
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa
File: d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa (raw, json)
Hash identifier: XxxqOVDT687LptHpBLclZG8bF5LinOIBcWItJ4mSSVo=
Subject key identifier: 1C:97:12:DA:3D:EA:E6:77:AC:9D:2F:0D:4B:A3:98:DB:DF:B5:4E:CA
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584D38E3B4A2991C1B9285AA1020
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa
Signing time: Thu 19 Mar 2026 17:05:38 +0000
ROA not before: Thu 19 Mar 2026 17:05:38 +0000
ROA not after: Wed 17 Jun 2026 17:05:38 +0000
asID: 13335
IP address blocks: 74.1.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:e3:b4:a2:99:1c:1b:92:85:aa:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Mar 19 17:05:38 2026 GMT
Not After : Jun 17 17:05:38 2026 GMT
Subject: CN=7745f095-19b3-4222-91f8-7ab22e3af30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:f2:e2:0b:e8:fa:aa:d1:e1:97:11:6f:ca:
db:ed:8f:cc:eb:51:45:d9:e8:c0:3e:73:5d:c8:44:
a4:22:2c:eb:56:b0:52:b7:5d:1c:bc:f1:8c:e2:5c:
c2:09:29:6d:0b:02:53:72:8b:6f:bb:4c:e8:9c:28:
88:4b:18:ba:ad:91:5c:27:f6:4f:64:0a:d1:41:ef:
04:a5:ef:66:a9:e9:fa:2f:e2:b4:f9:69:99:d6:62:
b6:e0:12:dc:6a:f5:bb:2f:5d:88:68:30:06:1f:c6:
87:07:3d:a9:c5:9d:26:9b:84:39:8b:a0:d1:e2:a3:
e7:52:8a:cc:8f:3e:75:31:48:6b:d1:15:01:5b:a9:
60:b4:f5:fc:49:f6:24:c6:bd:0b:a4:94:9c:7b:70:
9c:6b:98:e6:9b:9e:99:2e:5a:2d:0f:bf:9f:81:9a:
91:78:72:59:6d:af:e1:a4:5c:9e:c0:98:ba:43:44:
7f:7f:26:a5:2a:4c:87:31:56:a4:74:7c:5a:48:53:
39:eb:67:f2:f9:67:8c:9b:7e:50:5d:65:6d:14:5a:
ee:62:6d:a2:56:c1:60:7b:a0:21:82:82:cb:6c:03:
68:2c:06:01:6a:7a:34:85:c4:56:de:a7:16:25:27:
1f:e1:f8:6a:c8:eb:7f:4c:46:77:c1:90:b6:8a:43:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:12:DA:3D:EA:E6:77:AC:9D:2F:0D:4B:A3:98:DB:DF:B5:4E:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.1.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:b2:d2:9d:79:76:63:bc:e3:dc:1a:f7:96:57:f5:07:04:85:
f9:53:19:24:95:39:94:9e:29:df:bb:a5:70:e6:5f:11:c8:04:
5d:bd:ff:50:f8:00:a8:82:ef:3c:e6:5c:6d:14:f7:8a:c3:78:
13:07:25:d6:20:43:02:5a:4e:60:a7:1d:90:eb:9c:5c:94:3b:
33:e1:3f:8b:c8:31:a4:5c:bb:5f:f3:0b:28:8c:2f:54:4a:5e:
d9:4c:0b:d1:56:90:9e:1d:2f:f9:f5:04:9d:36:ab:52:6f:16:
a0:93:ce:eb:11:10:06:16:dc:b4:06:d5:24:31:47:41:fc:d1:
18:20:90:8b:a3:2b:dc:ba:fd:40:8a:3c:2b:e6:53:23:f2:c1:
93:71:41:07:58:4b:5c:0f:4d:31:e6:78:f6:8d:26:12:dd:0b:
df:06:8c:d6:88:87:d2:70:aa:ab:cd:e7:86:b9:87:6a:46:41:
4c:89:84:95:ee:03:b0:81:7f:bf:36:a2:54:b2:fd:8b:bd:b1:
58:13:76:29:56:ab:ec:8a:e6:13:f5:97:da:86:e2:b3:11:83:
63:74:99:af:92:c7:c6:cb:5c:4e:e8:94:ff:6e:aa:20:ad:96:
38:44:d2:22:d5:5c:d9:01:2e:47:b6:e0:a6:52:8e:28:91:8c:
ea:0e:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:03 2026 by rpki-client