
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c9b570f3-be8b-3087-95ea-7994132d14d4.roa
File: c9b570f3-be8b-3087-95ea-7994132d14d4.roa (raw, json)
Hash identifier: C+zYpyR+tlfxAYUPlwJ3uUlgkE6EvzOHSKnmyYgcPxI=
Subject key identifier: 26:4E:A4:8D:09:86:F8:21:D0:56:81:14:AD:36:05:BB:F6:1E:3C:C3
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584E253F08EE2C25988D2933BAC0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c9b570f3-be8b-3087-95ea-7994132d14d4.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 16417
IP address blocks: 207.54.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:08:ee:2c:25:98:8d:29:33:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=ccb1e02b-36ef-41ef-b8ed-35561b43008a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:44:ec:7c:c1:39:6d:05:a7:f5:f7:36:1d:
83:38:0f:bf:b7:b3:f3:b6:dc:a8:2d:f2:a0:b7:0d:
c4:23:90:d4:80:72:04:15:69:6b:59:e0:cc:44:6b:
94:6e:cb:d6:5e:3a:2a:c4:be:1a:e4:ed:87:4a:3a:
f5:e3:a9:a8:92:0b:89:5e:a2:a4:ef:7a:fe:de:f7:
95:e2:59:44:22:03:3a:82:0a:8c:f9:ca:5e:70:ac:
a6:be:80:ae:fc:21:96:39:64:cc:78:59:4b:44:49:
8f:17:cb:82:5f:3b:6b:c3:4c:1d:a3:22:fe:d8:1a:
0c:3b:1d:a0:6a:9a:47:07:14:4a:a3:0b:05:c2:15:
e8:ef:1f:f7:ff:45:0b:be:52:02:2e:7c:20:11:ba:
99:c6:21:db:8c:17:af:d8:83:df:cd:89:05:3e:0b:
63:92:42:95:1f:33:f3:4f:c6:6d:dd:10:14:e1:37:
39:97:5e:65:22:9a:e6:ac:21:53:02:dd:cb:be:b1:
c7:f1:80:31:c3:e8:f6:5a:a6:5f:73:d7:25:72:67:
79:d1:9e:b9:e8:17:b3:ba:20:8c:be:16:1a:49:c0:
44:4f:47:e2:12:cf:7e:ad:c8:14:6d:8e:99:63:88:
75:da:2f:15:4c:a0:3c:3c:f2:fa:9e:07:7c:6e:a3:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:A4:8D:09:86:F8:21:D0:56:81:14:AD:36:05:BB:F6:1E:3C:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c9b570f3-be8b-3087-95ea-7994132d14d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:21:e8:8c:1e:7f:21:29:75:25:23:50:49:ac:fc:c7:4e:88:
c5:5f:59:ca:83:cd:48:ca:3f:23:98:e6:af:45:ea:ae:78:e5:
3f:b2:b0:5a:23:83:fd:c6:27:01:05:bd:a0:83:c0:5e:46:aa:
05:92:16:35:12:70:91:27:30:36:66:7c:0d:80:ef:d3:f5:70:
bf:ba:24:b0:70:c3:6f:6f:e9:29:4d:62:69:e1:a0:21:c0:f1:
fd:49:7f:c4:0c:c0:b6:45:7f:bd:c5:43:19:77:25:85:30:7d:
ea:f5:83:1f:ac:27:b7:e6:49:c6:59:d6:73:bd:d4:ad:ea:7d:
22:0c:f7:c9:3c:50:cf:a4:9b:15:30:f0:ab:51:a6:28:a1:b3:
93:3d:5b:0d:17:5e:23:0a:95:4f:46:fa:bb:86:75:69:9a:0c:
39:74:84:86:68:ac:46:4b:f0:25:26:ee:ea:1d:24:39:10:f4:
eb:80:6a:f3:de:26:f6:0b:b6:18:a5:ad:fb:5f:61:7a:68:ff:
99:75:56:68:e3:c3:b3:57:9c:bf:a4:3e:f5:5f:99:38:81:f2:
fe:c1:6d:9e:bf:59:22:db:41:d6:ba:cd:48:f6:7c:ad:8e:a0:
5a:7e:1f:11:4a:7f:e1:20:d2:6b:4b:c9:f3:19:c6:78:ea:dc:
47:17:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:58 2026 by rpki-client