
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
File: 9ecd159a-1f96-32de-b9d1-11893c413104.roa (raw, json)
Hash identifier: ZgQS1RceMyCOZARj5szG4r+eljxrquFY2ucGNlb38wk=
Subject key identifier: E7:24:63:71:FB:71:78:04:5E:2C:1B:0A:1D:A7:7C:F6:81:07:A3:32
Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial: 010D0C9F4328584D386A49B0068602EA0FE52040
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 397606
IP address blocks: 207.174.68.0/22 maxlen: 24
216.152.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:49:b0:06:86:02:ea:0f:e5:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=9c817bca-6519-4da7-8b9d-2205e7686a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:91:8f:7d:e2:7f:55:b6:d0:e7:8a:1a:d7:
d5:09:bf:b9:39:eb:d6:56:76:31:5d:a8:82:bc:99:
c1:df:57:ea:7d:50:0d:85:a6:08:d7:4b:12:5b:12:
1b:aa:a8:2e:19:f2:28:e9:e4:60:f5:cc:f5:66:9c:
e6:20:f8:9a:2f:5a:84:60:a2:37:d5:b7:28:fa:bd:
c0:89:87:62:8e:0f:68:ab:f2:b1:43:d1:53:02:42:
ee:21:7e:83:a9:7f:d5:ec:c5:d7:e6:9b:4a:99:0a:
aa:3c:a7:04:99:1d:bc:0a:00:f8:0e:ff:36:3c:b5:
66:d4:2b:57:0b:3e:53:fe:d2:3c:19:66:80:79:c4:
aa:87:08:48:bb:f4:22:dd:2a:d6:25:4f:1b:94:30:
2e:c8:ac:d8:05:41:7a:f6:b4:23:87:e9:6a:30:75:
97:60:0a:7f:45:55:8f:5a:37:3c:47:36:62:5c:ef:
c4:0c:9a:a7:e6:3b:2a:55:c5:8d:be:65:20:30:b4:
00:35:3d:ee:14:af:56:5f:2d:e6:cc:10:2e:bb:d3:
70:41:61:40:67:f4:a4:e3:fc:37:bc:cf:55:1d:85:
d5:04:e7:d4:53:ad:2d:ce:bd:38:03:8f:d4:41:cd:
2e:d1:1e:4d:bb:64:0d:29:71:f1:72:60:37:c4:70:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:63:71:FB:71:78:04:5E:2C:1B:0A:1D:A7:7C:F6:81:07:A3:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
X509v3 Authority Key Identifier:
keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.68.0/22
216.152.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:70:d0:c0:e6:c0:62:e6:13:e8:46:d1:3b:39:82:7a:0e:42:
b3:b2:5a:00:16:a6:e5:20:91:ec:de:38:64:79:99:43:63:6f:
62:f8:a3:51:be:df:54:e2:d1:52:97:6a:c0:a4:e9:b9:cf:30:
bb:0e:0b:a5:26:32:eb:6b:fa:99:58:67:45:36:02:45:3b:0a:
91:8e:ec:79:49:e7:b8:c9:a2:ec:9f:c0:4a:ca:0e:06:dc:27:
eb:0c:39:5f:e9:64:a6:8d:dd:81:61:70:7a:fc:fd:13:b1:dc:
84:58:24:fc:a2:ec:73:59:62:49:40:83:00:75:20:c1:c2:cc:
1b:d5:5c:0f:e2:38:fd:a2:10:73:4a:05:9a:aa:fa:7c:e1:06:
cc:49:e1:56:12:56:4d:0c:79:aa:e7:2c:95:48:3e:43:4a:a0:
b3:ef:4d:de:d0:e2:29:f4:ea:14:4b:c7:f0:03:d1:7b:be:1a:
b8:b7:66:bb:54:63:f9:f3:46:72:f6:98:06:2b:18:78:37:c3:
f9:b5:63:45:b8:62:cc:00:5f:cc:e0:dc:81:6e:3d:94:17:60:
74:df:44:d1:54:89:37:7d:77:5d:51:2f:ad:49:79:57:ff:e0:
5c:15:2b:6a:c0:53:41:c2:98:5e:f4:0c:bb:bf:8c:b9:ed:58:
1a:d3:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:43 2026 by rpki-client