
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4b037c18-759a-37bb-8044-f325b3e909ca.roa
File: 4b037c18-759a-37bb-8044-f325b3e909ca.roa (raw, json)
Hash identifier: 3MAQdWzVgn8kT1/HJuuWVxYORksF/RcpquitVyjzxsQ=
Subject key identifier: D7:06:17:65:22:77:69:98:E1:9B:10:77:C5:2F:D8:BF:9F:31:61:64
Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial: 010D0C9F4328584EF2E780A87CACA73F6D2FEE20
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4b037c18-759a-37bb-8044-f325b3e909ca.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 812
IP address blocks: 74.198.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:80:a8:7c:ac:a7:3f:6d:2f:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=9d56c8ca-325d-4137-9b51-20d82c564f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:97:be:5f:d0:08:6f:53:1b:25:c9:39:c4:2c:
7c:ea:06:c4:72:be:71:b3:7d:bf:c0:d7:5a:51:7b:
c7:21:86:fa:f8:fb:a2:5a:e9:c9:21:00:84:e6:e8:
f4:95:42:08:08:37:89:8e:5a:4b:08:4b:cf:07:98:
7b:2c:ff:90:42:d3:63:0f:5e:ed:48:3e:63:31:8f:
2a:e6:c4:94:01:fb:20:1e:e6:ae:f5:ef:b8:5b:58:
f7:8d:38:6e:56:47:cc:e0:4c:9d:2a:ac:d2:f4:aa:
a0:93:78:58:b8:fc:f4:38:1a:a1:45:3a:6b:44:57:
7c:62:a7:66:c7:6c:24:fd:84:a4:8e:7a:eb:b8:ce:
d1:5f:e0:b4:39:af:a6:98:ab:fb:c9:98:7d:6a:b3:
77:07:e3:5c:d7:5e:00:f6:47:58:03:d4:02:0e:3c:
1e:f8:1b:46:6c:87:d5:78:dd:da:ce:e5:bd:95:5c:
28:6b:d5:cd:0d:4c:5b:c8:5d:3b:74:4f:50:ae:6e:
f9:f5:99:5d:2c:1a:7b:c0:ed:22:26:d6:62:8d:81:
96:ad:b1:8e:73:c7:6c:01:dd:34:86:7e:8a:fe:4a:
5a:6e:17:05:ec:f3:e0:03:8f:c2:7c:1d:cb:d7:de:
23:9f:a6:5e:b3:d8:d6:80:0b:20:7a:ca:67:3c:dc:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:17:65:22:77:69:98:E1:9B:10:77:C5:2F:D8:BF:9F:31:61:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4b037c18-759a-37bb-8044-f325b3e909ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
X509v3 Authority Key Identifier:
keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
sbgp-ipAddrBlock: critical
IPv4:
74.198.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:83:94:62:5f:0f:b7:02:f1:c3:9c:02:09:1d:8b:72:0f:12:
4a:08:3c:21:2a:55:7e:2a:93:75:92:ea:f3:9b:32:a1:85:c9:
40:d6:2f:d6:46:59:cc:4e:7f:22:22:d8:d4:6a:0a:be:a1:57:
6e:18:42:af:fa:cf:75:0b:42:20:e1:20:db:4c:b2:1c:a5:69:
ec:cf:b9:7c:a3:a2:a2:74:3e:01:32:b5:0d:40:ac:4f:d7:09:
86:15:92:50:3f:23:e4:bc:f2:b4:65:05:5b:d0:b4:a3:02:79:
62:50:36:e6:74:3e:55:d6:50:e3:f1:4f:e1:85:10:7f:e9:44:
ea:41:9e:e9:fa:a9:b2:15:9a:20:e2:85:df:96:6b:13:ec:86:
64:65:4e:bc:42:60:8d:a8:98:0f:d4:40:cd:db:68:33:42:f7:
8b:5a:a1:b7:f6:55:3f:ca:83:97:be:32:bd:83:bc:c1:d5:94:
aa:2d:2c:aa:69:de:04:92:59:57:b0:a6:ac:f8:bd:0e:dd:52:
95:cc:70:24:9e:7f:ea:df:ff:ac:00:0b:1e:f7:11:8a:61:86:
32:b5:dc:3f:5f:8e:3c:c5:85:6a:82:5e:b3:d6:86:29:8a:c6:
2c:6f:a1:6d:02:6e:ed:e3:2f:ea:4a:be:34:c4:56:02:80:ab:
21:5c:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:07:23 2026 by rpki-client