
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cbae457-2168-350f-bd3e-e16e8633c02b.roa
File: 4cbae457-2168-350f-bd3e-e16e8633c02b.roa (raw, json)
Hash identifier: iXzP0XWKxF0cdKrCKEK2zDS9Bn8lXy/gHRH8LuKPPOQ=
Subject key identifier: 49:A1:05:D3:C4:EB:84:B2:3C:26:C8:20:3B:3C:68:BC:25:CB:59:62
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584EA788B69262D05B12B5BC9000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cbae457-2168-350f-bd3e-e16e8633c02b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 834
IP address blocks: 74.1.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 14 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:b6:92:62:d0:5b:12:b5:bc:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=68403ddf-be4f-499b-92ad-e4f69b95f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:59:b7:c5:4d:77:e4:4b:30:06:52:46:2e:
15:4c:ed:5a:9a:ed:23:d0:13:4c:60:fb:f7:e0:99:
9e:ed:79:7d:37:8d:54:53:d6:10:f1:e5:a2:c5:bc:
76:67:ba:38:7c:1b:ce:da:52:69:f7:44:6a:e4:19:
3a:70:05:54:f5:d8:78:eb:35:ef:fa:1a:5b:5b:c3:
f7:f2:7e:45:53:51:c7:b6:81:30:32:a6:e0:b9:a2:
cd:25:4a:cd:97:ec:86:00:7b:ac:15:2c:c0:35:ac:
ac:81:57:54:02:38:39:61:57:0c:74:74:be:29:79:
58:dc:c2:ed:1d:4d:20:0e:06:96:51:7b:b7:73:f6:
a6:43:21:d9:e0:6e:12:83:f7:40:b8:ad:79:3c:16:
62:79:fc:53:bd:ce:f1:a0:6c:77:d0:4c:82:0d:99:
7b:c4:ae:20:7d:23:b6:5a:c8:a7:f8:0f:c7:46:b6:
6e:be:0d:bb:67:e7:e2:3e:48:bc:93:69:4e:0c:5c:
20:4a:ca:ad:2c:0c:58:1e:99:42:e4:53:e8:0e:c7:
c6:30:94:6d:f4:32:fa:1b:5f:d3:92:a9:66:8a:6c:
28:27:0f:59:14:83:e9:71:46:73:fe:17:7e:37:a0:
37:42:74:1c:db:28:a0:2e:d5:fd:69:3f:9b:a1:b8:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:05:D3:C4:EB:84:B2:3C:26:C8:20:3B:3C:68:BC:25:CB:59:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cbae457-2168-350f-bd3e-e16e8633c02b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.1.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:93:55:9f:53:fe:f8:54:96:00:f2:7a:b6:20:ff:37:b5:37:
e8:06:16:6d:6c:8f:6f:df:6e:12:2a:ff:7d:87:e0:9c:b0:b3:
04:8c:6b:ca:64:5c:48:af:7a:d0:a1:e2:5c:16:b6:9c:75:58:
9a:e0:3e:b8:7a:02:4f:3b:fd:aa:4b:42:72:be:39:52:8c:70:
fb:60:64:2f:4c:2a:26:b1:c5:4d:18:50:e1:53:0c:02:d9:2a:
1a:1f:0f:e0:c4:0c:fd:d2:b0:15:33:2f:6d:6c:0e:97:93:1e:
59:90:b1:34:6a:bf:fc:c4:63:73:b9:fd:d7:f7:93:e3:23:c9:
03:4f:ac:8c:3a:65:85:7d:34:41:2e:08:ff:31:64:d3:10:05:
aa:d6:a8:2e:bc:03:30:0d:21:ac:12:41:55:12:90:6f:e4:d9:
b9:65:17:fd:cc:a4:68:5b:fb:0a:34:c9:77:02:22:5d:a8:67:
38:46:05:da:59:9f:87:3c:a5:18:85:45:f0:93:fe:88:d3:f0:
5f:13:d0:ec:58:98:00:a1:79:58:a6:dd:c8:d9:05:4b:12:95:
bc:3a:ba:27:05:39:7b:ea:6c:d2:26:2a:59:7f:9b:03:d0:93:
09:a8:e4:f5:06:7a:81:ba:39:ff:88:fa:7a:53:67:14:5e:6c:
4a:bf:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:06 2026 by rpki-client