
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/952bff14-1bc9-31fd-83a7-790d668fd797.roa
File: 952bff14-1bc9-31fd-83a7-790d668fd797.roa (raw, json)
Hash identifier: ErW1KVUQ/DLZbW2w90v3xhdL6+HQPs3J2xqxwaLvKTw=
Subject key identifier: D7:4B:79:B9:ED:82:58:71:33:59:31:4F:4E:F5:1E:87:F6:43:9B:5E
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584DCC6071C52B94492E347EF880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/952bff14-1bc9-31fd-83a7-790d668fd797.roa
Signing time: Mon 11 May 2026 13:00:31 +0000
ROA not before: Mon 11 May 2026 13:00:31 +0000
ROA not after: Sun 09 Aug 2026 13:00:31 +0000
asID: 834
IP address blocks: 74.2.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cc:60:71:c5:2b:94:49:2e:34:7e:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: May 11 13:00:31 2026 GMT
Not After : Aug 9 13:00:31 2026 GMT
Subject: CN=e590fa78-78d0-4c15-a57b-2fa9c8bef471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:25:20:c7:96:8c:e1:15:9d:59:3d:97:05:
a7:94:c8:e9:8b:79:a5:fb:7f:7b:2a:d4:44:78:79:
94:db:78:32:4e:a2:e8:f8:a3:4e:13:75:87:d1:81:
0b:bb:e7:9b:b2:e6:a1:e8:28:0c:24:bf:b9:0b:7d:
89:fc:3c:74:b8:fc:ee:23:89:eb:3a:7d:51:b9:26:
02:77:3b:90:e0:9e:e1:81:00:70:bf:34:5b:de:91:
eb:2c:35:d6:29:4e:59:7b:44:35:cc:7c:d5:10:23:
73:43:56:d4:5d:c3:05:97:12:f6:38:22:7f:83:dc:
3f:c6:16:a6:41:b4:c1:c4:d9:6b:be:5d:95:eb:f3:
4e:db:aa:07:d9:c9:67:93:72:1d:1a:8e:4b:56:8a:
f1:df:94:1b:01:1c:bb:91:fd:0d:0b:08:62:04:b6:
94:e4:cd:96:a2:3d:93:af:09:e1:a0:c7:dd:82:9e:
8c:d5:33:b7:bf:b6:e0:9f:ed:23:66:43:75:bf:c9:
0e:30:09:32:5e:79:7c:43:cd:a3:0d:3e:45:fc:c8:
fe:0d:08:b8:94:cf:43:91:e7:62:b3:a3:41:99:2f:
ab:52:5b:25:3b:18:9e:4c:f1:4b:85:c8:b0:08:85:
59:47:16:25:5c:95:6e:13:f2:5c:74:58:9d:ae:5b:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:79:B9:ED:82:58:71:33:59:31:4F:4E:F5:1E:87:F6:43:9B:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/952bff14-1bc9-31fd-83a7-790d668fd797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.2.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:dc:d6:4f:e8:8e:96:e6:61:8c:7a:c1:a3:69:71:e5:fd:51:
7f:b2:d4:c5:c6:83:22:96:4b:7e:b3:19:c4:27:99:fb:51:6f:
b6:a0:5c:9e:8f:70:2b:a0:dc:11:7f:56:98:85:33:2b:1a:f2:
80:9e:c0:cc:ad:b2:0a:89:ab:82:37:b4:2b:6c:17:01:ec:60:
f8:4e:c1:93:e1:d0:eb:1c:09:de:e3:67:6a:db:99:98:4f:01:
eb:a4:07:64:65:c4:ba:32:83:e6:29:10:d8:18:ad:8c:18:67:
57:c9:67:90:0c:11:50:c2:8b:0d:27:56:fc:48:3e:66:ad:5e:
5c:da:15:ba:5b:89:2e:e0:95:df:0b:cb:91:6b:bd:b7:73:27:
57:9a:85:75:b0:45:29:e8:2c:2e:ca:b9:06:01:a4:ba:fe:40:
1d:6c:67:af:9a:f3:93:60:fc:95:11:3c:68:08:6e:d5:6c:13:
b9:a5:95:2e:c9:97:7c:01:be:25:51:ec:bd:a5:1f:2e:85:d8:
d2:44:2c:14:e4:51:38:eb:39:53:50:0d:8c:b1:6e:21:6d:be:
34:f1:2d:01:37:01:bc:cb:11:cd:7f:dc:f2:bd:07:ae:da:82:
44:ea:7e:c6:5a:f9:be:ba:68:b5:5a:5a:f5:28:72:3d:3f:ca:
8a:d2:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:21:28 2026 by rpki-client