
0a:95:99:bb:9a:07:63:fe:ff:2d:0c:fa:d2:a2:3d:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:0C:D3:38:60:3C:3A:0C:D2:F3:3C:EC:79:01:E7:EF:CD:B9:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/51a965ed-2012-31f5-a9b7-69457954318d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:bb:62:a8:c1:11:db:e5:60:95:86:87:6a:89:8e:96:b2:bf:
70:68:58:70:d4:f5:5b:4d:86:f8:21:70:f8:35:85:a4:f7:5c:
2d:78:4f:61:30:53:0c:f1:80:1a:8e:e9:a9:3d:9e:91:5a:01:
9a:31:60:b8:a3:f4:7c:b3:45:3f:f7:e2:0f:6d:d9:62:8d:e5:
ae:1a:5c:16:01:05:b3:ea:de:12:17:2b:60:d5:a5:7b:08:c2:
1d:0b:f5:b5:cc:fe:36:d1:8c:48:14:ab:d0:a2:03:16:16:28:
28:2c:05:d2:18:3b:6d:e5:4c:c0:0b:80:55:18:5d:dc:2f:a8:
4a:77:28:8f:c5:66:b7:21:03:10:04:ca:88:4b:1a:fa:ef:30:
13:a7:ff:4c:de:fe:23:10:3b:c5:6b:49:f5:32:6d:16:cb:31:
e0:7b:1b:3b:6b:78:a3:a1:6c:89:ac:4d:fd:85:23:dc:dd:2c:
da:fc:fc:d8:79:9c:f9:31:75:8c:b2:1b:c3:9d:7d:39:52:5b:
2b:33:93:4a:b5:c3:d8:22:af:5b:4c:86:ce:d3:8f:17:10:7d:
39:6e:2e:83:1c:9c:35:31:c0:4b:ed:b5:82:63:9f:37:1b:eb:
9a:21:04:8e:dd:94:c4:df:4a:d2:c4:0a:64:ea:10:3d:35:31:
90:36:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:59:57 2026 by rpki-client