
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
File: de9a14da-eb21-3df9-88a3-a094282ec012.roa (raw, json)
Hash identifier: 2jZrF2z8FxdNLoYmMCCDk6LmHZSJ7N8XosWxtEoy7ls=
Subject key identifier: 81:E6:70:C9:00:25:AE:15:E6:1D:9E:72:15:34:77:8A:E9:28:A6:30
Certificate issuer: /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Certificate serial: 010D0C9F4328584FD0F695C220A3405E08192D00
Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
Signing time: Thu 12 Nov 2026 14:00:13 +0000
ROA not before: Thu 12 Nov 2026 14:00:13 +0000
ROA not after: Wed 10 Feb 2027 14:00:13 +0000
asID: 19318
IP address blocks: 74.50.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:d0:f6:95:c2:20:a3:40:5e:08:19:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Validity
Not Before: Nov 12 14:00:13 2026 GMT
Not After : Feb 10 14:00:13 2027 GMT
Subject: CN=e48abf7a-0d49-43dc-ba34-896d37e0b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:3c:57:be:00:2b:fb:d3:9b:a6:05:10:59:
60:5e:37:11:c1:bb:13:a5:75:79:e1:10:64:ed:d1:
c6:d1:1d:fa:e5:99:99:4e:38:86:59:6c:7a:72:ec:
44:c1:f9:ca:fa:7a:aa:23:18:d9:55:e6:3f:35:47:
1b:2f:2d:29:9e:6c:59:bf:d8:bf:2a:5e:c2:5d:e2:
b1:44:a4:e4:cd:8e:bd:3b:95:95:d6:80:41:ce:34:
26:3c:73:45:c2:a4:3f:38:e7:8e:b2:1b:c2:97:bf:
32:ea:2e:8e:78:f6:70:00:7f:f6:7c:24:fc:6d:6c:
a4:fc:2e:95:d3:ba:b2:72:4a:73:d5:af:cd:88:f0:
e9:41:c6:85:bb:61:68:c2:63:86:43:cb:20:e7:fe:
da:cb:65:55:54:77:68:fd:04:dd:cb:53:96:61:71:
66:bc:f0:08:bf:10:23:42:18:66:da:16:f0:49:f0:
62:ad:e3:65:a0:7c:21:c3:16:f5:d7:85:27:81:1d:
3e:e8:ea:63:bf:f1:a5:d9:1a:79:f8:40:df:cf:44:
19:cf:79:a9:0b:ba:a5:32:8c:95:a1:a7:c1:51:de:
ba:aa:c6:5e:f2:29:26:6a:7d:80:16:7d:fd:74:dc:
6e:43:5b:b8:5d:a6:91:b1:00:57:c3:67:1f:c9:e2:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:70:C9:00:25:AE:15:E6:1D:9E:72:15:34:77:8A:E9:28:A6:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
X509v3 Authority Key Identifier:
keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
sbgp-ipAddrBlock: critical
IPv4:
74.50.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:f9:59:f5:10:64:be:df:46:16:23:8a:52:9b:fb:fb:70:cb:
41:2e:8e:af:cf:fc:5c:89:dc:28:aa:8e:3e:75:48:99:47:c6:
f9:74:a9:84:96:e0:8b:ec:f5:c6:39:8a:7f:11:32:5a:f2:58:
c5:ea:5d:8a:55:17:e4:54:2d:eb:c7:4d:9e:ac:56:95:ef:28:
1c:e4:4d:bf:7a:fa:ed:3c:2a:95:ad:57:a0:c8:95:55:4f:71:
44:ff:0c:32:8f:c6:32:dd:ef:bf:7e:36:c8:05:78:4b:8b:33:
cf:e3:36:fd:68:06:ec:55:fe:0c:0f:9d:b5:67:62:e8:16:bf:
1e:e6:67:eb:d4:fa:8d:2f:13:c3:aa:1a:63:fd:ec:5d:4d:cf:
8d:8e:0a:8c:4f:03:04:e6:f1:27:98:47:3d:31:1c:a1:e5:88:
30:54:34:ea:be:86:d6:ad:76:65:f5:2b:86:59:6e:2a:e9:aa:
49:e0:42:bf:3c:f6:53:78:24:68:a7:1a:cf:6b:5a:f0:19:98:
6d:76:e3:77:6d:99:d2:dc:17:21:0a:06:4f:b8:24:0c:08:a2:
bd:8e:aa:e8:38:62:9c:ad:1b:c3:be:b3:ce:a7:98:04:81:0f:
7f:d6:96:c4:95:29:96:a0:c5:a2:8c:64:87:6a:9c:b8:9a:29:
ff:45:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:13:50 2026 by rpki-client