
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa
File: 7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa (raw, json)
Hash identifier: Nh3ACpEg/4im6b5bZMUIhzaKLJClQ8PXgMIYFu+VJVo=
Subject key identifier: 73:A4:A8:88:D2:5C:89:AF:FE:22:93:56:1F:94:AD:E7:DF:0C:1E:FA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584CAE5CA8924BCCE37C5F73D520
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 399168
IP address blocks: 204.74.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:a8:92:4b:cc:e3:7c:5f:73:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=239ef525-b3d9-4f3f-867a-27500c542811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:13:74:65:07:99:55:c3:bf:66:c4:cc:52:
29:5f:5b:52:ba:e9:17:b2:9e:1a:8b:11:e2:7d:26:
55:0b:cc:a4:7c:d3:28:98:ec:b1:8e:52:c2:87:b5:
49:77:52:94:2a:46:37:56:07:58:ea:a1:e7:86:fa:
d9:11:50:26:29:6f:63:38:5e:48:47:f9:b1:97:09:
c7:21:40:7e:10:be:20:8a:88:ca:bf:89:ee:23:73:
a0:97:d4:db:c0:ff:d0:52:71:5b:2b:32:21:ee:33:
9c:53:ae:82:1c:c4:c9:c2:c1:11:ba:2c:9f:1b:84:
65:f0:23:5e:58:aa:cb:20:23:9e:ab:32:a0:f9:0c:
05:e8:ba:f3:33:c2:3b:a5:06:48:3f:cc:19:2e:96:
76:25:7f:be:69:c1:54:19:3e:b5:d6:fe:44:8e:f9:
d9:b1:26:09:a8:fd:bf:94:a7:c6:0a:24:cf:73:83:
fd:1b:86:3a:0a:b5:0a:dd:e8:5e:31:76:a8:d7:b5:
06:c8:66:9e:4b:78:73:5d:18:dd:86:d5:82:1d:57:
d4:23:85:3c:a3:aa:bb:5a:81:47:01:04:fa:0d:4a:
81:b0:e0:d2:d9:69:5b:86:7d:e7:3f:61:ec:d3:c2:
22:8b:6f:4c:86:39:cc:71:a7:f9:8e:f5:0e:10:a4:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:A8:88:D2:5C:89:AF:FE:22:93:56:1F:94:AD:E7:DF:0C:1E:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf4deaf-617c-3f60-b6d1-ece99b23aa71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7a:1f:7c:d4:15:5a:1e:53:ea:63:1e:97:06:b3:9c:7d:27:
d9:10:11:b1:62:98:47:9b:e3:22:83:5a:84:80:5f:f2:da:55:
63:b1:fe:10:25:5c:a7:da:08:94:c8:e3:53:ca:bc:ce:c5:6a:
e5:85:fd:4d:a5:59:47:5f:e8:a1:8f:a0:4b:a3:9d:e9:32:f5:
6e:0c:a5:0e:5b:0d:ce:46:3f:5f:d9:3e:a2:a5:8d:a7:de:f1:
03:9e:e7:bf:36:6f:5a:25:63:32:ae:17:d8:a4:1f:92:67:c8:
2d:04:9f:ca:e4:09:f3:9c:ae:32:20:0c:76:48:e0:4a:5b:a7:
ab:12:56:b6:d2:8f:08:7a:16:a7:0c:b0:44:3e:2a:3f:2d:ef:
66:7b:f0:bc:4c:58:d9:63:ff:d3:a9:95:59:2b:f1:f1:63:02:
5c:42:7e:1b:24:de:0e:e6:99:a8:35:87:cb:3a:cf:80:f3:93:
ac:e5:05:3f:9c:5a:f0:40:b6:83:ec:88:ff:0d:dc:83:c0:c0:
94:58:6e:3a:4f:69:12:ad:6a:c4:1f:09:dd:f8:a3:7f:51:86:
3a:6c:e6:fe:9a:c8:1a:65:52:9a:cb:8d:c3:9a:c6:d1:32:9b:
b8:44:e4:b6:8a:d9:9b:19:e7:6a:29:19:a6:32:c6:22:8d:7d:
b2:bd:95:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXKiSS8zjfF9z1SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjM5ZWY1MjUtYjNkOS00ZjNmLTg2N2EtMjc1MDBjNTQyODExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMsTdGUHmVXDv2bEzFIpX1tSuukXsp4aixHi
fSZVC8ykfNMomOyxjlLCh7VJd1KUKkY3VgdY6qHnhvrZEVAmKW9jOF5IR/mxlwnH
IUB+EL4giojKv4nuI3Ogl9TbwP/QUnFbKzIh7jOcU66CHMTJwsERuiyfG4Rl8CNe
WKrLICOeqzKg+QwF6LrzM8I7pQZIP8wZLpZ2JX++acFUGT611v5EjvnZsSYJqP2/
lKfGCiTPc4P9G4Y6CrUK3eheMXao17UGyGaeS3hzXRjdhtWCHVfUI4U8o6q7WoFH
AQT6DUqBsODS2Wlbhn3nP2Hs08Iii29MhjnMcaf5jvUOEKThIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOkqIjSXImv/iKTVh+UreffDB76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NmNGRlYWYtNjE3Yy0z
ZjYwLWI2ZDEtZWNlOTliMjNhYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEh6H3zUFVoeU+pjHpcGs5x9J9kQEbFimEeb4yKDWoSAX/LaVWOx/hAl
XKfaCJTI41PKvM7FauWF/U2lWUdf6KGPoEujneky9W4MpQ5bDc5GP1/ZPqKljafe
8QOe5782b1olYzKuF9ikH5JnyC0En8rkCfOcrjIgDHZI4Epbp6sSVrbSjwh6FqcM
sEQ+Kj8t72Z78LxMWNlj/9OplVkr8fFjAlxCfhsk3g7mmag1h8s6z4Dzk6zlBT+c
WvBAtoPsiP8N3IPAwJRYbjpPaRKtasQfCd34o39Rhjps5v6ayBplUprLjcOaxtEy
m7hE5LaK2ZsZ52opGaYyxiKNfbK9lac=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:17 2026 by rpki-client