
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa
File: 33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa (raw, json)
Hash identifier: +j+xyPWsPQOfVMx8/hpsC0Vt8P6Hc1s/e5Z9+/8aVJY=
Subject key identifier: B6:CB:1E:3B:B3:B4:27:6B:41:A6:16:98:F1:E1:37:0F:04:68:DE:3C
Certificate issuer: /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial: 010D0C9F4328584E296F1F7B9D2A0EA75550A9C0
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa
Signing time: Sat 13 Jun 2026 21:00:12 +0000
ROA not before: Sat 13 Jun 2026 21:00:12 +0000
ROA not after: Fri 11 Sep 2026 21:00:12 +0000
asID: 812
IP address blocks: 74.198.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:6f:1f:7b:9d:2a:0e:a7:55:50:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Sep 11 21:00:12 2026 GMT
Subject: CN=11a7c337-f5c1-4d8f-8ee4-9668fc8ce2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:7b:ce:e4:b4:67:fb:a6:f5:2d:67:05:60:
2c:e3:a9:3c:bb:9c:5b:6c:c1:f3:17:17:f0:74:41:
87:75:ee:c8:c5:67:9d:36:79:29:cc:0f:3b:3c:c4:
f4:fc:99:b1:00:1b:a5:9e:1c:90:8c:f2:a2:5a:f7:
bd:31:38:86:ed:e6:15:9f:d3:8c:de:4f:5a:4d:ee:
d9:61:00:ca:4e:a6:91:e3:ba:64:e3:76:aa:88:1c:
10:4b:52:99:26:36:e4:0c:2e:5c:3d:a3:01:c2:18:
81:7a:f6:23:69:b1:1e:4c:77:ff:5f:84:53:95:2d:
bc:2a:93:9d:57:62:38:92:80:fe:4d:05:c5:4a:9e:
47:51:8d:b9:59:be:59:44:58:06:cd:9f:f3:6a:01:
c3:08:00:90:6d:7e:f6:fe:e8:05:d4:c8:d3:78:4f:
a7:49:f5:2e:cd:b9:f4:b4:27:1d:1e:c4:66:d3:8a:
f5:62:75:8d:8c:2e:c7:24:c1:23:6e:d1:dc:c0:70:
d6:35:5e:19:8a:44:31:83:27:3a:1c:11:ca:d1:24:
ba:36:ff:22:b7:d6:43:02:b5:8c:2a:04:54:00:ec:
68:de:c7:7d:1f:97:2c:1e:8f:f3:73:28:cd:b0:cb:
6c:b5:5b:34:5c:58:a1:74:8d:c4:5c:a7:a5:7e:c5:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:1E:3B:B3:B4:27:6B:41:A6:16:98:F1:E1:37:0F:04:68:DE:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/33aad2a5-8536-3054-a0d9-bdce7d0b3de8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
X509v3 Authority Key Identifier:
keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
sbgp-ipAddrBlock: critical
IPv4:
74.198.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2f:2c:2e:ff:43:57:7a:ed:93:78:f3:ce:c8:fc:81:29:51:
a4:c0:6d:5d:1e:6d:c9:06:3e:78:e4:a9:c9:c8:e6:aa:ad:ca:
93:80:ec:e8:2b:17:fe:38:19:f0:fb:53:02:a5:b9:99:df:26:
b4:0e:ce:d0:8a:fd:16:80:2a:d5:20:40:5d:fc:b0:d8:5a:44:
04:58:5f:0d:da:e5:80:34:2f:89:8c:50:ba:78:15:40:4f:63:
8e:43:dc:31:b1:77:94:f5:f4:85:da:27:b5:81:1f:0b:06:56:
54:cb:a7:01:53:ce:65:db:1c:79:84:e0:7d:c3:d3:b4:2a:1c:
d8:83:24:41:31:be:9d:5e:cd:30:81:41:13:4f:f6:97:1f:a3:
66:2e:ff:a1:26:94:24:a5:3f:3a:5a:c8:5f:0e:1c:29:a4:d1:
d2:f5:a6:51:4a:03:5e:4d:25:b8:6a:1c:f1:b9:79:f4:5d:39:
a2:1b:6a:60:ed:20:4d:7c:9c:fd:5d:87:97:a0:24:46:b0:89:
f8:22:28:1c:c3:68:04:20:cf:9c:e1:0f:6a:e2:28:3c:76:6f:
0c:63:90:bc:e7:18:7f:38:52:ee:8c:c8:4d:9b:4b:e9:89:55:
b5:9b:4d:a0:4c:2f:c1:a3:08:8e:4d:8c:eb:7a:e2:a5:f6:36:
8d:6a:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:34:04 2026 by rpki-client