
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa
File: f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa (raw, json)
Hash identifier: 10n2fO5rkYjl0nTrHzHMcQU8W/HsqULlR/gVBgGkGls=
Subject key identifier: 75:06:CE:08:44:C1:7D:EB:3B:C7:94:C0:73:80:DE:CA:0F:13:8A:7B
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584E7FFA33FAF81E67A4AA39B780
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa
Signing time: Tue 14 Jul 2026 21:00:12 +0000
ROA not before: Tue 14 Jul 2026 21:00:12 +0000
ROA not after: Mon 12 Oct 2026 21:00:12 +0000
asID: 21949
IP address blocks: 74.213.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7f:fa:33:fa:f8:1e:67:a4:aa:39:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jul 14 21:00:12 2026 GMT
Not After : Oct 12 21:00:12 2026 GMT
Subject: CN=d7fe6bc9-b24b-49f2-9dd2-c718c07a1321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:00:88:48:b3:d0:25:1e:7b:0b:e4:43:69:
f9:1c:a9:c6:0f:86:18:37:e3:ff:cd:83:fd:a3:f0:
c7:b4:00:ee:8d:18:57:f9:4a:68:f5:74:8c:c9:b7:
96:b3:94:e8:3c:38:cd:33:5e:1d:c8:06:59:21:2d:
de:7b:40:86:04:ca:aa:be:72:2f:51:85:c8:6a:4e:
63:b0:83:56:27:e8:5e:57:ae:90:d1:24:e7:96:51:
66:d7:36:8a:a1:93:18:5c:af:ff:b4:a9:48:8d:23:
4a:c8:1c:94:54:e4:c6:14:6f:f6:9a:c3:a8:46:ad:
24:17:57:8a:c7:5b:d0:4f:73:ce:a1:ab:43:55:fc:
fd:ad:de:94:df:37:ba:24:8d:92:da:fd:91:99:2a:
7f:b7:6a:3d:bd:d0:c9:ba:99:5a:d9:48:24:00:a6:
4a:b3:ed:b7:8a:3d:60:e6:91:56:44:ed:d3:c9:ea:
16:35:dd:6f:2d:3e:19:71:53:5b:9d:c3:c4:b0:ed:
9f:ee:62:bc:76:78:b6:9b:a1:c0:8f:29:15:22:dd:
5f:43:2c:68:a3:23:4c:df:4f:81:6c:2f:82:10:4f:
20:f1:8c:81:a8:33:e9:bb:0b:cd:fc:c2:77:3b:f7:
c2:67:d9:05:8d:e9:c9:93:39:e5:5c:c9:2c:c4:a6:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:06:CE:08:44:C1:7D:EB:3B:C7:94:C0:73:80:DE:CA:0F:13:8A:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.213.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b0:3d:5e:34:b6:f9:04:51:bb:b9:6d:84:a7:ca:20:ea:b8:
55:27:15:99:69:b3:68:73:50:81:d3:5e:a3:12:15:0d:3e:1e:
58:56:cd:1c:66:ce:5d:e9:bf:c9:d6:59:d8:42:0a:77:e1:dc:
dc:96:ff:fd:76:9c:c6:db:22:4f:56:2e:50:76:1c:65:19:52:
95:fb:6d:4b:c8:1c:44:b9:1c:2d:46:48:6a:f8:c4:3a:ec:24:
46:51:1a:54:59:eb:2e:8f:db:91:4f:67:27:af:56:f7:28:e0:
36:33:c1:55:f5:01:ab:0a:50:61:c2:c4:15:b1:1e:ba:d6:e0:
b4:84:3f:38:b1:d7:7d:c1:c3:29:83:72:3c:2e:03:be:26:89:
62:dd:e1:5d:50:76:8a:fa:ea:80:28:6c:69:b6:3d:54:64:58:
92:d7:75:37:5e:55:94:1b:a0:c1:46:de:54:d1:59:82:d4:24:
fd:92:c8:42:d7:3c:f8:46:8a:49:f6:5f:1c:24:98:f4:63:12:
0b:34:43:68:99:d0:1f:4e:df:f1:d6:05:3f:a0:43:fb:68:9b:
b9:41:ef:31:52:42:53:30:18:84:b6:e3:27:29:e8:7e:90:6f:
a6:b4:00:86:9d:44:47:f9:09:9d:bf:99:3c:f8:3f:96:54:97:
3f:ba:da:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jP6+B5npKo5t4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZDdmZTZiYzktYjI0Yi00OWYyLTlkZDItYzcxOGMwN2ExMzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNYAiEiz0CUeewvkQ2n5HKnGD4YYN+P/zYP9
o/DHtADujRhX+Upo9XSMybeWs5ToPDjNM14dyAZZIS3ee0CGBMqqvnIvUYXIak5j
sINWJ+heV66Q0STnllFm1zaKoZMYXK//tKlIjSNKyByUVOTGFG/2msOoRq0kF1eK
x1vQT3POoatDVfz9rd6U3ze6JI2S2v2RmSp/t2o9vdDJupla2UgkAKZKs+23ij1g
5pFWRO3TyeoWNd1vLT4ZcVNbncPEsO2f7mK8dni2m6HAjykVIt1fQyxooyNM30+B
bC+CEE8g8YyBqDPpuwvN/MJ3O/fCZ9kFjenJkznlXMksxKaL/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUGzghEwX3rO8eUwHOA3soPE4p7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjlmOGRjZDgtMjFmNS0z
MDMxLWExYWEtZjFiZjBmOWJiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWwPV40tvkEUbu5bYSnyiDquFUnFZlps2hzUIHTXqMSFQ0+HlhWzRxm
zl3pv8nWWdhCCnfh3NyW//12nMbbIk9WLlB2HGUZUpX7bUvIHES5HC1GSGr4xDrs
JEZRGlRZ6y6P25FPZyevVvco4DYzwVX1AasKUGHCxBWxHrrW4LSEPzix133BwymD
cjwuA74miWLd4V1Qdor66oAobGm2PVRkWJLXdTdeVZQboMFG3lTRWYLUJP2SyELX
PPhGikn2XxwkmPRjEgs0Q2iZ0B9O3/HWBT+gQ/tom7lB7zFSQlMwGIS24ycp6H6Q
b6a0AIadREf5CZ2/mTz4P5ZUlz+62sI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:55 2026 by rpki-client