
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfc727b1-d264-3057-aeac-60464940255d.roa
File: cfc727b1-d264-3057-aeac-60464940255d.roa (raw, json)
Hash identifier: kS0nvReJoNnUlWpq9KaFLtlZdlcrbdwUxIEQAwHxhPA=
Subject key identifier: 4E:43:89:27:26:A5:65:F5:FA:C1:FA:65:4A:93:77:36:1F:8E:FD:19
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584DEFE5BB2A89FF6A48F93F6D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfc727b1-d264-3057-aeac-60464940255d.roa
Signing time: Sun 24 May 2026 06:22:39 +0000
ROA not before: Sun 24 May 2026 06:22:39 +0000
ROA not after: Sat 22 Aug 2026 06:22:39 +0000
asID: 198087
IP address blocks: 74.2.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 27 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ef:e5:bb:2a:89:ff:6a:48:f9:3f:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: May 24 06:22:39 2026 GMT
Not After : Aug 22 06:22:39 2026 GMT
Subject: CN=1273d239-5b5f-4f9f-8961-84c99e28b889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:bd:ab:19:8c:e5:9e:ed:64:e3:a4:05:4e:
d6:f3:a9:30:a9:2f:d3:4f:09:84:b5:fd:26:38:e6:
4b:7c:ab:bb:c9:8e:ae:6f:c9:ae:19:eb:bb:f6:df:
f7:b1:43:e1:ba:c8:23:b7:ee:78:f2:83:01:22:3e:
b6:92:3d:27:97:b5:3a:28:8a:e4:43:d8:8e:f5:4f:
e4:5e:ea:8d:ad:8c:4e:f8:0e:4b:c5:bc:19:51:6c:
26:53:bf:1b:68:8a:8d:55:f3:f8:3e:20:a1:af:94:
49:65:d4:42:49:7b:50:80:76:2a:fc:34:1a:3f:0c:
47:1a:8d:30:58:9d:4f:e6:19:89:d7:de:e4:94:90:
b9:6c:35:67:46:51:ae:24:50:86:44:d9:62:f8:7d:
a4:d6:87:42:17:64:2e:d3:3f:40:b5:62:dc:9a:e9:
f6:a2:f8:dc:6c:eb:a5:c4:dd:c8:c0:65:cc:93:49:
4a:d1:2a:63:bd:22:88:71:fc:35:f1:92:bd:09:96:
24:8a:c0:2d:a2:4c:71:0b:a4:b2:81:0b:49:79:d7:
63:e1:76:cd:70:23:f6:7a:c3:02:e1:5c:f8:22:eb:
cc:96:dd:aa:82:d5:b0:b6:34:a9:e7:bb:43:63:34:
1f:07:86:d9:9d:26:9f:d8:a9:63:fd:4c:5f:8b:24:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:89:27:26:A5:65:F5:FA:C1:FA:65:4A:93:77:36:1F:8E:FD:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfc727b1-d264-3057-aeac-60464940255d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.2.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:02:fb:53:3f:dd:f8:7a:0f:52:f2:83:63:f8:8d:72:b4:43:
ae:9d:85:98:67:de:e0:06:aa:02:57:1b:d3:1f:75:0b:80:d6:
40:cb:1e:42:e9:d8:64:e4:6f:83:26:76:6f:88:d9:18:87:f5:
c1:0e:a4:b6:bd:66:2a:26:a2:89:2b:99:09:38:98:2f:7f:90:
16:6c:96:7b:66:8e:64:42:7b:87:0e:4b:e0:c6:8d:9c:2c:d4:
c8:ae:f2:ae:81:cd:86:c6:ee:3e:0d:a4:2e:65:95:c5:7e:4f:
f8:ca:7c:2c:e8:f8:9c:6b:4b:4f:08:96:fc:fc:0c:fa:5a:d0:
dc:b6:a8:f9:94:ce:91:e6:78:8c:91:dc:b7:e2:49:ce:f8:d2:
6e:ed:1e:e6:af:ea:09:9e:be:98:b1:a7:ff:df:78:71:4c:27:
17:c8:69:b9:35:ca:18:06:30:c2:a6:2f:63:8b:86:df:4e:66:
88:e7:3b:9d:c2:17:fa:09:39:40:dc:06:c2:01:d8:f1:3c:93:
ed:f2:31:1a:06:9c:8b:5a:f8:f1:63:fa:8d:13:44:24:9c:db:
6f:d7:9d:53:50:fd:ce:99:d7:09:9a:0e:e8:a9:2d:1a:6f:3c:
1f:5f:3d:e6:9e:43:0b:75:20:8a:66:61:8a:2c:22:e2:0a:cf:
74:fb:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:30:50 2026 by rpki-client