
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa
File: 655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa (raw, json)
Hash identifier: 5Zgsy8etxWlu5EAc5ItmaHrzjW4Cj2qTH26YsYQ/RI8=
Subject key identifier: B1:E1:66:F1:93:D4:05:7A:65:16:C2:04:86:3E:65:96:8E:DB:74:76
Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial: 010D0C9F4328584E5084B65EBAD295DF2E3895E8
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa
Signing time: Sat 27 Jun 2026 21:00:12 +0000
ROA not before: Sat 27 Jun 2026 21:00:12 +0000
ROA not after: Fri 25 Sep 2026 21:00:12 +0000
asID: 812
IP address blocks: 74.198.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:50:84:b6:5e:ba:d2:95:df:2e:38:95:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
Validity
Not Before: Jun 27 21:00:12 2026 GMT
Not After : Sep 25 21:00:12 2026 GMT
Subject: CN=ecbf7615-f469-47ec-bbae-65eb8008b55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:dd:dc:59:96:a6:57:54:95:8b:05:43:de:
bc:f7:0e:0d:14:c0:75:d4:07:7e:77:c7:56:f8:b3:
5a:5a:87:19:be:e8:a0:90:8c:c8:88:f8:23:2b:1b:
29:d8:8e:ec:a5:4d:74:3e:f5:86:bb:28:bd:4b:5a:
ca:73:c0:a3:8b:74:33:cf:89:04:16:52:0e:34:ab:
62:15:66:17:84:c9:07:ec:28:4a:c0:f5:64:25:33:
2b:73:9d:ab:8d:9d:c7:9f:de:08:8e:66:7b:0f:16:
e6:01:da:60:9d:57:fa:3f:78:ce:69:1f:e5:50:44:
28:25:97:db:ce:db:23:9c:90:a2:79:92:9b:21:90:
9b:0b:ee:8a:4b:58:16:fa:a5:ca:df:a5:72:c7:cc:
e4:04:f5:6a:50:1a:e8:8a:c0:70:69:3f:ba:d6:79:
e4:49:01:ec:eb:6c:a9:ec:63:45:21:79:2c:88:80:
66:83:74:40:45:4c:b1:6a:61:33:2a:dd:90:e4:65:
99:4b:56:7b:92:fd:e2:b9:59:cc:08:7f:9f:9f:db:
38:b4:9c:89:3b:66:e4:b4:7e:ab:1c:3e:aa:c7:c3:
e0:92:99:67:0b:ad:af:79:76:c2:a5:fe:7d:2d:9d:
be:c5:a3:ce:e3:2a:7d:f7:e4:d4:5d:5a:4e:a0:6f:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:66:F1:93:D4:05:7A:65:16:C2:04:86:3E:65:96:8E:DB:74:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/655af5eb-8f29-3eb8-8d87-138bfc1195b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
X509v3 Authority Key Identifier:
keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
sbgp-ipAddrBlock: critical
IPv4:
74.198.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:17:cf:b6:0a:7e:ad:fd:7f:3f:2b:27:a6:65:ae:2d:2a:48:
39:4e:db:7b:88:c9:5b:d0:f9:eb:e4:a0:a5:df:f6:8c:9b:ac:
b7:21:43:99:24:32:10:1a:e2:6f:7a:7b:5d:59:01:dd:13:f7:
b5:ff:3c:9a:3b:cc:41:d9:d3:58:d6:81:6c:74:b7:f4:38:0d:
21:aa:ed:08:85:85:1b:c0:7f:bc:86:9a:1b:cd:4d:07:cd:47:
4f:33:f4:b3:28:e6:3d:d8:cf:30:7f:a6:8a:95:83:93:e4:25:
66:92:6d:ee:32:ad:09:6f:43:34:ca:99:f0:95:ce:bf:cd:1f:
a5:d1:24:06:00:83:5d:10:62:b1:a3:22:25:96:12:16:03:f7:
01:89:8b:5b:bc:8c:7c:c3:49:60:b9:85:96:5c:06:82:02:b3:
18:fd:5f:68:0c:65:b5:59:01:4f:b0:12:68:a5:c0:ab:3f:8d:
90:5f:7e:2e:8b:07:cd:35:d1:b0:eb:31:90:9c:58:aa:c3:b0:
1b:28:3e:0a:f9:64:e0:79:e8:d9:a9:ee:9d:42:1a:c9:a4:dd:
53:c4:c4:fe:b3:f9:9c:7a:f6:cf:24:1c:9f:0b:38:a8:1f:3c:
3c:c7:e5:f2:0d:38:08:cf:3a:95:9f:45:c3:78:ef:34:ac:1f:
23:f9:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 15:02:29 2026 by rpki-client