
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa
File: 854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa (raw, json)
Hash identifier: Umj/8skjLNhyLYqCS/ggjk/LDywgBzVw20EMgKjqpVE=
Subject key identifier: 58:A6:85:03:D8:EF:13:9E:6D:3F:39:38:B0:19:E3:64:B2:2D:63:5D
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EBB11A50909CB4834D811CA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 397630
IP address blocks: 209.101.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:a5:09:09:cb:48:34:d8:11:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=3aed9e3c-591f-4654-ae73-f4dd51437454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:87:dc:f2:76:71:e9:b2:7c:78:bf:6a:aa:
7e:a2:99:e3:57:e7:b7:b7:bb:0b:18:06:6e:5b:0b:
4d:27:0d:78:09:87:f4:6f:a3:8c:7b:a9:50:d2:1b:
15:16:ce:71:7a:c1:16:4a:58:48:0d:9e:86:d1:c2:
81:18:d7:0b:5f:39:5f:fb:de:6b:88:73:aa:85:ab:
71:8c:ca:21:c7:08:85:25:b0:1d:3b:a9:82:5d:05:
11:77:ce:ee:d9:10:98:59:7d:69:31:d4:b6:93:f8:
c6:e1:dc:56:71:34:5c:4a:30:9b:cd:46:50:0b:a0:
6e:b3:e2:5c:4f:70:83:c2:14:c8:f4:2e:08:5d:b6:
a8:ed:74:b0:1e:5e:9c:65:2a:5a:83:e2:d1:45:30:
d2:ba:1c:7a:3d:55:f7:01:4a:9b:b9:e6:99:cb:d5:
a5:17:e4:2c:9d:e8:69:ac:86:5d:fe:93:2a:46:51:
14:e0:81:01:e9:38:d9:2f:92:7e:6a:9f:3e:2c:e3:
5c:f3:96:81:7a:8b:ae:09:19:06:06:d2:22:5b:b3:
c2:dd:d8:a3:c7:28:3d:1f:03:ef:c1:5a:58:23:2d:
ad:3f:d8:c0:3c:b9:d2:7d:21:fa:80:8b:73:10:be:
c5:84:d7:46:22:f1:5f:b7:1f:03:c1:b1:26:6d:b0:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:85:03:D8:EF:13:9E:6D:3F:39:38:B0:19:E3:64:B2:2D:63:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/854fca85-c5eb-3b4a-aee6-92b94c83e8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fe:27:55:de:bc:32:9d:5f:62:9b:b0:43:10:88:5d:a9:8f:
d6:74:ea:b6:10:68:f9:7a:d1:96:f0:22:91:a6:d6:09:2d:bc:
7e:8a:bb:a8:73:57:ca:84:30:0a:d9:f8:c0:92:eb:06:9d:5d:
34:e2:2b:9d:6b:1c:38:fd:29:54:7c:1b:c9:7f:2d:a4:46:d1:
c2:2c:21:57:64:d7:6b:ea:ea:7b:84:d7:4b:50:a4:b4:f4:aa:
52:66:5f:19:93:8b:52:da:b7:ab:19:5e:0b:7f:dc:ea:f2:06:
1c:fc:c3:17:75:0e:83:52:3c:a4:69:3d:ef:5f:1f:8f:7e:31:
da:68:68:75:0a:eb:4f:7d:3f:e9:b3:ed:51:27:41:6e:1d:18:
d9:a3:0e:c5:29:64:26:5d:c4:68:bb:5a:f7:46:b8:41:c4:c4:
a2:2d:b6:e9:fe:6b:63:47:9a:42:ee:b8:ee:72:41:6a:d8:46:
b5:64:dc:18:aa:20:6c:42:71:96:67:c9:fb:50:9c:f6:ea:01:
ca:64:e3:9a:46:2d:05:3e:db:53:f3:9a:6e:40:90:27:f6:5d:
b8:81:33:be:12:6d:6a:2c:1e:e7:1d:20:03:e8:17:c0:73:73:
17:19:77:d0:81:aa:ae:2b:07:73:21:56:c6:17:53:5a:2f:a0:
9b:cb:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:49:12 2026 by rpki-client