
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa
File: 0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa (raw, json)
Hash identifier: k39iqImY7K9jZ8CNtf+DFtf+RY+OEI5/b30zu1s9j2w=
Subject key identifier: 49:7C:0C:D9:6D:56:79:C2:BD:F4:EA:55:FD:28:57:B8:7A:C2:F8:1F
Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial: 010D0C9F4328584D738FEA4F3A1130D17C6FBB00
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa
Signing time: Thu 09 Apr 2026 17:29:30 +0000
ROA not before: Thu 09 Apr 2026 17:29:30 +0000
ROA not after: Wed 08 Jul 2026 17:29:30 +0000
asID: 812
IP address blocks: 74.198.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:8f:ea:4f:3a:11:30:d1:7c:6f:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
Validity
Not Before: Apr 9 17:29:30 2026 GMT
Not After : Jul 8 17:29:30 2026 GMT
Subject: CN=b1a40699-fd22-4f5f-b712-b16bc2c42117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:90:bd:f0:7a:b8:b8:ce:6d:93:35:8a:37:
3c:40:f3:da:bf:55:07:b5:89:44:bb:e2:1f:45:a2:
32:69:c6:9e:7c:57:26:f1:e5:27:4c:ce:31:e1:92:
15:d4:ff:e6:0d:54:23:62:45:e1:5d:6a:7f:3b:71:
97:b3:4a:61:48:9f:4b:98:a0:42:95:53:8d:20:25:
f3:58:12:65:97:d4:ea:72:f9:a6:e5:5c:0c:04:31:
a6:b1:31:a1:6e:3e:6a:d7:de:4e:44:ef:9b:5d:c0:
b1:79:e0:98:42:7c:29:47:2d:dd:89:f0:38:d4:9c:
d9:bf:a2:30:1b:8e:84:c9:3c:f4:78:4d:4a:f5:64:
0c:26:70:81:fe:66:19:ea:cf:55:73:f3:aa:f3:bc:
2c:a0:0a:ef:28:d5:38:32:3b:6b:02:21:54:79:85:
cc:6b:5d:8f:14:c9:a0:33:ee:07:de:1b:22:d3:ab:
95:ee:f2:8f:16:fc:17:07:3e:c0:99:8b:95:c8:6a:
d2:c2:3e:b1:a1:08:50:e8:91:ca:d9:80:e6:5e:9c:
eb:d0:b5:5d:df:e5:c9:ca:1e:80:b0:1f:ba:bd:d1:
60:d1:0a:3d:38:2c:c2:db:20:f9:27:bf:9a:7a:bd:
bf:d9:0a:a1:03:6e:2a:e4:3d:18:70:87:50:83:12:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:0C:D9:6D:56:79:C2:BD:F4:EA:55:FD:28:57:B8:7A:C2:F8:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
X509v3 Authority Key Identifier:
keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
sbgp-ipAddrBlock: critical
IPv4:
74.198.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:f8:b1:13:5c:ea:04:e4:4f:fa:e1:75:12:5b:09:3d:bb:38:
b1:be:03:03:3e:0c:ea:65:ae:a4:81:39:d6:03:75:5b:09:f9:
4b:bf:f6:a3:e3:6e:48:47:c5:3d:48:a4:46:cd:25:84:ea:3e:
63:31:cd:b0:fc:2f:4f:9e:0c:c1:5e:cb:2e:55:33:cd:54:36:
88:2d:14:c5:30:39:64:fb:e9:e4:20:b6:e0:f7:17:9d:5a:86:
27:79:63:66:80:69:71:87:f6:40:93:e1:41:f5:8f:9f:79:f4:
5a:df:ef:d4:a4:9b:bc:69:d2:75:e9:29:a0:b0:cb:22:3b:f2:
bb:b1:40:66:53:82:12:b0:c4:d3:4c:1e:d0:99:aa:38:fc:29:
8a:dc:1b:70:e5:de:09:e0:ff:08:67:95:c0:74:aa:8c:0f:1d:
cd:ac:fa:9d:92:32:d1:ee:86:34:41:6e:9d:f5:e5:ea:43:36:
dd:56:d0:d4:90:d5:8f:14:54:c0:1e:5d:05:25:c6:62:af:1b:
b6:73:6c:c0:9e:2b:d0:37:76:73:0a:4d:c3:78:58:c8:cd:2b:
d6:dc:9f:19:ea:97:8b:2c:69:f2:4f:b8:e7:6f:8d:82:e7:01:
2e:42:60:33:04:56:85:6a:a1:cb:58:20:e3:50:de:24:a1:06:
f2:46:93:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zj+pPOhEw0XxvuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw
YTMyMB4XDTI2MDQwOTE3MjkzMFoXDTI2MDcwODE3MjkzMFowLzEtMCsGA1UEAxMk
YjFhNDA2OTktZmQyMi00ZjVmLWI3MTItYjE2YmMyYzQyMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7aQvfB6uLjObZM1ijc8QPPav1UHtYlEu+If
RaIyacaefFcm8eUnTM4x4ZIV1P/mDVQjYkXhXWp/O3GXs0phSJ9LmKBClVONICXz
WBJll9Tqcvmm5VwMBDGmsTGhbj5q195ORO+bXcCxeeCYQnwpRy3difA41JzZv6Iw
G46EyTz0eE1K9WQMJnCB/mYZ6s9Vc/Oq87wsoArvKNU4MjtrAiFUeYXMa12PFMmg
M+4H3hsi06uV7vKPFvwXBz7AmYuVyGrSwj6xoQhQ6JHK2YDmXpzr0LVd3+XJyh6A
sB+6vdFg0Qo9OCzC2yD5J7+aer2/2QqhA24q5D0YcIdQgxIscwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEl8DNltVnnCvfTqVf0oV7h6wvgfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl
MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMGU4NTU5NTgtOWYwYS0z
ZDdiLWFiZmUtMTEzNWRjOTc0ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3
ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0
MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw
Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsb0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv4sRNc6gTkT/rhdRJbCT27OLG+AwM+DOplrqSBOdYDdVsJ+Uu/9qPj
bkhHxT1IpEbNJYTqPmMxzbD8L0+eDMFeyy5VM81UNogtFMUwOWT76eQgtuD3F51a
hid5Y2aAaXGH9kCT4UH1j5959Frf79Skm7xp0nXpKaCwyyI78ruxQGZTghKwxNNM
HtCZqjj8KYrcG3Dl3gng/whnlcB0qowPHc2s+p2SMtHuhjRBbp315epDNt1W0NSQ
1Y8UVMAeXQUlxmKvG7ZzbMCeK9A3dnMKTcN4WMjNK9bcnxnql4ssafJPuOdvjYLn
AS5CYDMEVoVqoctYIONQ3iShBvJGk2A=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:20 2026 by rpki-client