
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/0874ffbc-1b44-301a-95a8-805459504f59.roa
File: 0874ffbc-1b44-301a-95a8-805459504f59.roa (raw, json)
Hash identifier: Mu6rdKDI9CVP1oghJCGpoSoptY9Ye7/aDAl1GpeDW1Y=
Subject key identifier: 74:DF:5C:77:00:A6:43:FE:08:F4:21:21:B0:CB:44:B4:7E:F7:F8:E2
Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial: 010D0C9F4328584EA79751505A149DCA81233400
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/0874ffbc-1b44-301a-95a8-805459504f59.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14291
IP address blocks: 24.170.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:51:50:5a:14:9d:ca:81:23:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=06b59bd0-9d9e-4fda-89c8-c314d55f18ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:57:c5:24:23:e8:74:dc:27:2f:b8:03:27:
07:c2:cb:7d:7b:6b:01:ae:da:9b:be:dc:33:d9:82:
4c:f0:d6:0d:46:38:40:ec:ac:80:48:6e:47:17:69:
38:f3:ba:ee:40:d3:97:2e:b5:6b:62:20:89:4a:1c:
7f:c4:bb:9b:9e:b4:09:4c:38:9a:f2:29:3b:6f:ef:
ca:c8:c6:23:de:3e:97:42:7d:a7:ca:08:f7:90:90:
96:13:08:0a:e6:02:26:07:7c:cc:88:6b:ee:55:35:
c7:82:21:0d:0c:b0:53:26:98:20:78:d6:09:8e:4e:
72:57:c2:19:b5:7e:e2:d8:12:80:d5:48:10:e3:b6:
90:8d:03:9f:cd:fa:f1:d2:f9:9a:0f:18:cb:a6:50:
29:15:66:29:57:1f:96:31:42:34:5c:7b:d2:16:2b:
39:ea:79:c4:89:4d:cb:3c:30:f8:54:92:fa:7d:2a:
02:8a:b1:fa:58:c3:ef:0d:f8:8f:5d:06:02:37:37:
36:e8:ed:4b:93:9b:9a:9b:cc:7c:a2:08:fa:db:fa:
e1:73:6e:63:b5:97:67:7a:f0:c4:35:b5:2d:f3:2d:
25:2f:8f:32:aa:de:b2:7c:17:e7:f5:c2:34:8b:16:
09:c2:fc:45:6d:28:d9:d1:b5:78:38:70:b0:0f:f6:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DF:5C:77:00:A6:43:FE:08:F4:21:21:B0:CB:44:B4:7E:F7:F8:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/0874ffbc-1b44-301a-95a8-805459504f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
X509v3 Authority Key Identifier:
keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
sbgp-ipAddrBlock: critical
IPv4:
24.170.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:5f:19:f7:61:cb:00:90:1e:24:e8:94:74:8a:af:cb:be:2d:
8e:29:18:36:5f:61:c6:c0:34:71:1b:f6:9d:bc:ba:12:81:c6:
d3:b0:81:79:b9:46:dc:c7:ec:61:27:ae:68:55:65:3a:d2:82:
d9:3e:3c:17:f3:37:e3:9f:05:16:9c:d6:48:a9:f9:0f:b2:fd:
cf:27:7e:3d:fe:36:ae:8c:df:43:8b:b8:2d:20:a4:ff:50:ac:
97:48:05:04:13:af:36:8e:10:56:de:ab:a5:c5:f8:4c:1e:3d:
27:37:0c:12:ef:b7:62:36:b7:37:48:c9:8a:5e:52:4c:21:a9:
6a:bd:10:bd:c3:3d:f1:9d:a9:c5:8f:3b:9d:75:03:a0:e9:8c:
c2:6c:51:d3:f1:c2:da:c6:fc:65:2e:5d:70:30:d8:87:d2:de:
75:48:99:f3:72:7c:4c:ba:5f:1c:0b:b5:8a:27:d0:01:02:f3:
52:b5:fd:14:8f:93:8f:d8:9a:4e:f2:5f:ec:d3:ea:13:fd:f7:
15:dc:35:d6:63:92:ea:97:f1:9e:b9:e8:da:e4:16:bf:3f:1b:
0d:cc:ce:8c:fb:44:87:5d:28:6a:7f:35:e0:fe:9e:62:73:d2:
48:05:46:fe:d2:4a:33:f6:be:5a:6a:60:4b:4d:30:0b:21:8f:
e4:03:88:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl1FQWhSdyoEjNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1
MzQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDZiNTliZDAtOWQ5ZS00ZmRhLTg5YzgtYzMxNGQ1NWYxOGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoFXxSQj6HTcJy+4AycHwst9e2sBrtqbvtwz
2YJM8NYNRjhA7KyASG5HF2k487ruQNOXLrVrYiCJShx/xLubnrQJTDia8ik7b+/K
yMYj3j6XQn2nygj3kJCWEwgK5gImB3zMiGvuVTXHgiENDLBTJpggeNYJjk5yV8IZ
tX7i2BKA1UgQ47aQjQOfzfrx0vmaDxjLplApFWYpVx+WMUI0XHvSFis56nnEiU3L
PDD4VJL6fSoCirH6WMPvDfiPXQYCNzc26O1Lk5uam8x8ogj62/rhc25jtZdnevDE
NbUt8y0lL48yqt6yfBfn9cI0ixYJwvxFbSjZ0bV4OHCwD/bNIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTfXHcApkP+CPQhIbDLRLR+9/jiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm
OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvMDg3NGZmYmMtMWI0NC0z
MDFhLTk1YTgtODA1NDU5NTA0ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1
NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw
NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk
YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKrgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBfGfdhywCQHiTolHSKr8u+LY4pGDZfYcbANHEb9p28uhKBxtOwgXm5
RtzH7GEnrmhVZTrSgtk+PBfzN+OfBRac1kip+Q+y/c8nfj3+Nq6M30OLuC0gpP9Q
rJdIBQQTrzaOEFbeq6XF+EwePSc3DBLvt2I2tzdIyYpeUkwhqWq9EL3DPfGdqcWP
O511A6DpjMJsUdPxwtrG/GUuXXAw2IfS3nVImfNyfEy6XxwLtYon0AEC81K1/RSP
k4/Ymk7yX+zT6hP99xXcNdZjkuqX8Z656NrkFr8/Gw3Mzoz7RIddKGp/NeD+nmJz
0kgFRv7SSjP2vlpqYEtNMAshj+QDiKE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:44 2026 by rpki-client