
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa
File: 0187a465-5877-364d-b1a0-2133ea204e7c.roa (raw, json)
Hash identifier: JkDW6nPlx8Kn7cBGP+MFnzlpGWJYxYYRN+W0hfQiyqc=
Subject key identifier: 0F:4A:A0:30:EC:10:D4:62:04:82:94:DD:2A:CB:65:AE:6A:A1:C1:8E
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F4328584D59EA59478B8818C65D4680CC
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 14618
IP address blocks: 209.142.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:59:47:8b:88:18:c6:5d:46:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=7adfb472-98a7-4f58-b03e-9502fd310351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:2b:e9:47:56:79:65:c2:f6:e1:f6:07:df:
1a:7d:28:74:83:2c:5d:a7:a3:20:7d:35:13:84:d4:
28:0e:2c:94:99:24:2a:31:9e:fc:ae:bb:e2:d2:76:
a1:b5:dd:ae:87:64:26:9b:fc:8e:8b:5b:d0:db:fe:
96:85:c2:e2:ad:14:6a:e8:6c:7c:e2:25:04:0f:d0:
6e:e1:40:bd:3b:4b:ce:4b:31:eb:70:99:90:1f:3b:
85:95:23:fc:e9:31:1e:6f:39:3b:17:ad:94:1b:61:
2a:43:5a:b1:be:0f:ad:14:ae:0a:17:00:ed:73:0e:
ab:e1:e8:91:12:a6:4f:be:d8:c7:c2:65:5e:ff:24:
84:9b:5e:78:45:40:ad:56:ae:6c:59:91:b9:64:6c:
52:40:03:35:ea:be:6f:f6:42:c5:06:d2:3a:ea:30:
fa:2b:91:84:d7:16:42:da:2a:2b:a6:6d:45:4f:04:
a2:b5:c4:07:ee:2d:d6:0c:e4:d8:63:cd:af:92:55:
c2:0b:bd:ed:c7:0d:bd:b5:65:4f:bc:a8:01:5d:ee:
a1:d0:d8:0b:a1:a2:00:59:9a:f1:d9:d5:20:7b:8e:
6a:1d:b8:fd:d0:54:4e:d5:9c:39:d4:1d:30:42:8d:
f4:70:e0:d7:03:ab:4e:f1:61:b0:c2:c0:3c:88:2f:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:A0:30:EC:10:D4:62:04:82:94:DD:2A:CB:65:AE:6A:A1:C1:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/0187a465-5877-364d-b1a0-2133ea204e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:dd:af:af:cc:fe:da:3f:de:df:c8:8b:a5:65:dd:9f:1c:b2:
9c:46:34:c1:18:9b:7a:72:78:a0:1e:d5:cd:a2:16:77:33:49:
4a:88:bf:fa:09:80:fc:64:25:0c:50:3e:45:7f:5a:dd:57:49:
87:90:b0:e7:dd:1e:ec:90:1c:b0:cb:78:2c:cd:0d:7d:42:56:
97:67:40:90:a0:8b:16:a1:a2:66:01:22:33:ee:ee:6a:cf:74:
6f:98:57:e1:72:d3:4b:c7:07:f0:3d:7f:f8:0b:13:cf:64:2a:
6e:e3:ba:60:2c:fc:04:e0:58:60:ba:c2:05:c9:55:b1:cf:a6:
ce:4f:d2:65:e7:a4:39:1d:fe:68:58:2d:1e:20:63:c6:66:b0:
db:6f:cb:4f:35:f9:d4:66:a6:7d:04:9c:0f:35:61:ab:14:20:
53:ce:3d:65:2f:07:8c:ef:4f:fd:cd:1a:67:74:c0:df:03:a7:
b2:c5:83:cc:55:b9:a5:4e:50:78:dc:81:23:ae:85:fc:20:96:
2b:2c:0f:5e:98:d6:da:10:aa:d7:5f:83:47:ba:45:04:62:0c:
4b:8c:11:28:eb:84:54:7b:98:a0:1c:c6:36:07:39:9f:54:21:
0a:6d:48:4c:15:19:b4:07:ff:33:b9:08:c4:07:be:86:3a:12:
61:40:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:27:22 2026 by rpki-client