
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/d83a634c-cf8c-3798-9d00-adb74555e51e.roa
File: d83a634c-cf8c-3798-9d00-adb74555e51e.roa (raw, json)
Hash identifier: /Ey1QYcaBMGJHcXzSLahotG82sTrtP2PcZIqOIJXyk8=
Subject key identifier: E0:BB:72:1E:96:98:EB:E5:2F:B5:77:E1:4F:27:18:8A:7A:34:D3:5C
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584D290F4E5D60932DE3BB147E80
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/d83a634c-cf8c-3798-9d00-adb74555e51e.roa
Signing time: Sat 14 Mar 2026 01:00:31 +0000
ROA not before: Sat 14 Mar 2026 01:00:31 +0000
ROA not after: Fri 12 Jun 2026 01:00:31 +0000
asID: 16740
IP address blocks: 74.188.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:29:0f:4e:5d:60:93:2d:e3:bb:14:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Mar 14 01:00:31 2026 GMT
Not After : Jun 12 01:00:31 2026 GMT
Subject: CN=b91cea0c-85b5-4310-9107-013bb0fc5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:5a:8a:11:c8:5e:bb:23:bd:ef:7a:e7:af:
16:95:29:52:a2:62:69:50:62:a1:c8:43:b8:29:b6:
20:ed:aa:dc:0b:1a:ef:c9:ac:d5:f6:75:ca:09:69:
f6:6e:8f:ae:55:1c:0d:ef:db:f2:7e:d3:84:b9:55:
b8:7c:53:ad:af:3b:2a:4b:13:c7:18:76:ae:e4:a4:
18:93:6f:e5:7e:7f:62:e5:11:93:1b:c4:49:98:b9:
3c:07:8a:93:95:19:b8:b2:fa:1a:fe:32:89:9b:9f:
55:b8:81:6b:51:2e:4e:f6:e8:af:fd:ad:3d:18:7c:
28:2f:22:8c:1c:8e:43:5b:2e:a3:88:42:5e:41:02:
0d:1e:85:48:76:a2:5c:db:97:8d:05:7c:62:99:a2:
ec:1a:44:6e:49:1d:6d:4d:83:a8:b8:52:b4:18:59:
ef:7f:46:d2:6e:44:ff:6a:cb:dd:a3:8b:12:d5:cf:
1c:1e:77:f4:9a:db:47:fc:d2:b6:ee:9d:9e:a2:98:
a9:27:55:d9:92:7b:e4:1a:fe:8a:c3:08:b8:e7:f7:
ac:4c:86:88:9e:4e:8c:3e:d2:78:1e:73:64:97:8f:
5f:2d:e3:61:ce:5f:1c:08:25:61:43:db:da:72:86:
7a:64:35:1d:b9:a6:9e:0a:50:fb:9c:4a:1b:c5:ba:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:72:1E:96:98:EB:E5:2F:B5:77:E1:4F:27:18:8A:7A:34:D3:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/d83a634c-cf8c-3798-9d00-adb74555e51e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.188.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:b5:94:cb:78:9e:fe:e7:14:de:d5:58:7a:6b:b0:ff:fc:57:
56:4b:e5:df:d5:5a:fc:ac:a3:0d:f0:66:54:8b:cb:6f:32:26:
19:ce:10:55:26:3d:f8:45:b0:ae:4c:62:0d:cd:f3:f0:72:b2:
98:d1:8c:ad:b1:59:fe:80:ff:7d:3d:dd:72:f2:49:9b:a6:37:
99:26:6a:55:83:5c:62:cf:81:6e:51:cd:78:12:b3:82:e1:31:
f7:ce:11:a9:3a:22:a3:90:4d:7d:43:e4:64:1b:70:32:71:5e:
e3:be:10:53:bb:d4:59:ed:08:0d:23:fc:bd:da:fc:50:85:bb:
8c:de:c5:f2:f0:ce:59:1e:d7:f2:a9:5a:3e:45:ef:01:a6:9d:
58:54:ec:4f:3b:68:42:32:36:f7:ea:6e:92:71:06:d8:81:45:
90:a9:87:f9:94:ab:1a:ba:c3:89:d7:1d:a2:64:dd:74:02:77:
0c:98:b6:89:94:90:a6:e4:91:6b:91:f8:5e:92:6d:ee:5e:e6:
a8:d1:71:80:43:ce:82:b4:01:2d:52:c6:22:27:42:c5:49:be:
a1:1b:06:39:e2:ed:f8:04:0f:ed:a3:24:09:42:86:6b:30:6a:
ea:f8:29:6b:b6:ee:5d:86:5d:52:5d:13:fa:49:bd:dd:0a:18:
39:2e:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:11 2026 by rpki-client