
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa
File: ab4c49e6-70a7-364a-859e-9e88bba251d9.roa (raw, json)
Hash identifier: WcKrakShCR5WBHlSDwhABcbdm1p4Pr3nwsu/m9NFwDg=
Subject key identifier: B4:71:8E:70:7E:BA:41:EA:D1:4F:39:C6:49:A0:F8:19:2A:C4:4D:F3
Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial: 010D0C9F4328584EA794179453983392A4F51BC0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 54518
IP address blocks: 209.143.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:17:94:53:98:33:92:a4:f5:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ab9c72e2-b6c7-435f-af9a-43eae6b7e196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:7e:d4:ff:99:0a:20:c2:58:2b:a7:82:c1:
ae:b8:3d:f1:80:e1:6b:32:e9:c8:22:26:fc:1d:f7:
0a:15:c9:69:cb:08:e0:34:7e:9f:a8:c6:b7:d0:72:
e6:14:90:79:c3:99:b2:26:b7:70:29:3c:1a:bf:a1:
bd:3a:d6:d7:6e:93:6b:9c:cd:d8:b0:8b:81:6a:b0:
c2:3c:b0:06:cd:e0:d4:1f:c0:9d:5f:8e:fb:90:13:
c6:2e:ef:d4:7c:8f:94:f3:9f:a2:72:67:35:52:21:
19:44:6d:07:de:51:df:a9:6d:80:80:5f:37:e8:47:
29:2f:84:69:3d:b7:e4:d4:a5:38:84:75:ac:65:10:
fd:39:3e:36:f3:34:b8:e2:0b:e4:ae:73:9e:50:b6:
41:8c:e3:a9:58:c3:93:cc:dc:8c:f2:8d:fe:b6:06:
30:e9:b5:98:af:0a:fd:3d:3e:fa:fe:23:97:1e:cd:
04:5f:a8:c3:99:a4:a7:70:8b:f2:83:75:5c:04:66:
56:57:be:5c:84:eb:eb:8f:f8:81:52:3b:1c:96:90:
34:45:43:7e:da:8a:67:6e:4d:c2:cb:f0:98:24:d5:
f1:be:66:00:00:85:01:70:f5:35:b4:f4:88:0d:7a:
7c:6b:e2:f6:03:71:eb:be:b4:9a:43:a1:2b:e1:96:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:8E:70:7E:BA:41:EA:D1:4F:39:C6:49:A0:F8:19:2A:C4:4D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
X509v3 Authority Key Identifier:
keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0b:b1:b4:7a:11:2a:b6:13:88:e7:15:64:1f:53:b5:0e:ac:
ea:3b:70:77:f0:8e:da:19:b9:7a:b6:f6:26:46:96:e1:f4:f2:
49:ef:9b:cd:81:0b:05:dd:b9:0e:0e:15:da:00:3b:23:b2:71:
e4:d8:07:cb:23:69:01:5c:ed:5f:b1:d3:7a:72:38:7e:20:26:
7f:ac:3b:b9:ac:46:74:c5:29:b5:b3:b1:05:8e:45:5b:92:c5:
16:95:98:87:0b:d8:de:1c:fc:9e:e8:53:75:c9:f4:eb:69:49:
00:35:4d:4c:2e:0b:28:b6:31:49:19:30:06:4c:72:86:9f:a8:
8a:79:b0:c9:09:ec:d1:7a:3c:79:af:76:6e:28:ab:9b:bb:38:
6d:d2:2a:c6:72:97:62:ca:a9:1d:0f:13:d2:70:e3:1a:3e:e2:
d7:2c:3e:18:39:f4:c0:6f:b2:b4:3e:78:00:f1:f1:ce:ac:7a:
44:d6:a4:bc:bf:3e:02:d7:00:a5:33:42:56:a2:1c:50:60:e2:
26:58:c2:ff:9f:3a:2e:9f:aa:c5:7b:ce:a6:3e:be:1d:4b:71:
e4:56:71:33:3e:57:ed:eb:06:cf:1c:da:78:7f:9d:01:91:09:
ce:c3:a5:88:fe:52:45:71:84:79:b1:db:3f:e8:2d:d7:02:7b:
b7:fc:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:56:10 2026 by rpki-client