
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8a2305-cb76-32e3-a8d1-a2310a1a0253.roa
File: dc8a2305-cb76-32e3-a8d1-a2310a1a0253.roa (raw, json)
Hash identifier: q+z6jMjUL34kHfnIgiOLeK/yDh55jpd9ipQdJCCuR94=
Subject key identifier: 3A:14:A3:C5:CB:77:0B:B1:70:18:69:31:C4:E7:A0:4C:E2:4A:3E:DA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F23C26289598C8DBB50EB1080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8a2305-cb76-32e3-a8d1-a2310a1a0253.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 399159
IP address blocks: 204.74.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:62:89:59:8c:8d:bb:50:eb:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=ed8e4a9b-bd57-4e5c-9afa-1b323b155ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:f5:14:89:a6:09:c4:18:ae:8d:b9:04:64:
64:da:c9:5d:6b:a1:0b:39:6a:9b:43:13:ed:57:29:
97:f6:8f:29:a6:ac:eb:3b:bf:37:5c:1a:d9:91:10:
c0:f8:f1:b3:7d:f9:b8:e1:3d:fa:d8:5e:11:fa:6e:
92:ce:05:b1:bb:a9:b6:d7:ff:cb:a9:c8:8e:fb:d6:
88:34:d1:92:74:d1:c4:9e:66:03:98:ba:33:c8:6d:
9d:fc:ce:c8:e5:5e:83:b6:4c:8c:45:45:2e:04:c8:
5b:a8:0a:cb:96:57:35:7d:95:7a:1e:d4:dc:31:ba:
b2:88:d7:a2:1f:4d:b0:34:0b:7f:d7:ac:72:2d:29:
8c:de:cd:5d:47:69:79:3d:8f:a5:4b:0c:86:af:6e:
bf:39:f1:ca:37:2c:84:c3:94:5f:4e:30:a7:d7:71:
56:e4:44:f6:77:6a:34:8c:e0:67:0d:01:52:6e:10:
27:d6:fc:a8:74:3c:0a:5d:ff:1f:5c:ab:f2:35:bc:
bd:3a:ad:ac:99:3f:a2:9f:b5:e4:4d:b6:81:33:89:
80:25:96:9f:80:d7:ee:cb:47:a0:c2:37:ac:0e:f8:
91:64:ae:a3:35:8f:7f:21:32:19:c3:01:e3:d8:07:
7b:e9:5e:da:74:d9:cd:07:2c:92:3a:9e:4f:fe:4d:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:A3:C5:CB:77:0B:B1:70:18:69:31:C4:E7:A0:4C:E2:4A:3E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8a2305-cb76-32e3-a8d1-a2310a1a0253.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ef:5f:69:e4:69:05:99:77:32:49:72:d3:b5:d7:11:ad:f8:
73:04:17:28:77:6c:a4:b5:de:86:3e:f1:36:f4:ed:69:f7:44:
6b:07:44:07:9c:1b:0d:e5:1b:f0:b7:0f:46:99:c5:bd:f6:e8:
91:32:ae:27:9e:73:ad:7e:8f:06:c6:db:83:53:25:1f:f0:72:
bc:6a:75:c1:5b:41:eb:56:8f:00:aa:a8:86:97:ed:b2:2a:b3:
81:d8:ca:1c:79:b1:57:23:af:67:eb:e9:ce:50:b8:4b:f6:f8:
32:f1:c9:d5:3c:fe:86:92:7b:f0:40:c6:14:0c:bb:c8:eb:99:
3f:50:24:2a:db:a4:77:24:ea:75:3a:37:d5:79:73:10:89:85:
8e:46:aa:48:dc:24:19:c3:c5:6b:64:cf:73:f6:ad:7d:bf:f2:
cd:1c:fa:64:97:39:a4:c5:5c:14:36:ea:f1:97:00:6f:ff:58:
3b:43:20:f1:3e:78:a9:8c:2c:ed:6e:aa:95:42:47:ea:ff:2a:
9b:17:53:22:8a:f8:cd:f7:d7:47:78:ca:49:6e:20:89:cd:82:
d2:a1:45:25:7c:32:c7:8d:27:17:d2:50:b4:69:07:25:d1:2f:
3e:fa:ac:d5:26:43:b7:6d:fd:66:33:5a:76:58:a5:c5:81:dc:
38:40:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:55:15 2026 by rpki-client