
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74346e5f-2b12-3c1d-b1e3-68248ac67029.roa
File: 74346e5f-2b12-3c1d-b1e3-68248ac67029.roa (raw, json)
Hash identifier: QMqiJUnsIBfSAEXdbizLLspOCYpCiesZAr0mLO9W82o=
Subject key identifier: BF:FE:64:C7:2D:66:4A:41:35:3D:CA:46:FF:16:F4:65:E9:78:1B:E4
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F374D52BF1ED312CD6EA53540
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74346e5f-2b12-3c1d-b1e3-68248ac67029.roa
Signing time: Fri 18 Sep 2026 13:00:12 +0000
ROA not before: Fri 18 Sep 2026 13:00:12 +0000
ROA not after: Thu 17 Dec 2026 14:00:12 +0000
asID: 174
IP address blocks: 69.33.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:4d:52:bf:1e:d3:12:cd:6e:a5:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 18 13:00:12 2026 GMT
Not After : Dec 17 14:00:12 2026 GMT
Subject: CN=e8598949-62c0-4c07-9d05-9ba87b06fe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:44:92:79:46:98:9d:b9:96:8c:d5:5e:e1:
a1:05:f1:97:ca:b8:77:71:01:26:c0:f3:e0:d6:3e:
83:a5:5a:50:26:a6:53:2f:c1:bb:7f:ae:cb:c9:38:
0a:e6:ab:76:ba:8b:f3:03:0e:0f:62:e0:4c:50:d6:
52:cc:4b:90:44:87:6a:47:9d:72:6e:9d:f7:fb:c0:
1c:11:34:5b:fb:6b:fc:17:58:26:a9:45:02:23:51:
9a:b0:ac:dc:3a:d2:cd:06:a8:23:d2:b1:94:89:c0:
76:7d:1f:97:f6:30:c7:5f:bb:45:d0:0a:ca:89:00:
dd:5e:95:10:ea:14:90:10:b8:bd:49:bd:fe:2a:e3:
6e:05:58:95:91:bb:83:b2:04:b9:eb:8b:31:e8:1a:
d3:d5:1c:6e:f8:6f:a8:75:94:8e:94:93:be:3f:02:
37:7f:61:94:a6:9e:c6:bc:b0:bb:7e:fe:d2:06:99:
e0:ac:44:28:05:3b:8b:e7:26:1c:42:ac:5f:f2:a2:
77:55:b3:1d:b1:0e:f5:53:46:1a:65:3a:e4:30:d0:
23:5c:be:12:90:80:a9:17:45:44:d4:6e:6e:c6:df:
b3:3a:79:f7:5c:09:7a:bc:b2:bb:0b:65:89:47:eb:
0d:65:67:05:78:f6:d5:66:0e:b9:92:a9:61:28:38:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:64:C7:2D:66:4A:41:35:3D:CA:46:FF:16:F4:65:E9:78:1B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74346e5f-2b12-3c1d-b1e3-68248ac67029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
69.33.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:12:55:da:2e:75:9e:8d:e1:ea:e2:3f:f9:4d:e1:fe:f0:8e:
ad:66:c1:22:6a:5b:7a:10:4f:4f:3c:9f:02:78:85:e0:98:5b:
8b:3f:b3:26:23:71:19:40:6d:af:f5:19:fb:8b:5b:12:d0:d6:
3b:51:88:4e:99:22:06:47:5d:13:4c:66:e9:4d:91:77:84:e9:
bb:41:e8:3a:10:b8:e3:d0:e5:44:53:a7:79:54:42:80:dc:22:
59:3e:5a:06:2d:7e:ac:76:bc:6d:a1:36:e0:24:cc:e1:77:34:
d9:ed:a1:ee:e6:1a:4e:36:28:ff:9d:12:69:6c:5d:f7:42:68:
bc:4b:57:87:12:44:7a:7b:ea:43:4a:46:73:6d:44:50:7e:73:
81:6c:f9:20:23:ba:78:c1:55:cf:e4:55:47:17:d8:de:1e:33:
ed:ce:8d:01:2d:26:e0:c9:37:be:25:75:40:9f:b4:84:0d:60:
8c:1d:0f:d8:2d:d6:6f:bd:31:ee:9a:be:85:86:b5:0f:f4:2d:
a2:7a:7c:b8:a3:7d:5f:38:25:61:52:1c:62:68:43:45:ca:20:
10:81:fa:57:fd:5b:54:41:72:63:84:1e:22:b5:9a:f1:eb:be:
4e:6a:fa:a3:aa:16:f1:2a:98:12:b4:9c:c0:46:4d:76:8c:e8:
87:36:ef:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVK/HtMSzW6lNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
ZTg1OTg5NDktNjJjMC00YzA3LTlkMDUtOWJhODdiMDZmZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dxEknlGmJ25lozVXuGhBfGXyrh3cQEmwPPg
1j6DpVpQJqZTL8G7f67LyTgK5qt2uovzAw4PYuBMUNZSzEuQRIdqR51ybp33+8Ac
ETRb+2v8F1gmqUUCI1GasKzcOtLNBqgj0rGUicB2fR+X9jDHX7tF0ArKiQDdXpUQ
6hSQELi9Sb3+KuNuBViVkbuDsgS564sx6BrT1Rxu+G+odZSOlJO+PwI3f2GUpp7G
vLC7fv7SBpngrEQoBTuL5yYcQqxf8qJ3VbMdsQ71U0YaZTrkMNAjXL4SkICpF0VE
1G5uxt+zOnn3XAl6vLK7C2WJR+sNZWcFePbVZg65kqlhKDiUHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/+ZMctZkpBNT3KRv8W9GXpeBvkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzQzNDZlNWYtMmIxMi0z
YzFkLWIxZTMtNjgyNDhhYzY3MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSGKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMSVdoudZ6N4eriP/lN4f7wjq1mwSJqW3oQT088nwJ4heCYW4s/syYj
cRlAba/1GfuLWxLQ1jtRiE6ZIgZHXRNMZulNkXeE6btB6DoQuOPQ5URTp3lUQoDc
Ilk+WgYtfqx2vG2hNuAkzOF3NNntoe7mGk42KP+dEmlsXfdCaLxLV4cSRHp76kNK
RnNtRFB+c4Fs+SAjunjBVc/kVUcX2N4eM+3OjQEtJuDJN74ldUCftIQNYIwdD9gt
1m+9Me6avoWGtQ/0LaJ6fLijfV84JWFSHGJoQ0XKIBCB+lf9W1RBcmOEHiK1mvHr
vk5q+qOqFvEqmBK0nMBGTXaM6Ic27yY=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:06:44 2026 by rpki-client