
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa
File: 3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa (raw, json)
Hash identifier: GmHRDZN2GJGUrHLrN6BNctvGPS2vVgQNns/2f0mrzks=
Subject key identifier: CF:EA:84:B9:0F:31:00:40:37:AC:42:9D:06:3A:53:C2:DD:4D:55:00
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584CF5879905CB87680C64C4A340
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 16417
IP address blocks: 207.54.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:99:05:cb:87:68:0c:64:c4:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=84e14ae6-9873-4b83-9239-a09854899aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:47:e7:de:71:ba:ca:59:36:75:0c:fb:2b:
98:8d:80:16:03:34:ff:15:3b:74:c8:1f:91:76:15:
da:73:c8:2d:2d:27:04:65:92:81:91:03:cd:21:ee:
c4:b1:ae:70:4d:8e:aa:e7:af:a8:29:09:6f:81:a5:
88:df:4a:26:d5:62:bf:ab:0f:c4:b8:d1:67:6e:47:
da:d2:c4:74:b7:6f:7b:4e:ac:d0:96:04:66:74:af:
87:33:d2:0c:88:84:75:6a:81:60:5c:3d:88:93:60:
02:27:cf:9b:5b:84:96:39:9d:b5:e5:c8:b8:4e:0d:
1d:bf:f8:5e:c3:79:0e:9b:b1:f6:be:1d:29:e3:e6:
60:d4:b7:e7:97:92:a1:87:03:82:49:84:c8:5a:e3:
d3:1a:b2:30:6a:30:5e:41:18:a3:51:de:76:a7:52:
02:fd:ae:f8:9e:5c:a6:dd:c1:ad:5d:74:cc:83:3b:
a2:7b:6e:12:15:10:5a:f4:72:ca:0a:71:d0:25:e0:
8f:e3:0b:e8:a9:c0:65:46:fb:1b:ce:d4:f7:ea:44:
c7:0c:1c:38:c4:39:29:71:42:a0:68:62:ce:63:ba:
2f:c4:61:c5:5a:62:2b:f6:b2:ab:b5:84:7d:4f:d9:
a9:61:4c:79:eb:25:bf:34:b8:2b:80:26:13:90:98:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:84:B9:0F:31:00:40:37:AC:42:9D:06:3A:53:C2:DD:4D:55:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:34:91:98:b1:73:ea:e5:99:93:45:a0:bd:51:f5:bd:d4:79:
48:fa:ac:e6:ba:83:90:e2:14:7a:6f:43:f0:00:f4:84:64:47:
a0:32:a9:d7:83:ba:96:9e:1e:f1:11:f4:c6:2e:c9:2d:ff:67:
4e:75:b3:4c:5f:82:57:10:86:2e:5f:b2:67:4a:1f:49:c4:df:
c3:35:71:dd:f8:52:33:54:32:40:2e:fc:13:2b:45:86:64:4b:
cb:81:2a:c4:de:23:15:6d:db:87:b4:fe:18:e7:64:40:2a:21:
a6:f0:f5:52:4f:df:0d:ef:88:b7:40:27:d5:e3:ea:b1:ca:99:
6c:7d:51:b5:69:13:09:56:50:6a:aa:21:54:a0:c9:ee:de:b3:
8c:97:44:15:36:43:6d:5d:1e:b8:5d:9b:3b:53:42:80:78:6e:
53:ec:9c:c7:d2:a5:04:2a:4b:8f:ce:85:fa:c5:1c:b8:4d:2a:
01:fe:1f:0d:43:cc:4b:ba:bf:d6:3d:f8:4f:94:b8:8c:cf:9b:
0a:b6:a2:6e:9a:07:b6:67:db:1e:22:90:6e:0f:de:4a:1d:8e:
0a:2c:82:eb:29:29:ef:c0:2e:4a:19:00:c5:d4:87:72:e6:93:
8f:a1:70:0e:49:0e:28:b2:ba:2b:a7:b8:1d:09:44:b7:84:22:
b5:f0:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:32 2026 by rpki-client