
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/18fc5ae2-51b3-3950-ad6f-ffaf1cd307f2.roa
File: 18fc5ae2-51b3-3950-ad6f-ffaf1cd307f2.roa (raw, json)
Hash identifier: hU8ctOIKEi7Np7xOTi5MEzzKyKUwzTB+ltXMnM6cSCw=
Subject key identifier: BD:C7:9B:3F:3B:1A:B7:9F:7D:8B:A6:EA:8A:A5:F8:3E:DB:D3:D2:87
Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial: 010D0C9F4328584D8EF57786B150DABD25EF1180
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/18fc5ae2-51b3-3950-ad6f-ffaf1cd307f2.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 8070
IP address blocks: 74.85.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:77:86:b1:50:da:bd:25:ef:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=f17599c3-33e3-4eeb-8320-cdf65cc84d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:7f:6f:75:22:0d:ea:9f:ad:f1:57:7c:95:
e4:6b:40:99:b3:e9:e8:ed:f4:a4:fc:c8:1e:94:d5:
8a:79:c5:c7:15:5a:97:f9:1e:43:8a:b4:fb:80:95:
22:c4:f3:07:ea:32:f6:75:56:ac:b1:7c:60:5d:5f:
bc:28:c1:44:3e:0b:85:c4:41:52:84:01:55:11:5f:
30:7b:74:da:cf:b6:1c:a5:cb:e3:71:20:d5:b5:e3:
95:8f:f9:78:a0:e1:84:dd:25:fc:8b:96:42:27:96:
fd:58:9f:cd:59:b2:b8:df:e5:93:66:09:74:e0:f2:
45:d3:2b:8a:3a:2a:88:e2:20:6c:02:f1:a5:d3:70:
44:28:46:6e:06:45:35:08:c8:bf:be:9d:2d:c8:15:
03:b0:39:67:8b:67:82:c3:29:0b:b5:99:3b:c7:e0:
14:4e:0c:ab:9c:11:74:17:18:9d:f3:33:27:33:4e:
a0:c9:17:8a:b5:27:71:7e:0f:08:dc:3e:ba:96:8b:
1c:bb:8b:02:6c:d2:9e:5e:1a:8f:27:cd:0e:c7:2e:
fa:72:a6:51:0a:37:8c:cb:fc:2a:43:0e:d7:81:4b:
fa:81:6f:33:dc:3c:ee:4a:c6:b1:06:94:dd:43:c9:
d8:cf:53:94:a8:04:c7:ca:30:4d:0b:01:b8:be:e9:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:9B:3F:3B:1A:B7:9F:7D:8B:A6:EA:8A:A5:F8:3E:DB:D3:D2:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/18fc5ae2-51b3-3950-ad6f-ffaf1cd307f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
X509v3 Authority Key Identifier:
keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
sbgp-ipAddrBlock: critical
IPv4:
74.85.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6d:99:07:03:fa:7b:ef:7a:34:ec:ec:4e:da:cc:af:ff:0b:
49:36:c2:10:ba:5f:2f:b6:69:13:1e:49:c8:96:01:1b:b3:7c:
8b:bc:1d:b2:9d:39:b4:cd:aa:f8:2e:f8:51:b7:22:90:1b:59:
b9:99:87:7f:9f:9a:dc:88:ed:e9:f1:51:62:1d:4c:08:ea:6f:
6d:fc:23:28:7b:93:a8:3c:a7:c4:d0:44:b0:ce:82:49:1c:bd:
84:62:78:ac:df:27:18:66:bb:15:b4:2b:73:83:37:6d:ec:d8:
73:7e:b8:03:f8:24:86:cd:87:97:65:c1:bc:f5:b5:1a:10:6e:
2a:c6:7d:cf:bf:f5:20:b5:17:26:8f:c2:17:c9:79:18:0b:f8:
d0:2d:7c:58:02:b5:cf:0b:09:f1:b1:9f:94:41:75:d0:e7:3c:
77:4a:e5:0b:49:81:72:73:cd:aa:68:fc:3b:70:8d:40:ba:b1:
b4:5f:f5:78:3a:0f:f0:37:05:ec:0f:e5:68:f9:e6:90:c6:e9:
94:0d:f8:0b:84:e3:c7:e9:e1:ad:b9:17:05:cc:fe:aa:44:81:
c7:49:84:7e:bd:34:1c:54:8e:f3:28:15:c4:a6:cd:1e:30:37:
6a:05:2d:6f:ed:42:19:68:12:b4:24:3f:43:11:e0:30:c1:32:
c5:d9:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 12:55:36 2026 by rpki-client