
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
File: d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa (raw, json)
Hash identifier: 2pVSyRDiAUtD/S9ggv9xfxamdnHLJ/13/XA2uSDuM5g=
Subject key identifier: EF:82:51:67:98:BB:D9:B0:ED:A9:14:4F:5B:FE:5F:76:E9:B6:42:C6
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F4328584ED861DD1440E9E546C3742380
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 25649
IP address blocks: 74.112.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:dd:14:40:e9:e5:46:c3:74:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=4eb3d74e-c6ad-47dd-a57c-d34a34a19a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:f2:56:72:f7:b5:0e:28:c4:7d:43:15:89:
c4:71:a1:d4:93:4b:b4:56:e7:f7:01:0f:86:02:f8:
5b:d7:32:be:bb:ba:17:b2:ee:e3:34:93:0e:ff:6d:
49:e6:55:1a:8a:6a:f4:76:2f:a9:e1:f3:0d:09:64:
65:80:29:59:65:b6:f6:23:53:f6:79:01:c8:b9:20:
31:ba:0c:16:18:77:4c:e8:62:2c:ab:97:d7:83:90:
7c:36:6b:5a:d1:1a:f6:1c:e4:8b:ce:b6:49:dc:d1:
21:89:86:53:86:87:94:fb:62:00:5d:e1:9b:73:aa:
3f:cd:21:82:6f:83:1c:06:79:c5:c9:07:57:40:d4:
9d:61:e5:06:bb:c1:53:72:2a:4f:93:2b:5f:3f:12:
37:8f:86:7a:18:15:47:3e:e5:5f:c9:3c:13:5d:8d:
f6:47:13:5d:bd:62:6f:04:aa:4a:39:05:87:77:f5:
3a:f9:32:e8:a2:ad:f3:4b:2b:c5:3b:86:e8:39:cb:
a8:40:f3:89:5a:a4:e7:21:bf:86:83:2b:4a:f8:d2:
98:df:32:95:18:f2:b0:94:c7:b1:a2:ca:e6:68:a7:
d9:84:89:ba:6a:05:d5:14:eb:89:e8:5f:ac:2f:63:
f9:24:01:32:9c:72:37:92:3d:a2:93:c1:5d:5c:09:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:51:67:98:BB:D9:B0:ED:A9:14:4F:5B:FE:5F:76:E9:B6:42:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:53:ef:5f:be:64:b0:44:d7:2b:8d:ef:bb:5d:22:ed:20:ad:
35:19:b5:35:c3:34:d2:fb:99:98:41:3f:37:6d:5e:3e:08:f7:
9e:49:00:c6:bc:4c:b1:29:ae:87:d8:2e:02:41:73:d9:f5:8f:
14:1f:65:41:40:05:0f:f6:d8:95:5e:2b:c3:4a:32:ec:31:08:
76:7a:1b:c9:84:3f:ed:1c:10:d7:ea:c9:92:7e:e5:36:64:03:
47:98:e9:80:0c:7e:4e:c3:b1:15:d8:dd:73:e5:8f:0d:78:16:
57:6d:b2:f2:29:dc:10:18:65:e8:7f:29:c6:d6:b3:23:4d:e7:
ad:c7:bb:49:72:a0:6d:ea:a3:b6:8b:3f:03:82:14:3d:83:e7:
c0:6f:25:d9:4b:c9:6e:11:f2:e4:57:17:42:c6:95:1b:03:fd:
2a:4f:63:0a:65:ff:07:b0:45:06:71:32:c3:e8:e3:e8:d0:ec:
e6:22:04:36:82:7b:67:06:3a:7f:77:b5:03:67:ec:74:84:d9:
f8:96:c5:e6:88:c3:65:18:7e:2e:e2:ff:8d:04:82:29:19:0b:
eb:b9:92:71:b2:4d:a5:b5:13:38:35:79:45:27:5b:c6:5a:2d:
ad:51:9c:23:85:99:ba:49:bd:eb:28:11:5e:b7:29:52:65:26:
ed:a3:0c:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd0UQOnlRsN0I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NGViM2Q3NGUtYzZhZC00N2RkLWE1N2MtZDM0YTM0YTE5YTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYPyVnL3tQ4oxH1DFYnEcaHUk0u0Vuf3AQ+G
Avhb1zK+u7oXsu7jNJMO/21J5lUaimr0di+p4fMNCWRlgClZZbb2I1P2eQHIuSAx
ugwWGHdM6GIsq5fXg5B8Nmta0Rr2HOSLzrZJ3NEhiYZThoeU+2IAXeGbc6o/zSGC
b4McBnnFyQdXQNSdYeUGu8FTcipPkytfPxI3j4Z6GBVHPuVfyTwTXY32RxNdvWJv
BKpKOQWHd/U6+TLooq3zSyvFO4boOcuoQPOJWqTnIb+GgytK+NKY3zKVGPKwlMex
osrmaKfZhIm6agXVFOuJ6F+sL2P5JAEynHI3kj2ik8FdXAkAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+CUWeYu9mw7akUT1v+X3bptkLGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDQ4Zjg4Y2UtODRiOC0z
NGM5LWI3N2UtYzE5YWMyMmU4MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABT71++ZLBE1yuN77tdIu0grTUZtTXDNNL7mZhBPzdtXj4I955JAMa8
TLEprofYLgJBc9n1jxQfZUFABQ/22JVeK8NKMuwxCHZ6G8mEP+0cENfqyZJ+5TZk
A0eY6YAMfk7DsRXY3XPljw14FldtsvIp3BAYZeh/KcbWsyNN563Hu0lyoG3qo7aL
PwOCFD2D58BvJdlLyW4R8uRXF0LGlRsD/SpPYwpl/wewRQZxMsPo4+jQ7OYiBDaC
e2cGOn93tQNn7HSE2fiWxeaIw2UYfi7i/40EgikZC+u5knGyTaW1Ezg1eUUnW8Za
La1RnCOFmbpJvesoEV63KVJlJu2jDK8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:41:37 2026 by rpki-client