
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/0ceb1403-3b7c-379d-b030-7fd9c941239b.roa
File: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (raw, json)
Hash identifier: vBx9wmMjylu+zQlPJYUtm3v2WgK5uqrrmOZtrrGl7b0=
Subject key identifier: B2:5D:05:C0:A5:13:4C:91:3C:FE:91:A7:A8:12:BC:6C:04:56:55:00
Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd
Certificate serial: 010D0C9F4328584F067232BFBF1DAD20B721B328
Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/0ceb1403-3b7c-379d-b030-7fd9c941239b.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 14618
IP address blocks: 74.200.119.0/24 maxlen: 24
74.200.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:32:bf:bf:1d:ad:20:b7:21:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=4c715b18-66f3-4afb-ae97-95e7c4894d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:b0:d9:9d:62:07:60:b9:96:17:c3:a2:b1:
35:df:1d:e4:6f:d8:80:78:1d:16:93:d3:b0:59:b0:
00:08:3e:d6:0a:4c:28:f9:ee:fb:98:89:d4:a9:22:
02:fa:c7:7d:9d:70:1d:5d:5c:4d:29:e3:18:d0:50:
04:88:c7:0d:fd:4b:52:b3:57:aa:8b:9c:1b:e5:48:
e9:ee:86:65:b3:b8:14:2b:c5:90:cb:15:c6:50:5c:
9d:30:34:ce:f2:6c:ef:2c:4c:64:c4:11:f4:af:bd:
46:3b:b5:18:1d:3f:77:a4:09:00:a8:f1:b8:36:6e:
05:d2:5b:34:10:be:9b:e2:f8:42:7a:c3:a1:de:ca:
03:9c:3e:37:6d:52:fa:e1:85:4c:f7:76:9d:81:44:
f5:f4:bc:7e:1f:a5:c2:fd:8a:0d:d9:a6:ef:ed:9c:
34:3c:eb:10:39:8a:73:d6:21:f9:ad:33:1c:5f:b9:
62:0d:fd:6b:0a:44:0d:9a:53:30:81:7c:86:11:d6:
8b:b8:df:e9:68:8d:c9:bb:c4:f7:9e:e5:0f:a4:7a:
38:6d:89:20:9e:cc:a8:b5:32:a1:a6:6a:38:d0:40:
d7:1c:89:a1:ec:ea:1a:66:e5:9c:64:22:9a:2b:0d:
c1:bf:47:3b:b7:75:e5:8f:cf:f4:a6:9c:fe:3f:be:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:05:C0:A5:13:4C:91:3C:FE:91:A7:A8:12:BC:6C:04:56:55:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/0ceb1403-3b7c-379d-b030-7fd9c941239b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl
X509v3 Authority Key Identifier:
keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer
sbgp-ipAddrBlock: critical
IPv4:
74.200.119.0-74.200.120.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:d7:5e:a2:51:91:0e:41:01:46:23:52:6d:45:a8:bb:9a:b0:
cb:e0:83:b7:28:78:2e:dd:df:13:5a:42:e6:76:fa:e4:83:37:
5c:92:db:2b:09:54:50:54:47:67:82:29:c2:f6:f3:9c:20:9a:
f7:b4:4e:3a:ba:41:c5:50:24:fe:49:b0:fc:39:43:a8:3d:cc:
09:7a:b0:e9:00:ac:a6:4c:7a:53:8c:63:3e:5c:f6:e3:55:73:
78:42:5d:0f:66:4d:24:1f:e2:a3:13:f7:46:fd:4a:04:34:a8:
ca:ef:45:2a:8a:7b:14:e1:22:b7:6f:e1:c8:36:1f:14:10:74:
dd:58:17:31:89:12:47:4b:28:36:6a:c0:c3:8a:22:c1:1a:b0:
f1:50:63:05:20:fe:57:b4:d2:8b:09:2e:da:24:a1:06:c3:61:
80:14:dc:47:44:36:14:29:71:9c:3a:57:6b:e6:d6:7d:5a:ed:
42:c4:00:03:76:45:b4:da:98:6d:55:ad:40:e3:e8:77:6e:65:
a8:58:18:e3:14:19:5d:5b:28:43:4d:57:09:90:be:62:cc:cd:
3f:38:67:33:e3:6f:f0:1f:35:1c:9c:db:2c:a8:6a:a1:4d:00:
28:94:d4:1c:ff:08:64:cf:88:7d:0b:31:c9:f5:a8:73:e7:c2:
8c:9b:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:14 2026 by rpki-client