
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa
File: 8caf9660-d639-3192-94c6-0908db45c913.roa (raw, json)
Hash identifier: BIS7GvtztUkXZPTMCOH8QUgIldjy8T1A1yhoT6Sc2aI=
Subject key identifier: 63:46:CA:65:86:96:40:95:9C:7B:70:CA:22:D2:FD:90:5A:AF:B4:08
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584EA7906D8DD332F753FBB0F840
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 29182
IP address blocks: 206.245.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:6d:8d:d3:32:f7:53:fb:b0:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=82c3f841-5fb1-4778-94ec-8d146f1c1fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:75:6f:84:5c:db:d1:9a:aa:80:f1:e7:1d:
03:30:b6:49:b4:7f:d5:4e:0c:e9:61:f0:3f:0c:6a:
9c:3b:14:bb:10:ac:35:d5:7f:68:5c:d5:24:66:1c:
f0:db:84:bf:09:f8:bc:df:12:41:e5:f8:35:76:d9:
3f:1a:b9:26:f9:4c:45:55:f3:1a:f6:84:1d:59:81:
90:c8:bf:db:f3:00:88:fc:ab:52:f5:6d:13:15:56:
7b:88:f4:09:41:44:3f:ce:1f:d9:91:de:d2:8e:13:
11:30:e2:08:f0:70:32:89:c5:1a:27:8a:83:65:b2:
44:eb:09:e6:87:df:8d:7c:53:64:ea:51:fc:28:be:
84:af:25:39:09:12:70:22:86:0f:a0:98:7f:19:78:
96:72:5d:98:30:72:0d:a8:7d:25:85:bb:a9:e9:b1:
cc:81:72:33:c3:98:d1:39:ea:7a:b8:df:db:c6:11:
1c:cd:88:1f:79:00:30:c2:60:eb:16:3d:30:df:b1:
75:f7:13:8b:0b:ce:d8:31:bc:63:98:1f:6d:f1:8c:
90:a5:d2:02:39:9d:8d:83:32:80:c9:2f:8c:73:23:
2b:1e:ef:54:93:4d:fd:1a:da:71:6d:90:3b:2d:cb:
81:6d:07:6a:46:a2:6f:0f:fb:67:6e:87:cf:34:aa:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:46:CA:65:86:96:40:95:9C:7B:70:CA:22:D2:FD:90:5A:AF:B4:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
206.245.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:36:ad:5a:1e:1e:06:59:bf:63:f3:d8:5f:c8:5e:47:ee:a6:
73:c5:c7:9b:17:6c:d3:f6:74:80:45:d6:50:8d:c9:30:6e:29:
92:a2:64:1a:30:57:f8:32:62:4e:bf:2c:3d:88:c5:a1:e9:fb:
9a:4a:e9:f0:b8:be:a9:6d:05:58:99:c7:47:8c:38:35:78:ed:
75:53:57:09:b6:b5:2e:f9:93:5d:1b:54:d3:b2:ce:bb:fa:24:
ec:9c:b9:d2:68:d3:ca:0e:ec:36:ac:27:9b:a6:31:65:62:de:
91:dd:2d:6a:9b:76:4d:3b:84:46:0e:6a:48:77:11:aa:95:e3:
28:f4:6b:87:34:44:8d:a2:ad:cd:be:5a:67:3a:ca:da:cb:41:
91:7f:ec:30:1f:99:26:49:b0:0b:69:71:56:63:0c:46:52:22:
35:55:07:6a:08:65:67:ba:21:a8:33:3d:c5:c8:f5:4a:9e:b5:
76:16:5f:d2:d8:d2:9f:20:ca:f3:73:e2:f4:33:37:49:38:8b:
18:fc:5c:32:8f:3e:8c:80:93:71:23:06:02:70:8a:ed:fe:43:
8b:a4:37:62:f2:7b:42:18:45:e3:cd:32:92:54:ab:27:fb:f6:
00:9c:8c:fd:9d:8b:46:17:48:b6:06:e4:40:00:e0:38:9a:8e:
e3:7a:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:46 2026 by rpki-client