
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa
File: 0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa (raw, json)
Hash identifier: iHUCOJwBSK3WbAAQsTI9+sWWyHMxe8nFDYWAGmlK/Yg=
Subject key identifier: BD:C3:02:B7:91:15:FC:C0:80:E3:06:4C:72:67:73:CF:7C:20:1C:9D
Certificate issuer: /CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef
Certificate serial: 010D0C9F4328584DBC477E0E975D07DEE43A3800
Authority key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa
Signing time: Tue 05 May 2026 18:37:36 +0000
ROA not before: Tue 05 May 2026 18:37:36 +0000
ROA not after: Wed 29 Jul 2026 21:42:54 +0000
asID: 394232
IP address blocks: 74.114.16.0/21 maxlen: 21
165.140.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bc:47:7e:0e:97:5d:07:de:e4:3a:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef
Validity
Not Before: May 5 18:37:36 2026 GMT
Not After : Jul 29 21:42:54 2026 GMT
Subject: CN=8f4afe98-828b-455a-8a91-db2dbbc93220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:96:20:5a:94:65:91:c9:90:8c:09:40:1c:
67:f4:43:d4:d8:52:0e:77:9b:2d:d8:1b:e7:d9:22:
ac:1c:b2:65:75:98:f0:67:8e:9f:94:44:9e:04:60:
fd:e3:80:3a:d5:17:aa:51:c3:9f:02:8c:e0:00:fe:
28:85:2f:7d:59:4d:f8:d4:b9:e0:86:65:85:27:87:
37:c4:10:b0:27:16:92:3d:27:29:fa:0a:9e:17:68:
65:f2:01:25:69:59:2d:84:ba:8a:4b:1c:69:c1:ed:
d0:3c:e2:9d:fc:35:bd:3b:60:91:c6:e5:32:49:c7:
b4:cd:75:9d:d7:28:54:c9:be:c3:29:1b:ae:60:a8:
bb:b5:43:09:76:24:50:95:4a:ae:14:53:7b:44:e0:
e1:33:c2:42:70:16:fc:b0:34:08:f0:5a:56:e4:e7:
b0:55:8c:dc:52:95:da:79:8c:58:82:a6:7b:51:38:
af:ec:81:8c:be:a4:50:11:41:b1:36:fd:31:30:42:
5b:8e:3e:69:f3:8f:6d:e3:74:57:f1:4c:0e:9f:7e:
e5:18:fa:0d:e8:18:84:b7:db:47:7b:df:27:c2:0b:
fb:0d:79:1e:fb:56:82:79:67:1c:27:71:e2:77:fe:
17:59:1e:99:c1:73:a1:49:21:da:a6:44:ce:f8:c0:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:02:B7:91:15:FC:C0:80:E3:06:4C:72:67:73:CF:7C:20:1C:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl
X509v3 Authority Key Identifier:
keyid:EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.16.0/21
165.140.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:2f:be:09:ad:5c:9e:a5:c7:d0:0b:c2:ad:d6:7b:1e:2c:42:
ac:1c:94:1f:03:88:2e:cb:00:3e:03:36:52:ef:c4:ec:44:fb:
33:e2:2a:7d:cf:a4:4a:e8:aa:4b:83:e0:3c:fa:1f:a9:41:34:
cd:17:5a:b7:9b:ab:c3:df:f1:be:60:89:1c:e0:67:ea:22:bf:
4e:d2:4a:f1:c9:e9:43:79:bc:cf:36:2c:ff:71:ff:41:e8:c7:
bb:50:12:d8:9d:cb:61:1a:94:bc:b0:6a:0c:b6:8f:00:13:7a:
89:e6:16:93:27:be:1e:35:e7:96:fe:97:51:71:5b:37:43:af:
37:7f:00:92:2c:9f:9a:dd:a8:27:6e:17:01:70:60:cf:1c:5d:
1b:c4:d4:7f:21:1a:0a:a8:9c:33:f8:b6:d2:7a:f8:cb:0e:38:
1b:97:cf:16:cf:98:22:56:0a:8f:c3:24:90:31:29:4a:b5:01:
1c:5b:47:46:e5:65:65:38:16:ca:cb:f7:06:43:2a:11:e6:4f:
42:55:40:bf:42:92:95:10:8f:5e:53:f0:3b:66:8c:5e:29:47:
16:b9:4e:2b:d7:fa:5d:e4:34:95:ec:6c:d4:41:63:6b:fb:f1:
20:4e:a3:cc:39:1a:29:65:77:1e:49:da:5d:de:37:24:07:25:
5b:34:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 00:51:46 2026 by rpki-client