
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
File: d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa (raw, json)
Hash identifier: QVQsNSm2DoLEnG/udcy6w38pLevVQ8iq3vJStIAjglk=
Subject key identifier: 2A:8F:84:C3:43:C5:F5:D1:8A:60:B1:21:A8:2F:A4:AA:FC:B3:7A:D7
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F4328584D55BA3A2246252E85927BBE00
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 25649
IP address blocks: 74.112.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:3a:22:46:25:2e:85:92:7b:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ff169226-8f99-4823-bcd4-94ba51e73b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:11:31:48:27:04:58:b1:41:45:19:cd:1d:
fd:62:4f:69:1f:b6:83:32:ba:74:7c:d1:92:af:63:
95:9b:18:13:4c:20:6e:e7:2e:e8:8c:01:14:53:60:
b4:50:d2:98:c7:da:6f:28:5e:c8:1f:29:f6:25:81:
f8:90:d3:7d:f5:4f:4d:05:09:35:4c:1b:cb:46:03:
68:d0:db:00:e2:2c:5f:d5:2d:43:35:d3:28:78:8d:
77:ee:09:e4:a9:ab:44:08:2f:e2:23:3f:c3:8d:cb:
17:f6:72:ad:25:3b:f5:1b:fc:f8:1a:28:63:f5:a0:
b3:70:ad:b3:85:0b:06:d0:3e:9d:1b:f3:ec:44:a1:
9f:9a:d8:8b:6d:fd:89:29:e5:06:4c:11:42:0e:0e:
38:b8:69:9f:5d:4b:bb:55:17:66:04:26:0f:c9:d2:
52:02:11:e8:a8:5f:bd:df:a0:53:62:19:1a:72:b3:
06:b1:be:99:6f:7f:70:90:47:59:03:72:08:b7:94:
1d:7d:2d:e1:0c:96:fb:09:8b:8c:21:09:df:85:b3:
51:ea:c0:d2:7e:1a:ca:9b:2f:24:2a:59:ee:de:0e:
7d:76:94:fe:89:af:fa:03:ac:e9:d5:96:99:35:71:
11:4b:68:74:c6:ff:d3:1b:59:00:b1:26:4b:94:2f:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:84:C3:43:C5:F5:D1:8A:60:B1:21:A8:2F:A4:AA:FC:B3:7A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:c7:d7:09:c9:fc:75:8f:6f:70:f6:da:6f:c5:2b:5d:90:d1:
03:e8:81:d5:d2:f4:1b:b6:ec:76:7d:be:e1:cc:9d:f7:08:b2:
df:28:30:59:48:9c:4e:f0:7b:a4:e2:18:13:fb:5c:2f:04:a4:
30:4d:a2:b0:60:90:87:26:24:3d:5f:c7:d5:f3:2a:52:cc:4a:
ff:c4:11:e9:14:ee:f7:66:fe:c8:13:70:a7:e7:0d:f7:cc:1f:
4b:c4:9f:cc:91:df:4b:09:94:5c:1e:9c:e9:0d:e1:cd:97:e4:
b9:2b:90:18:18:cc:82:53:fa:18:ef:eb:bd:86:a9:88:c5:ee:
14:6f:a3:86:59:de:7e:4f:cf:2f:cc:80:ab:dc:fd:be:f8:1f:
e8:fd:b5:a5:53:11:0e:f2:b6:7c:4b:0e:dd:72:c3:99:dd:fb:
5f:12:43:a8:60:7b:31:e5:37:3d:c8:36:01:77:35:37:ba:98:
67:4f:0a:2a:aa:30:b8:82:d7:50:bd:01:75:38:3a:e9:34:39:
b2:27:90:c9:cb:aa:3b:7a:80:99:6e:20:da:be:2b:88:2a:be:
17:24:99:35:78:7a:49:74:b5:0a:fc:5e:ba:55:7d:24:74:8c:
6b:cb:e9:95:5e:00:8e:b6:0c:6d:54:a7:19:43:44:a9:25:93:
12:da:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 03:40:18 2026 by rpki-client