
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
File: 8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json)
Hash identifier: 5J5QYlqQFrH++yveGrSNTCtcbtWkv+lSKS8ifl2alos=
Subject key identifier: 24:33:BB:B7:01:CF:B1:85:D9:98:74:95:0F:1C:63:EA:58:A3:6D:38
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F4328584E3A2F1F005558F4B49F0BD380
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
Signing time: Fri 19 Jun 2026 21:00:12 +0000
ROA not before: Fri 19 Jun 2026 21:00:12 +0000
ROA not after: Thu 17 Sep 2026 21:00:12 +0000
asID: 16509
IP address blocks: 209.142.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 06 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:2f:1f:00:55:58:f4:b4:9f:0b:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Jun 19 21:00:12 2026 GMT
Not After : Sep 17 21:00:12 2026 GMT
Subject: CN=df733557-f2ad-43f1-895b-6a895c1145ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:ac:9c:b6:7c:53:12:b3:4f:81:fd:aa:0c:
c9:7d:13:ad:ec:f2:1f:e7:64:5d:ad:ba:a3:87:6e:
e0:4e:22:35:4b:db:6e:77:a4:69:d7:d1:56:62:7e:
25:b1:29:be:e1:5e:a4:e1:7a:50:22:ed:ed:65:b4:
3c:cc:cc:79:2f:cf:09:f1:22:f8:21:c4:f4:2c:96:
81:60:80:76:9d:72:b8:75:ec:a3:02:0b:c9:e7:8f:
96:34:3e:bd:9c:e4:8a:aa:ce:88:9a:be:09:22:61:
eb:1e:f5:ec:35:30:b8:32:56:e8:fa:15:5d:22:64:
b0:25:73:48:be:6d:5c:c0:d3:57:5a:fa:e3:5c:dc:
38:d1:79:24:e5:a3:67:4a:03:48:3f:ed:7f:c4:7f:
b0:10:13:6b:41:5f:6c:55:ca:f6:58:61:7d:43:1f:
5f:dc:e3:9e:17:99:36:cf:e9:63:0f:d2:0c:23:3e:
f6:b4:ca:2a:fd:cb:0e:2d:a9:a5:9a:f2:66:8f:b5:
51:41:b1:9e:d9:ac:a6:ef:b5:b9:5d:7f:d1:9a:f0:
86:95:6a:ba:2d:72:66:d5:52:36:8e:be:4e:64:f3:
9a:2b:a6:8a:18:7c:27:10:40:73:f6:5c:bf:30:3f:
f8:52:ba:34:c2:52:30:96:c2:27:dd:5b:a5:ad:67:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:BB:B7:01:CF:B1:85:D9:98:74:95:0F:1C:63:EA:58:A3:6D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b2:4c:65:47:a1:02:90:55:11:74:40:81:bf:0b:ef:43:0e:
cb:e3:e4:c0:ee:6a:86:e5:7a:0e:8f:2e:0c:35:39:d3:7d:79:
a5:66:39:d4:76:61:e3:12:5b:f0:a3:42:3c:8c:dc:85:97:0c:
05:58:fc:35:cc:dd:9e:fc:ab:e6:92:bf:dc:16:5d:09:fb:10:
a2:b0:7b:77:f4:e6:c3:4f:2e:2f:b1:f1:4a:75:fc:3e:a9:09:
46:43:47:69:55:6b:b9:3a:60:11:c9:cd:80:49:0a:ae:66:12:
c8:c7:90:af:bd:16:f3:d4:51:40:b8:5a:4f:9d:7f:bf:c3:31:
7e:e5:32:6d:92:cd:44:42:e6:07:3c:3c:47:10:97:5e:e1:4f:
7a:db:2d:0c:ad:88:d2:e8:83:62:49:1d:03:0a:96:3a:df:d4:
26:d1:08:dd:bb:54:92:98:89:66:8d:21:d7:cb:00:57:8f:37:
c4:7f:51:2b:1a:24:61:21:46:2c:d2:8e:51:48:53:44:1c:84:
59:27:90:1f:21:a4:96:5a:6f:fb:df:61:84:13:a5:eb:f8:54:
57:30:35:4c:2a:b1:11:e3:51:d1:01:a4:e0:84:68:c8:d4:79:
a9:0e:38:57:78:2f:14:52:5e:f7:9c:cd:5b:9f:76:f5:00:39:
91:35:59:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 14:33:03 2026 by rpki-client