
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/baf0555a-53b1-376e-b6d7-94fcc15dc0d8.roa
File: baf0555a-53b1-376e-b6d7-94fcc15dc0d8.roa (raw, json)
Hash identifier: Xz+mTBVw3qYHkgfPtLGfrrgiBvxzRgtQ0n1KJoRaOEM=
Subject key identifier: 14:38:75:1A:B6:89:DC:5C:46:F0:6E:E5:37:F5:F8:CF:93:B0:E7:21
Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial: 010D0C9F4328584D5024F0E2CAFFFF2E5275F940
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/baf0555a-53b1-376e-b6d7-94fcc15dc0d8.roa
Signing time: Sat 28 Mar 2026 01:00:31 +0000
ROA not before: Sat 28 Mar 2026 01:00:31 +0000
ROA not after: Fri 26 Jun 2026 01:00:31 +0000
asID: 7018
IP address blocks: 74.122.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:50:24:f0:e2:ca:ff:ff:2e:52:75:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
Validity
Not Before: Mar 28 01:00:31 2026 GMT
Not After : Jun 26 01:00:31 2026 GMT
Subject: CN=def59b6f-754b-4d3c-919f-03f92c25b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:d3:fc:4d:03:54:0d:c0:ab:46:99:3b:a3:
7b:52:67:24:11:10:55:68:06:56:61:22:50:50:c9:
c7:b4:5e:d9:53:b2:80:7f:d1:71:32:61:99:e3:fc:
d7:11:a0:78:5a:08:4d:5f:f9:2b:14:65:e0:3b:43:
ec:bd:69:3c:97:6d:66:71:53:c3:10:09:93:01:36:
83:da:39:e8:8f:1c:3d:15:70:66:e3:ee:05:15:e6:
f5:dd:c5:00:3c:40:31:65:74:ff:af:52:5b:aa:bd:
04:a0:77:f5:59:ca:b3:09:c4:af:c9:93:93:13:ff:
6b:4c:f9:ca:bc:7a:79:6d:07:fb:55:68:f6:f3:81:
3f:88:b1:96:36:3b:47:6c:b1:b6:81:12:da:28:12:
93:74:8d:e8:3b:b9:ab:54:8c:c3:88:64:b6:1f:e3:
35:0a:e6:e1:58:52:00:76:37:0f:fa:d4:b8:75:65:
c4:1d:ca:36:bb:d7:6d:aa:32:36:2e:7e:dc:f9:82:
4e:3e:90:7b:57:19:47:55:13:5a:c5:96:1f:83:ef:
f9:80:cc:7e:84:e8:bb:6b:0b:70:30:57:10:73:f4:
84:ef:68:e5:48:ab:69:e2:e9:81:24:e1:63:a1:5c:
1f:de:e2:37:05:a0:8d:51:af:5f:03:a4:2a:aa:91:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:75:1A:B6:89:DC:5C:46:F0:6E:E5:37:F5:F8:CF:93:B0:E7:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/baf0555a-53b1-376e-b6d7-94fcc15dc0d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
X509v3 Authority Key Identifier:
keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
sbgp-ipAddrBlock: critical
IPv4:
74.122.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:d2:bd:2b:94:c2:c7:c6:93:ea:d7:48:d6:3b:bf:ec:26:ca:
8d:47:4b:88:fd:2e:bb:c0:dd:03:56:b6:52:0b:5f:d1:30:9e:
6b:14:24:14:aa:d3:5b:ce:bb:43:2c:9e:cb:c9:94:39:2e:06:
26:31:f9:76:2c:a8:13:35:f0:4e:ea:2b:d4:a9:8e:9b:e3:cb:
5f:18:3f:7b:d5:b4:dd:60:ba:41:e3:ce:7a:f5:f0:55:94:44:
42:b5:3f:79:25:bd:f0:8d:62:64:c9:c3:e0:64:23:9c:3e:18:
47:60:0e:5c:85:86:10:20:37:fe:d0:03:d5:ac:d2:9e:6e:0b:
df:93:8a:c4:0a:8e:be:64:eb:9f:4d:f2:76:15:16:51:fe:23:
cf:d5:b9:12:66:01:03:a6:c0:6b:ec:0e:8d:e6:97:34:fe:ad:
3c:cb:8a:f7:bf:3e:9e:3c:98:9f:09:9e:fa:05:fb:91:af:fa:
a7:e2:29:66:cb:44:e6:9c:f1:52:ee:72:32:f2:3d:b0:b3:3c:
90:1c:5c:43:b7:9e:ec:6e:47:df:39:91:e7:b8:c0:84:80:18:
e7:d2:60:42:29:42:2e:97:a5:49:8d:e7:b5:9a:9f:55:05:e9:
b0:e1:75:e1:e9:98:d2:11:1c:b3:e8:b1:ea:43:ee:df:2c:c8:
1d:69:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:02 2026 by rpki-client