
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa
File: e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa (raw, json)
Hash identifier: G/lakpxJ5SM6UMIHHu5oP0gI9ViAKT/TbrL2+PNIqlc=
Subject key identifier: 6C:78:6D:DA:5A:74:22:38:A8:95:48:E3:25:4A:1A:84:57:36:D7:66
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D100CF0035A74E9389D650D40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa
Signing time: Thu 05 Mar 2026 02:00:32 +0000
ROA not before: Thu 05 Mar 2026 02:00:32 +0000
ROA not after: Wed 03 Jun 2026 01:00:32 +0000
asID: 209242
IP address blocks: 74.49.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:10:0c:f0:03:5a:74:e9:38:9d:65:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 5 02:00:32 2026 GMT
Not After : Jun 3 01:00:32 2026 GMT
Subject: CN=dd6658e4-4b8a-46f7-856e-d9e2ad132666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:31:68:6b:70:94:98:25:d7:2b:16:1a:9e:
0b:24:3e:a6:60:94:b1:9c:08:02:74:bd:96:1d:43:
4f:21:25:94:69:d4:0d:59:09:2d:91:72:13:1c:46:
0a:62:61:88:6f:e1:38:03:ca:89:5d:5f:05:9f:99:
58:47:e3:39:73:6d:bd:05:3a:d3:20:e2:5e:27:e4:
f3:42:41:bd:70:57:35:ba:cf:bc:3c:35:bc:e9:da:
ac:46:26:71:d8:1b:b0:64:9b:80:0e:32:99:43:cb:
3b:11:d4:d7:44:19:7b:ff:65:26:d9:0f:19:1c:fa:
15:1e:be:8e:21:6d:07:bc:4d:83:2d:58:0c:84:5f:
b6:73:d7:8e:f5:6a:99:9e:bd:e2:3c:95:dc:54:bc:
fe:e3:41:b1:d3:24:b6:d8:33:0b:11:f6:29:77:a2:
09:fc:ef:ff:e0:05:4c:5d:9c:94:a7:85:d7:9a:36:
45:50:db:70:67:c7:53:e6:79:e5:37:42:8d:0e:2b:
ad:b3:1c:69:f7:e7:df:0b:9e:b4:8c:f6:7a:e6:06:
f8:38:79:73:8b:61:bc:05:47:4c:59:e9:94:19:f5:
03:79:60:84:df:b9:66:ac:a5:8c:28:3e:93:68:5a:
c8:e9:b4:33:75:58:90:ae:0b:2e:c4:85:1d:06:75:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:6D:DA:5A:74:22:38:A8:95:48:E3:25:4A:1A:84:57:36:D7:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
74.49.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:38:20:87:cb:f6:88:7e:bd:e4:c3:fd:75:df:07:19:c6:5f:
fb:8c:10:f9:0e:55:07:91:f2:c0:df:b4:e9:82:97:d9:d2:ca:
80:2a:46:34:75:b8:33:ac:8c:ec:b9:d9:23:48:af:38:62:0b:
ff:d4:e2:8f:8a:82:1a:99:5d:da:d6:5f:45:85:da:6a:51:6e:
4e:06:87:50:fb:9c:88:0b:9f:92:3d:f4:1a:8c:be:75:e1:35:
36:ea:32:8a:66:1a:2b:77:38:49:ea:98:7d:e8:b9:bf:bb:87:
70:a9:ec:93:d0:3f:22:85:9f:ae:68:4c:f1:a9:fc:3a:da:e1:
2d:bf:15:b2:b9:0f:d4:13:fb:14:65:eb:4d:78:78:7a:9c:6d:
4c:26:1e:78:00:7a:a5:07:2e:18:13:4d:29:ed:33:80:c5:c2:
db:53:06:59:3c:19:e4:eb:1e:90:9f:bd:45:a8:78:7c:cd:96:
fa:bf:a9:f8:4e:1a:ac:f0:5e:f4:b1:07:80:94:d2:9b:d7:33:
30:f2:f1:9a:30:df:9a:f4:7c:60:26:ab:1b:fd:af:ef:61:38:
97:b1:21:a7:de:80:5a:ea:2f:36:e5:6a:05:88:69:1d:da:7b:
71:71:cc:9b:5b:a1:e6:f3:43:22:66:81:b4:50:bc:02:5c:49:
1a:48:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:38 2026 by rpki-client