
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5fb19f3-2a17-3353-a710-5cc79c18db4f.roa
File: b5fb19f3-2a17-3353-a710-5cc79c18db4f.roa (raw, json)
Hash identifier: 9PFlFBNrVT9aTeFUW2xRUfLCHlDMqQEtn27S1KInjaw=
Subject key identifier: 0D:7B:C8:50:82:04:86:E7:00:82:B9:C8:FB:86:DB:F3:03:BC:CE:6C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D55BCB5221D13D2696BE7AE60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5fb19f3-2a17-3353-a710-5cc79c18db4f.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 30036
IP address blocks: 74.84.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:b5:22:1d:13:d2:69:6b:e7:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ddb1fed2-1d55-4aac-9516-cae1c5cfe84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:11:4f:ba:36:3a:c1:ee:61:d5:ff:bf:c6:
88:92:3f:68:5f:f7:af:0f:82:31:a8:ac:21:67:3a:
1d:a0:8f:f0:a3:03:fc:ae:bc:91:05:41:46:84:ff:
02:cc:fb:a5:e2:dc:0d:2f:8e:b3:9f:e7:d6:08:e9:
ff:3e:4c:d0:69:49:2e:da:51:51:4c:0c:90:c6:3d:
1f:28:93:c7:82:1b:a0:8c:fb:79:be:25:27:9c:60:
2d:22:7b:57:e0:c6:42:cc:4b:0a:a8:73:bd:20:7b:
45:f0:06:73:c0:97:53:c9:b9:d8:bd:84:e6:c7:04:
64:c0:c3:71:08:f3:01:2a:d7:0f:70:92:df:d0:39:
25:0b:93:1b:ad:16:f0:e8:37:06:1c:55:98:c2:07:
1d:24:e3:c4:03:b6:44:16:9e:18:ab:4a:2a:68:38:
68:c3:2d:e3:46:18:01:f3:35:43:01:f6:bc:8b:ef:
86:d9:5d:c1:ae:d3:53:1f:2e:ce:97:1e:76:4b:ec:
0f:7f:a4:c8:26:fc:7d:95:e7:99:34:55:d5:9a:8e:
5c:8f:69:4c:eb:5f:44:9a:f1:37:d3:1d:da:f8:46:
4b:fe:ad:9b:1d:b0:d1:ef:ae:dc:1a:34:a1:73:34:
be:59:0a:36:a1:8f:bd:91:25:cf:35:72:3d:0b:6f:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:C8:50:82:04:86:E7:00:82:B9:C8:FB:86:DB:F3:03:BC:CE:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5fb19f3-2a17-3353-a710-5cc79c18db4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
74.84.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:7f:32:95:6e:f4:5f:99:8a:d2:8f:08:4a:27:26:c8:40:57:
17:0c:de:68:65:ce:d4:21:db:a9:65:37:e8:76:45:9c:ba:83:
71:09:b2:30:01:fa:66:8a:6b:4f:c6:1e:c9:08:7e:31:35:1e:
3b:73:f4:76:c5:1e:df:90:4f:b7:3d:4a:87:a4:6d:fa:2b:f8:
e6:ad:77:cf:0a:5e:22:4f:3a:17:c4:e9:82:81:4e:f3:e2:cb:
52:7f:ba:ae:ed:95:41:bd:97:12:32:89:a4:ee:26:58:b6:c0:
40:d6:92:70:fa:ba:d9:ed:25:9f:7d:cf:95:61:7f:9d:23:58:
63:5a:ad:64:aa:01:5e:44:12:74:b1:75:10:ca:ae:9f:61:68:
d2:b4:f7:10:a3:f7:dc:d6:c9:40:7b:8e:de:88:99:41:08:46:
9e:96:6c:9d:dd:4d:93:20:f4:5e:45:80:13:90:71:2f:f7:80:
fc:a7:37:8a:11:21:bb:6e:bb:c8:58:a6:7e:40:8f:4b:0c:b5:
c4:82:18:12:ed:d3:4c:04:ed:7e:f8:93:73:a4:5e:91:eb:b4:
46:50:f7:d6:ad:5d:a0:56:1a:2e:46:40:07:b2:d2:fc:24:23:
44:86:df:22:ff:34:db:d9:3b:f2:6c:85:2b:f5:69:c0:42:1c:
3a:08:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:17 2026 by rpki-client