
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4ba6e08-b26f-367a-af19-cf4d3f7ca0bc.roa
File: c4ba6e08-b26f-367a-af19-cf4d3f7ca0bc.roa (raw, json)
Hash identifier: aS+b7OF9fdpl6TptprysBEEb/aqcTZZqEoCREy4rhes=
Subject key identifier: 61:67:69:EC:7F:80:85:C7:B9:C1:E3:B7:96:91:B8:75:AF:35:48:11
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F2D87B3335A77BB16A589E200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4ba6e08-b26f-367a-af19-cf4d3f7ca0bc.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 5650
IP address blocks: 74.2.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:b3:33:5a:77:bb:16:a5:89:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=e1c4aa2d-77e9-4a74-99f3-8a8de9b4aa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:26:04:8d:07:f4:bb:71:59:4c:22:21:97:
4e:33:ff:08:b2:60:26:49:a4:41:a8:08:15:6c:f7:
21:14:83:16:e4:ea:0e:ad:ea:ea:97:07:d4:e7:ea:
c5:47:c4:f1:47:84:35:b6:bf:6b:7d:82:10:e4:f9:
a3:0c:03:71:c9:77:b1:ee:d7:d1:a5:8a:17:c3:bc:
a0:9e:6c:15:b2:c0:e6:07:77:01:c2:16:33:9f:81:
a9:d2:5f:ff:9e:20:f2:80:d3:25:4d:a4:c6:03:10:
ce:ab:41:2e:6c:98:ac:41:47:5a:fb:08:ee:c1:9c:
e0:cf:ca:7f:0c:db:4f:d6:0b:02:84:71:50:7e:2d:
94:b0:f3:27:fb:85:82:13:f8:d7:f0:8f:8b:e7:79:
ca:70:2f:28:c5:fc:6e:6d:42:84:6f:a4:27:4a:f8:
c6:14:9f:e6:28:cd:a1:5e:94:fa:33:64:e4:42:12:
89:fe:80:c7:d5:13:92:2a:8f:01:98:27:66:cd:59:
7a:10:e5:5d:60:a1:b8:8e:68:ae:05:49:29:14:e8:
b1:a4:b2:98:2b:44:ad:ae:ef:33:df:bf:e8:42:9e:
d3:5a:32:32:2a:6c:4f:30:8c:34:f3:87:58:59:7a:
75:f7:1c:43:21:77:4c:42:c7:e1:d3:4e:e6:4a:e7:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:69:EC:7F:80:85:C7:B9:C1:E3:B7:96:91:B8:75:AF:35:48:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4ba6e08-b26f-367a-af19-cf4d3f7ca0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.2.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:ba:7c:75:54:bb:0a:2b:0a:4a:03:d5:ea:ee:8c:a2:c3:1e:
f2:bb:c9:7a:16:e8:85:a7:18:a3:94:5b:a4:18:f6:e5:d7:34:
c4:68:ef:e5:c0:31:98:d1:78:ed:94:4a:16:11:01:1b:92:a6:
f6:49:69:41:0d:7d:78:49:dd:d0:e9:ec:13:e8:82:27:cd:2a:
30:58:01:bf:f8:df:6d:12:37:7c:10:a2:11:7d:46:61:97:21:
1a:ce:1c:b6:5f:26:ae:dc:ca:cc:96:75:bc:3a:15:11:49:42:
f3:b4:b7:da:9c:3e:b7:a3:31:d1:62:19:62:ea:9f:34:cd:f3:
1a:93:dd:ed:6c:d6:25:41:2e:84:b3:d8:b6:e1:d6:ea:4b:1a:
01:8c:12:45:c5:03:a3:06:35:e8:3d:a5:25:1e:4c:02:bc:88:
47:ed:c1:f4:1f:5f:fa:9a:7e:9e:6b:18:90:12:03:88:51:f5:
62:5a:92:3f:c5:92:f6:1c:fe:1e:70:93:8a:71:9a:0a:47:a7:
ac:03:80:7d:94:a3:21:f4:fe:d2:ea:78:52:71:ab:37:81:47:
9e:46:81:5f:26:84:93:ff:b2:bd:f8:eb:e8:88:a3:73:51:a3:
67:fd:2f:43:96:64:3d:19:97:51:6e:aa:3a:45:7b:02:e8:e9:
4b:0a:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:47:50 2026 by rpki-client