
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93/d3b6f74d-9d6a-3bbe-ba25-feb7e39a2789.roa
File: d3b6f74d-9d6a-3bbe-ba25-feb7e39a2789.roa (raw, json)
Hash identifier: mCacwDtnLJlpDf0K4R4+zRgHL1NSS+mztgiMtVPiGqE=
Subject key identifier: 21:51:DF:DE:DC:16:14:41:E5:04:81:C8:C9:41:BF:80:32:83:9D:14
Certificate issuer: /CN=57393281-6ce8-4c78-bd80-ef1b44d00b93
Certificate serial: 010D0C9F4328584F498795A35AE5701AE76B4500
Authority key identifier: AF:14:FD:F2:D1:5C:B6:35:9E:02:B4:98:A7:51:38:48:91:5B:B4:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93/d3b6f74d-9d6a-3bbe-ba25-feb7e39a2789.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13795
IP address blocks: 74.123.208.0/21 maxlen: 24
208.78.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93/57393281-6ce8-4c78-bd80-ef1b44d00b93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93/57393281-6ce8-4c78-bd80-ef1b44d00b93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:95:a3:5a:e5:70:1a:e7:6b:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57393281-6ce8-4c78-bd80-ef1b44d00b93
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1aa2b39e-8f39-4a4a-ad8f-e473ad58c166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:68:6e:3b:aa:e3:0b:04:79:42:6e:a3:df:
b9:1c:2f:dc:f7:f5:3e:4b:c6:5c:67:cc:fe:e8:c3:
73:c6:24:51:45:11:e0:05:df:31:d4:c2:02:b0:f6:
d0:47:1f:c8:9f:19:d0:cf:40:04:e5:26:7d:91:1e:
0a:f2:fe:59:99:04:c0:13:12:af:ea:3b:c3:bc:21:
31:6d:c0:b2:1c:dc:64:d9:4e:b4:6c:5a:fc:b2:54:
27:15:c3:f6:d6:c9:7f:cb:6d:33:1c:ec:9d:5a:58:
d6:ee:8f:f2:c9:6d:08:4a:a6:45:12:81:0a:e7:e4:
29:23:5a:d6:99:64:50:21:0d:65:ea:2b:6e:10:ef:
c8:de:de:39:46:3c:41:4b:45:a9:b7:e8:98:d2:5e:
28:15:08:7f:99:16:18:bc:e7:70:bc:d0:33:14:c3:
da:e4:e3:50:f4:cc:69:2b:f0:d9:60:ab:08:80:27:
8d:c2:84:56:bf:b1:d8:28:56:52:ab:34:cd:64:08:
8d:3a:50:bc:1a:02:9f:93:c0:70:b3:f8:c2:5b:c2:
63:a3:08:7d:af:13:87:5a:f3:32:3a:2f:8d:67:8e:
5e:cd:57:10:d5:88:32:e6:b0:71:a9:ed:c4:b7:ab:
16:94:75:c1:a0:0e:22:1a:15:92:39:d0:e2:7f:6e:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:DF:DE:DC:16:14:41:E5:04:81:C8:C9:41:BF:80:32:83:9D:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93/d3b6f74d-9d6a-3bbe-ba25-feb7e39a2789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93/57393281-6ce8-4c78-bd80-ef1b44d00b93.crl
X509v3 Authority Key Identifier:
keyid:AF:14:FD:F2:D1:5C:B6:35:9E:02:B4:98:A7:51:38:48:91:5B:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/57393281-6ce8-4c78-bd80-ef1b44d00b93.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.208.0/21
208.78.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:62:da:44:95:7e:5d:91:21:0c:03:63:6c:9d:9a:00:8d:0e:
f5:85:77:ac:55:3a:f9:bd:01:b2:ee:c4:33:a3:b4:d4:49:59:
20:b0:83:bb:25:fa:3d:5c:dc:3d:ea:27:e2:70:76:df:9e:35:
22:6b:29:2d:0a:6b:03:1a:8d:53:e6:77:5b:fc:e9:1f:00:a1:
1f:0a:5e:88:7e:94:10:9c:a8:c3:06:45:a1:78:37:96:c8:cb:
02:5e:7b:27:39:c7:14:15:91:fd:e3:6d:cc:aa:6e:f0:aa:cf:
a9:51:23:5a:52:43:19:49:ea:85:cb:43:c4:0d:f9:2a:38:88:
ea:7c:87:bc:64:2e:da:00:51:5d:1c:45:98:4d:11:ac:6c:44:
eb:97:13:96:92:9a:de:66:2a:77:c0:21:28:ae:fc:7e:cd:80:
0d:9d:39:89:9b:08:8a:b2:2c:c4:86:78:5a:92:98:59:08:a7:
54:6e:75:10:36:c9:92:e0:a1:fd:68:8a:f3:8a:24:8c:c0:6d:
e4:67:7e:28:0d:1c:21:ab:d6:42:bf:f6:d4:9a:a1:30:2a:05:
a0:94:b7:88:85:fa:7b:5d:0e:66:f6:49:55:bd:d8:26:78:b2:
7b:ac:3a:de:3f:fc:58:ca:f3:db:bf:29:e9:4c:f1:65:af:cc:
4a:e1:8d:7c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jh5WjWuVwGudrRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczOTMyODEtNmNlOC00Yzc4LWJkODAtZWYxYjQ0ZDAw
YjkzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWFhMmIzOWUtOGYzOS00YTRhLWFkOGYtZTQ3M2FkNThjMTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDtobjuq4wsEeUJuo9+5HC/c9/U+S8ZcZ8z+
6MNzxiRRRRHgBd8x1MICsPbQRx/InxnQz0AE5SZ9kR4K8v5ZmQTAExKv6jvDvCEx
bcCyHNxk2U60bFr8slQnFcP21sl/y20zHOydWljW7o/yyW0ISqZFEoEK5+QpI1rW
mWRQIQ1l6ituEO/I3t45RjxBS0Wpt+iY0l4oFQh/mRYYvOdwvNAzFMPa5ONQ9Mxp
K/DZYKsIgCeNwoRWv7HYKFZSqzTNZAiNOlC8GgKfk8Bws/jCW8Jjowh9rxOHWvMy
Oi+NZ45ezVcQ1Ygy5rBxqe3Et6sWlHXBoA4iGhWSOdDif24qCQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCFR397cFhRB5QSByMlBv4Ayg50UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzM5
MzI4MS02Y2U4LTRjNzgtYmQ4MC1lZjFiNDRkMDBiOTMvZDNiNmY3NGQtOWQ2YS0z
YmJlLWJhMjUtZmViN2UzOWEyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTczOTMyODEtNmNlOC00Yzc4LWJk
ODAtZWYxYjQ0ZDAwYjkzLzU3MzkzMjgxLTZjZTgtNGM3OC1iZDgwLWVmMWI0NGQw
MGI5My5jcmwwHwYDVR0jBBgwFoAUrxT98tFctjWeArSYp1E4SJFbtPswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi81NzM5MzI4MS02Y2U4LTRjNzgtYmQ4MC1lZjFi
NDRkMDBiOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSnvQAwQD
0E7IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHFi2kSVfl2RIQwDY2ydmgCNDvWFd6xVOvm9AbLuxDOjtNRJ
WSCwg7sl+j1c3D3qJ+Jwdt+eNSJrKS0KawMajVPmd1v86R8AoR8KXoh+lBCcqMMG
RaF4N5bIywJeeyc5xxQVkf3jbcyqbvCqz6lRI1pSQxlJ6oXLQ8QN+So4iOp8h7xk
LtoAUV0cRZhNEaxsROuXE5aSmt5mKnfAISiu/H7NgA2dOYmbCIqyLMSGeFqSmFkI
p1RudRA2yZLgof1oivOKJIzAbeRnfigNHCGr1kK/9tSaoTAqBaCUt4iF+ntdDmb2
SVW92CZ4snusOt4//FjK89u/KelM8WWvzErhjXw=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:43:38 2026 by rpki-client