
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/e184cf88-3810-3c49-bf5d-d5964990d5d1.roa
File: e184cf88-3810-3c49-bf5d-d5964990d5d1.roa (raw, json)
Hash identifier: YhNrZ17JTCtErBeAYRp2BTACC+D//LOh/L0K0a4JJ3w=
Subject key identifier: 11:9E:DB:DA:F3:CC:A2:4A:71:42:A3:52:F8:86:90:3B:22:96:45:41
Certificate issuer: /CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef
Certificate serial: 010D0C9F4328584FD3C134303A50584F6B9C14C0
Authority key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/e184cf88-3810-3c49-bf5d-d5964990d5d1.roa
Signing time: Fri 13 Nov 2026 14:00:14 +0000
ROA not before: Fri 13 Nov 2026 14:00:14 +0000
ROA not after: Thu 11 Feb 2027 14:00:14 +0000
asID: 396879
IP address blocks: 74.114.16.0/21 maxlen: 21
165.140.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:d3:c1:34:30:3a:50:58:4f:6b:9c:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef
Validity
Not Before: Nov 13 14:00:14 2026 GMT
Not After : Feb 11 14:00:14 2027 GMT
Subject: CN=334bf635-8be2-4974-9395-e778462c63c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:a4:c3:d0:fe:23:0f:b2:4e:ce:14:fa:86:
3d:56:af:c7:24:f7:24:00:1d:95:85:32:c5:4c:bb:
f5:26:7f:3c:0c:09:d3:27:a0:00:58:07:b9:9c:15:
fe:85:5f:33:74:38:bb:9b:64:19:95:59:2f:4f:2a:
e8:2e:7e:60:d6:be:e2:31:28:46:b6:c3:15:e6:0d:
7e:68:13:43:af:f1:aa:3a:d5:c2:9e:71:65:95:d8:
04:0f:2a:06:76:98:03:2e:3d:c2:c4:e8:04:08:ca:
6b:29:52:a9:0e:e6:32:a7:53:09:12:58:19:6a:db:
25:2e:f7:4d:53:12:6d:63:38:38:63:ed:9e:08:f7:
48:e2:0d:f7:eb:07:67:90:6f:76:63:a6:23:bb:5a:
96:dc:e2:a3:8f:b7:5e:35:30:4b:08:f4:48:bd:eb:
9c:e9:c7:91:96:ef:24:24:f7:b9:ec:f5:82:89:e3:
5a:4f:e1:55:68:b9:62:92:7a:6c:d2:be:e3:e1:1b:
cf:da:08:28:4f:40:b3:2a:2e:35:a3:f8:23:16:2b:
04:8e:49:d4:53:77:64:7d:0e:1a:0a:40:19:6a:39:
31:36:2c:fe:af:f0:85:64:f6:d4:21:b6:c9:f2:7c:
e4:0e:ce:eb:23:b3:af:55:a9:dd:e0:99:6f:4b:ac:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:DB:DA:F3:CC:A2:4A:71:42:A3:52:F8:86:90:3B:22:96:45:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/e184cf88-3810-3c49-bf5d-d5964990d5d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl
X509v3 Authority Key Identifier:
keyid:EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.16.0/21
165.140.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:d0:ee:ff:fd:1b:43:3b:7d:9f:89:f4:60:4d:ac:2c:7e:c9:
e7:b5:f4:da:88:42:e2:9e:b6:cd:f4:6b:25:ad:4b:f7:3e:e7:
d2:6a:d9:77:ed:60:06:2a:ae:8f:70:6e:90:ec:26:84:70:ae:
6b:3e:60:55:dc:fb:fe:51:86:25:e4:ca:ea:74:67:f9:ff:74:
09:8f:29:a5:ce:17:44:40:8e:e0:ec:8a:29:5a:1c:f8:98:43:
09:cf:a0:91:3d:ca:18:4b:1c:eb:46:32:36:e7:f4:3d:3a:c8:
d7:93:6d:34:2c:0e:88:e0:c4:c8:bc:c1:14:3f:4a:4a:42:df:
19:52:81:32:3d:00:a3:c4:f1:1e:79:0b:50:bd:0d:84:cd:5f:
0d:f5:60:68:ef:d2:9c:aa:4a:00:1c:a6:6b:1e:d8:34:24:81:
ed:33:f2:33:8d:6e:7a:b6:5a:99:96:81:3b:31:31:66:56:5d:
b4:62:b0:f9:6a:4d:e9:f3:71:83:2e:38:70:8e:56:c4:09:42:
a4:42:92:cc:9a:37:36:7c:b5:54:b5:8d:fd:c4:bf:31:bd:c2:
fb:cf:ad:d1:ce:d3:03:60:84:ce:5b:84:e1:ea:86:e1:98:ad:
74:cc:d9:44:65:f7:61:44:df:89:ee:31:af:35:e4:c7:2f:8c:
7d:79:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:46:51 2026 by rpki-client