
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa
File: db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa (raw, json)
Hash identifier: efYSmwk9h81pBCzoO7t2v2p89ORseaJ7bSO9IHEs9ck=
Subject key identifier: 52:4D:20:F1:F3:E4:FA:21:36:D1:7A:46:AB:E9:30:30:BD:F7:16:12
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D67DFC894349C903F1C5D9C40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 834
IP address blocks: 74.49.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:c8:94:34:9c:90:3f:1c:5d:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=ef7fcc26-ddbd-4ee6-bad3-042f689cb40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:bf:64:38:6a:e5:c7:42:89:f3:b6:06:50:
10:7f:75:a2:07:6a:49:f2:d3:a8:6b:45:77:29:17:
5a:71:7d:1d:7a:33:52:97:ab:77:aa:71:c1:35:18:
ce:0b:1f:d5:39:f6:ce:1d:8e:49:44:e5:fc:4b:cc:
1e:c2:1e:e6:fe:5c:49:94:3a:a1:3a:64:64:30:9b:
f5:f0:d6:b1:b1:c6:18:9a:f9:79:fa:62:9e:e4:df:
8e:a8:6b:52:5f:ba:37:ad:77:8a:25:bb:01:8d:18:
4e:43:0c:a5:ca:c2:a4:fe:59:51:46:a2:15:1e:54:
72:1f:20:18:65:0b:17:4e:e9:61:33:01:a5:9c:71:
74:07:85:27:4c:a1:61:b9:26:db:fc:a7:74:3b:36:
89:52:06:7b:fd:8b:d2:a5:7c:a0:c9:58:5e:5a:11:
76:f9:98:32:2f:52:20:72:6f:97:67:ec:91:8b:6e:
8e:7d:56:d4:0f:c7:62:4b:55:9e:2e:88:0e:3a:9d:
ed:a5:75:e8:6c:35:a0:df:b9:d3:11:e1:29:ed:2a:
5d:0b:a7:b5:a9:aa:0f:6b:23:13:79:08:4d:87:98:
a1:90:56:18:95:41:ad:e5:f0:e6:8a:f1:92:7a:d9:
03:12:e4:bc:55:c6:bb:f5:2b:66:f8:4b:ff:9b:8a:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:20:F1:F3:E4:FA:21:36:D1:7A:46:AB:E9:30:30:BD:F7:16:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
74.49.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:57:4f:17:db:a9:c1:c8:e4:ca:bf:b0:6f:bb:0b:22:c5:91:
8a:a6:08:d0:a7:a0:47:a2:ec:1b:68:17:00:a5:2d:6c:3d:4a:
4b:22:b7:73:3e:a3:ec:bc:1e:88:e4:95:85:9f:71:41:e0:38:
1e:a9:a6:91:87:2e:a3:a0:2d:29:94:a4:87:a1:f8:6b:3e:13:
1e:ae:ed:ff:3d:6d:ea:13:ec:5f:23:5a:39:42:26:57:c1:77:
89:c0:de:e8:87:b1:7f:e1:6d:43:59:cc:98:56:e2:f9:c4:ae:
85:95:6e:e2:c5:3a:6e:c2:93:c5:d1:0c:78:e9:50:65:38:23:
90:78:83:d1:6b:95:ee:0d:fb:1a:ab:24:43:d9:46:fc:d6:54:
35:96:8a:ad:8f:54:c9:aa:63:02:48:e5:77:e4:22:47:e8:80:
76:9b:8f:f6:0e:e5:55:c3:9b:57:48:cf:d5:fa:2a:de:27:27:
0f:6a:52:01:8f:d4:0a:43:d2:d3:9f:4c:7b:29:8d:6f:92:23:
d0:f5:fd:6d:fa:ff:47:1e:01:6f:21:7e:8a:c9:d6:6a:86:75:
48:14:b8:2a:d0:e6:38:00:3b:8f:12:e3:08:f8:db:5b:db:95:
6f:cb:93:f5:7a:61:c4:df:87:54:79:4c:a0:8a:8d:b8:ee:3d:
4e:15:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:31 2026 by rpki-client