
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa
File: 0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa (raw, json)
Hash identifier: RIOIUkwUKDgMf0A7Q5B4wCNWow0M8CrSI60behdDRQQ=
Subject key identifier: E6:0A:EB:66:00:23:11:81:6E:6C:FD:0C:0B:6D:A9:BC:3A:DA:D2:51
Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
Certificate serial: 010D0C9F4328584F655E6A935666D248D918AAF4
Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 400702
IP address blocks: 74.118.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5e:6a:93:56:66:d2:48:d9:18:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=2545082f-1b8b-42e8-aec2-e2483eefe39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:62:41:72:14:52:7d:3e:b6:0b:9e:e0:c0:
d3:89:1e:67:a5:57:e9:e0:71:b9:86:5e:64:87:db:
3b:40:19:62:0f:80:91:a5:0c:3f:31:6e:a6:fc:37:
ee:9b:1e:b5:c4:6b:c0:3c:3c:c2:3e:04:e2:39:49:
6b:56:ee:48:6e:0a:f9:19:a2:01:be:8e:6e:09:2d:
a5:fc:ba:de:45:08:2a:75:c8:cb:d1:f2:de:4f:de:
de:d2:9f:05:c8:93:9b:56:79:9f:29:18:59:6a:30:
76:35:c5:4c:c2:2a:32:3f:5c:99:50:00:c9:4c:ef:
a8:bd:14:31:3b:1d:c7:ba:c3:3a:32:75:50:a0:a5:
cc:04:f4:cb:a4:90:7e:47:f7:f8:7a:0f:ea:2a:a2:
a3:8b:dd:10:70:6d:f9:e4:48:29:b7:f6:67:54:e5:
e4:8f:29:ad:91:21:c4:59:4d:96:ce:e4:dd:87:ad:
25:3c:31:b2:b1:68:d9:6a:3e:74:21:eb:92:55:bf:
67:20:1c:a5:f8:67:fe:08:db:3b:38:01:22:13:22:
58:2b:0e:c0:3d:46:57:0c:54:b7:6b:9f:fd:ac:e9:
79:60:b4:55:0f:85:d4:46:fc:7b:4e:45:12:01:84:
40:84:3d:c8:3f:69:ac:a3:72:a8:e1:a8:85:cf:1f:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0A:EB:66:00:23:11:81:6E:6C:FD:0C:0B:6D:A9:BC:3A:DA:D2:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl
X509v3 Authority Key Identifier:
keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
sbgp-ipAddrBlock: critical
IPv4:
74.118.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:3f:26:6e:9b:1b:55:3f:d5:13:22:db:e2:70:17:f9:7b:8b:
3a:f7:a2:79:06:b0:34:93:79:03:36:48:d6:31:2c:e6:7e:c8:
c5:20:9a:06:4d:04:2f:bd:e3:02:9e:ed:ae:fc:e5:40:9d:b0:
99:12:92:89:41:cb:3e:84:67:9e:ca:c3:e9:c2:f5:a5:3e:78:
ee:a3:2c:3b:18:a1:72:00:e5:ba:64:e5:05:2c:fb:b7:53:cb:
fd:55:90:43:13:e2:6b:c6:84:bb:4c:d9:3c:f8:79:2a:d6:f8:
55:b7:eb:26:03:26:db:64:ad:2a:49:5f:03:d3:20:02:17:2a:
a2:e5:13:c6:df:c8:82:eb:5d:aa:96:ec:a2:67:d7:b9:00:7b:
88:0a:20:90:f2:d5:b6:9d:3e:b4:25:e6:8c:d7:d6:05:ab:b2:
e9:24:94:15:ae:c4:43:57:e3:75:88:c4:b5:00:78:6c:86:33:
ec:37:8a:f4:f1:cd:08:0d:69:3a:b1:c3:55:14:89:ed:84:4e:
d4:d0:4f:6b:81:76:e3:07:47:90:8e:ee:5a:f7:77:8f:d9:52:
41:36:ad:e6:4d:26:c5:69:fa:aa:2f:3f:66:b0:6c:01:70:46:
9d:d6:d4:fb:e7:5a:ad:53:8c:8a:e2:1a:a1:94:1f:53:c7:af:
1d:4c:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:36 2026 by rpki-client