
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa
File: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (raw, json)
Hash identifier: DXLdC0zYuPME1ZIGn6/3AeqFSjZrWV9ivcgwP8fcu5E=
Subject key identifier: A2:90:52:89:FF:6F:DF:C4:50:F1:93:51:C4:81:FB:77:E9:4E:7C:7E
Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a
Certificate serial: 010D0C9F4328584E7204D23F8A64F3640D5C03F3
Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 55270
IP address blocks: 204.154.142.0/23 maxlen: 23
2602:ff43::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:d2:3f:8a:64:f3:64:0d:5c:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=c48ec400-cd64-4f0c-a49e-c11206cbe12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:9f:bf:74:51:68:91:88:d4:5a:c3:e7:d7:
e4:b4:be:7e:b8:85:93:cf:f8:70:fe:6e:2b:d3:b5:
22:dc:bf:cd:0c:31:e2:ef:d5:72:3b:07:ad:61:db:
8b:a1:63:54:92:a0:10:2b:fc:c0:d0:b2:e9:46:81:
8a:52:2d:93:56:1b:73:23:cc:61:cb:54:df:1a:80:
33:23:33:dc:4b:b7:aa:27:d2:77:de:91:68:cd:98:
43:73:60:a9:b7:97:14:d1:d8:ee:08:d7:5e:28:1b:
91:6e:77:4d:0e:8b:7b:fe:5d:79:9f:0e:4d:76:21:
ef:b3:d9:0d:46:04:c6:5d:0b:7b:e6:37:33:be:1d:
ca:a7:88:d3:5c:45:50:f5:7d:1b:72:aa:f9:e6:a0:
0e:d1:3e:02:25:7b:b6:70:89:d7:23:72:98:81:c1:
43:0f:a3:1f:01:17:be:dc:9e:2e:d0:4e:b4:5c:77:
49:b0:5b:6a:fb:35:21:3c:d4:ef:36:3d:23:a8:4e:
80:32:a5:4e:f9:7a:7b:c7:cc:1a:b2:97:fb:1a:07:
6d:8a:49:a7:3c:c2:12:cf:65:6d:8f:f8:1f:da:e5:
96:3d:4c:83:fa:0c:a4:0a:97:f4:a5:23:cf:71:3c:
f6:1d:f7:19:26:56:e3:ca:33:6f:c7:e1:ad:0e:11:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:52:89:FF:6F:DF:C4:50:F1:93:51:C4:81:FB:77:E9:4E:7C:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl
X509v3 Authority Key Identifier:
keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.154.142.0/23
IPv6:
2602:ff43::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:9c:2d:3c:53:fa:07:05:15:9f:21:56:7d:35:17:65:3d:41:
10:33:c4:c1:01:39:31:db:72:87:31:54:bd:41:2e:41:03:99:
a2:25:d4:39:de:98:ac:be:c6:d6:fa:93:8b:7b:39:7e:01:89:
a8:b0:03:ea:e0:61:8f:1b:64:a8:71:2e:6a:3d:fd:bb:1b:bc:
89:0e:26:79:38:66:39:c8:f6:96:59:5e:08:ae:b1:35:7b:ac:
29:a8:bd:b7:67:c7:58:ea:13:c4:4e:68:46:1a:a9:2e:7a:c8:
35:a4:55:69:d7:35:82:d0:c9:ee:d4:4f:6a:30:66:ed:40:86:
95:4c:1f:5c:30:24:6b:f1:58:42:3a:76:29:0a:5c:0c:31:5d:
ad:10:69:94:8d:40:b2:e9:e5:a0:69:94:a1:6b:29:78:ac:f0:
95:7e:6d:25:bc:9b:22:65:24:36:c6:02:d1:8a:73:1e:d0:4e:
d3:39:be:bb:c3:23:1b:3d:38:6d:a3:37:ca:c0:14:6b:8e:8e:
05:8e:f1:bf:81:a7:4f:a6:cf:81:c6:9c:68:58:21:af:3f:48:
4f:fe:dd:08:7f:31:02:70:d0:9c:31:2b:da:52:fe:06:21:62:
86:7e:38:75:31:74:01:ad:9e:97:e6:c1:5f:e8:26:9f:ed:7c:
b2:a1:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:54 2026 by rpki-client