
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
File: 4a0a8425-216c-35cc-813a-362b9fe28985.roa (raw, json)
Hash identifier: AXJ2jgcdGIPZ8FXlFQRghFKUWqObVOv7b5nNdsfHPdQ=
Subject key identifier: 61:1A:96:84:2E:1D:9A:27:E1:4D:1D:04:6F:EE:87:BE:CE:33:ED:7A
Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial: 010D0C9F4328584EA7876E4EF44FB7815D558200
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19503
IP address blocks: 74.113.149.0/24 maxlen: 24
2620:7d:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:6e:4e:f4:4f:b7:81:5d:55:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e0e85369-d841-40cb-9691-b95e7d2a9473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:e6:d5:42:0d:03:bb:8c:1d:98:e9:7a:4a:
b5:99:1d:65:0d:07:9f:69:60:15:32:31:d8:27:52:
76:20:8e:88:6b:99:eb:6e:36:8b:e8:35:49:be:62:
c5:7a:dd:c4:f1:e3:0d:ed:7c:1d:89:ff:b7:af:ee:
6b:10:cc:55:f0:cf:9c:3c:88:8e:6b:a7:a5:cd:76:
35:c7:c8:bd:d1:41:f1:22:0a:9d:61:94:de:4c:ec:
e4:39:32:d9:57:fb:bc:bb:1b:8b:5e:53:2f:60:5b:
02:2a:89:17:e7:61:5b:33:2a:f7:aa:5b:23:87:13:
80:3c:57:b7:75:26:17:53:65:79:2e:28:be:ad:13:
d2:9c:69:e9:0e:00:b3:ef:74:4c:cb:13:d5:65:44:
0e:e6:72:4f:ee:6e:94:08:99:14:f8:ff:58:e1:02:
86:09:08:30:d9:55:32:24:f6:6a:24:b1:66:5f:7d:
c5:04:a9:52:27:9c:83:ac:34:87:ad:7a:1e:21:25:
c2:af:59:5f:86:67:f5:10:6f:44:f8:20:e6:e5:b8:
71:b5:81:db:df:7a:22:5d:e6:b4:f6:d8:42:5d:ea:
1d:4c:77:fb:bc:e2:bf:5d:3f:a1:3a:f9:f1:44:dd:
c5:91:3d:88:38:93:da:22:80:2c:c1:6f:2c:bc:bb:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1A:96:84:2E:1D:9A:27:E1:4D:1D:04:6F:EE:87:BE:CE:33:ED:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
X509v3 Authority Key Identifier:
keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.149.0/24
IPv6:
2620:7d:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:5b:0d:8d:10:78:cd:e3:23:08:ed:3f:c8:9c:b8:a3:0e:69:
42:bd:14:e5:40:b7:a9:3d:8a:b1:d1:4b:0e:08:97:93:19:10:
bc:44:20:e6:d8:4d:b4:41:2e:cd:c2:91:0b:19:12:a9:3a:90:
e7:f4:5e:bb:46:5c:49:fc:52:89:8b:17:82:79:4b:58:46:87:
6d:9f:63:64:ad:93:45:ad:33:99:f4:7b:12:3c:91:77:7e:ea:
f0:92:e2:b3:fc:70:b7:b8:a0:37:00:87:2e:fd:8c:64:f1:a3:
7c:ca:77:90:f9:cc:92:ce:73:0d:f9:a2:90:9c:ae:9f:14:46:
1e:2b:c5:10:53:88:2b:e1:25:27:f3:08:1f:16:b5:0e:8c:81:
2e:00:c0:05:29:f9:81:59:a1:12:eb:6a:0d:71:3a:48:24:e4:
69:3b:ce:49:cc:4e:9f:f2:0b:05:7f:43:bd:1c:46:1e:d1:e7:
14:9c:d9:9c:14:5f:98:5b:b8:32:65:32:78:0f:d2:be:85:eb:
c2:4d:2e:ce:39:44:b3:a1:81:08:09:1b:10:a7:f1:e9:76:08:
e6:8e:8d:27:1e:3f:88:31:a3:8e:92:66:36:14:3b:8a:f6:eb:
85:15:82:02:d1:bf:bf:20:3b:76:99:96:7d:35:9d:09:e6:70:
c6:63:86:28
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE6nh25O9E+3gV1VggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3
MTQ0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTBlODUzNjktZDg0MS00MGNiLTk2OTEtYjk1ZTdkMmE5NDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDfm1UINA7uMHZjpekq1mR1lDQefaWAVMjHY
J1J2II6Ia5nrbjaL6DVJvmLFet3E8eMN7Xwdif+3r+5rEMxV8M+cPIiOa6elzXY1
x8i90UHxIgqdYZTeTOzkOTLZV/u8uxuLXlMvYFsCKokX52FbMyr3qlsjhxOAPFe3
dSYXU2V5Lii+rRPSnGnpDgCz73RMyxPVZUQO5nJP7m6UCJkU+P9Y4QKGCQgw2VUy
JPZqJLFmX33FBKlSJ5yDrDSHrXoeISXCr1lfhmf1EG9E+CDm5bhxtYHb33oiXea0
9thCXeodTHf7vOK/XT+hOvnxRN3FkT2IOJPaIoAswW8svLunVQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFGEaloQuHZon4U0dBG/uh77OM+16MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh
N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvNGEwYTg0MjUtMjE2Yy0z
NWNjLTgxM2EtMzYyYjlmZTI4OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy
NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5
NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2
NWRjOTcxNDQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASnGVMA8E
AgACMAkDBwAmIAB9AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABVsNjRB4zeMjCO0/yJy4ow5pQr0U5UC3
qT2KsdFLDgiXkxkQvEQg5thNtEEuzcKRCxkSqTqQ5/Reu0ZcSfxSiYsXgnlLWEaH
bZ9jZK2TRa0zmfR7EjyRd37q8JLis/xwt7igNwCHLv2MZPGjfMp3kPnMks5zDfmi
kJyunxRGHivFEFOIK+ElJ/MIHxa1DoyBLgDABSn5gVmhEutqDXE6SCTkaTvOScxO
n/ILBX9DvRxGHtHnFJzZnBRfmFu4MmUyeA/SvoXrwk0uzjlEs6GBCAkbEKfx6XYI
5o6NJx4/iDGjjpJmNhQ7ivbrhRWCAtG/vyA7dpmWfTWdCeZwxmOGKA==
-----END CERTIFICATE-----
Generated at Thu Jul 30 07:09:36 2026 by rpki-client