
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa
File: 9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa (raw, json)
Hash identifier: fbKKrsq7vjQ71XH1VfSg8E6dSuc6dpzPnutEhgaWq4M=
Subject key identifier: 8D:81:05:9D:23:EF:1F:2A:C9:44:EC:DE:E4:29:16:94:4F:29:B1:F1
Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial: 010D0C9F4328584D59EA78909110928F88DF6F80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 2734
IP address blocks: 208.74.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:78:90:91:10:92:8f:88:df:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=5a1d251b-70df-44b4-8d64-cd92c279879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:ee:10:53:66:98:a0:b4:56:67:04:6f:48:
5d:fd:6c:84:71:94:62:05:a9:e4:8c:a4:aa:58:98:
d5:50:35:5c:6f:ff:06:6a:46:dc:91:d1:65:f6:d6:
f5:e0:9c:87:b9:e6:c9:87:59:dd:69:2d:eb:85:2a:
13:f4:f4:32:f4:01:48:5b:7b:68:16:40:6c:d2:52:
54:6b:e7:58:6c:1d:72:23:9d:03:eb:02:da:3e:a9:
74:8e:29:8f:05:c9:69:d8:c7:7a:ed:f2:41:65:cd:
1f:05:51:98:36:58:19:dd:c7:13:68:ee:a7:a1:2f:
1b:3f:de:d4:47:f0:82:44:ac:4f:b8:42:78:2c:cd:
98:a7:dd:27:f2:cf:47:5e:94:1d:50:be:c8:a8:53:
a1:00:55:23:14:18:03:d2:48:f8:d7:49:e3:15:6b:
1d:72:c5:cf:aa:cd:85:60:4e:14:ab:61:45:9b:85:
bd:ec:43:ae:8c:42:f0:4b:9b:f7:84:9f:c3:55:2b:
55:b5:86:56:07:27:d2:76:a1:d0:ea:fa:e4:e4:ed:
8b:89:0c:30:15:aa:69:d5:5f:58:00:b1:fe:c8:35:
f9:bb:b7:69:19:de:15:53:83:47:87:6e:09:34:ad:
45:8f:af:40:40:e4:41:28:a1:42:0f:32:d3:6f:c0:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:05:9D:23:EF:1F:2A:C9:44:EC:DE:E4:29:16:94:4F:29:B1:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
X509v3 Authority Key Identifier:
keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
sbgp-ipAddrBlock: critical
IPv4:
208.74.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:23:23:a2:0a:cd:ab:51:ed:e5:0e:dd:f8:bc:79:f3:10:16:
88:98:4a:9d:11:7a:6d:76:e9:15:cd:dd:1c:8f:f7:51:5f:25:
cc:c6:92:c7:88:4a:c2:f7:a8:76:27:82:87:67:25:82:3c:e8:
78:2b:e2:0e:a4:fc:8b:eb:48:78:d3:6e:ea:59:35:47:9e:ae:
c9:2d:5b:40:b2:30:92:cc:90:56:d5:44:7e:30:99:10:d9:6f:
78:70:f7:ed:48:91:63:3e:f7:31:c7:5c:f1:ae:a6:60:35:f3:
d1:59:fc:c6:c6:26:e4:d5:50:db:c1:e8:13:76:11:f2:98:6d:
ee:dd:19:4a:70:90:1d:aa:2b:f6:94:41:b9:95:c7:94:0c:3d:
08:e4:6f:b7:dc:8e:b7:6b:a6:56:71:ad:e5:4d:08:5d:42:8d:
45:aa:39:69:78:4a:b9:08:b9:d7:84:e5:af:e1:71:66:81:64:
65:b7:f2:f2:36:b8:5e:3a:e3:94:2c:9c:de:49:c7:5f:fd:2c:
5a:23:a5:3a:72:a7:a8:6b:9e:8b:31:4a:5a:cd:1e:83:8f:d0:
2a:35:f7:82:73:93:42:6e:dc:dd:f5:23:7a:a8:c6:f0:52:b9:
ab:a8:d1:9d:f1:45:59:9f:d8:e5:14:e4:70:ae:b6:4f:68:2f:
8e:78:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:08 2026 by rpki-client