
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa
File: ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa (raw, json)
Hash identifier: UotynjTH1dJSYm5kPTbh0tevzGP2ShVsHeeRMKXlXP8=
Subject key identifier: 40:E0:D3:DA:3B:EF:BF:E0:96:C1:63:DC:6E:F4:30:C3:1E:A0:51:32
Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc
Certificate serial: 010D0C9F4328584F0D6CE0C1A5FC880FF0AB1700
Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 14543
IP address blocks: 74.207.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:e0:c1:a5:fc:88:0f:f0:ab:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=af4ebb67-04a5-4f24-84f0-0373a29a356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:e6:cb:e0:44:05:c2:d3:34:3a:01:e1:f2:
03:a8:d2:06:c3:cc:91:1c:df:4e:dd:01:da:59:59:
91:ae:4c:f7:f3:af:d9:69:3e:3e:80:77:ed:d4:aa:
6e:b1:52:e1:88:e0:e4:c2:e4:cd:6d:9f:3c:d7:06:
16:06:a0:38:35:31:40:b9:23:9e:4e:8a:10:e9:12:
09:88:8f:e8:ea:f2:a4:52:4c:63:81:85:3d:c1:17:
70:35:56:7e:52:69:a5:cf:36:94:9f:79:02:4f:06:
01:a1:3c:7e:a3:86:bc:14:80:ce:1b:d4:77:c5:75:
74:96:f6:92:1c:22:be:4a:6f:d4:e5:93:eb:36:4f:
63:7a:50:b1:e7:85:75:a8:ca:88:b7:31:43:b7:70:
f0:4b:b9:b0:af:0d:59:e7:1b:e3:db:e5:b3:28:17:
4e:b3:d2:a5:31:66:f1:e2:ef:0f:88:fe:3b:68:13:
d2:44:9d:1c:c8:d7:80:6a:b2:80:eb:f4:55:ba:1c:
da:91:57:9c:40:e1:5c:24:55:5f:6d:cf:cd:54:88:
57:26:7d:73:e2:b1:b0:95:15:b7:25:12:0b:80:09:
01:29:fc:6e:2e:ba:64:a7:45:36:7a:3b:3c:0d:8a:
e4:4e:82:3b:fe:fb:c9:bd:a9:2a:f3:0a:de:e5:f0:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E0:D3:DA:3B:EF:BF:E0:96:C1:63:DC:6E:F4:30:C3:1E:A0:51:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
X509v3 Authority Key Identifier:
keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
sbgp-ipAddrBlock: critical
IPv4:
74.207.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:89:a3:aa:46:79:a9:b6:55:29:a5:de:0c:ed:3f:40:e6:b5:
f6:6b:cd:dd:ce:20:48:63:80:34:9e:66:c1:0a:ed:7b:b0:90:
dd:22:ff:9f:6e:9b:10:e2:42:a7:ed:20:71:ee:ae:8d:de:07:
a4:69:10:ca:25:c4:ff:09:0f:29:9b:f3:47:10:6d:81:51:df:
17:51:90:e0:8f:42:06:0c:a0:0f:68:fa:5f:83:0a:43:f9:d1:
03:5b:07:20:62:6d:a9:72:7c:92:16:4e:67:5a:69:f0:e4:cc:
d2:d7:37:1f:e0:d8:94:de:c7:e5:65:f0:f6:cb:eb:be:a0:ae:
fe:b7:0f:f0:26:cd:06:a4:30:9d:f6:62:aa:3b:9f:db:31:c9:
be:8e:ef:27:f4:f9:5c:14:f4:b7:80:a1:a5:e0:df:35:2d:c1:
09:55:43:0c:44:a8:60:27:f2:08:1b:06:f3:0b:eb:f7:5c:35:
23:3d:5e:ef:13:7e:6e:2c:1c:78:b2:0f:e4:28:e5:1d:72:95:
f3:28:0c:06:01:d2:6a:af:4a:7b:c8:2d:1e:bc:b9:85:bd:50:
10:13:ba:3e:e2:b8:39:f6:ff:5b:63:35:31:06:ca:62:66:92:
96:d0:03:30:94:9d:4d:0e:e8:34:86:8b:76:ff:44:a4:60:61:
05:db:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:31:23 2026 by rpki-client