
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa
File: d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa (raw, json)
Hash identifier: 04fi/AD16QLh45+miyh5nqpjrFEZ6MI2wombGvPTVHo=
Subject key identifier: BF:F2:21:B2:45:CC:FA:B4:5A:69:A5:15:8E:76:C3:DE:1B:28:3E:5C
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E18AF0600C911DC4B90846600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 74.1.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:af:06:00:c9:11:dc:4b:90:84:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=0f0311d5-de39-4438-9fa7-cee2a61377ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:01:0c:f3:7b:ec:24:be:88:ce:95:a6:2a:
c4:16:b4:da:52:f2:6a:69:92:e4:8c:af:b6:e6:f6:
54:a2:24:28:ff:78:a0:23:f2:37:54:0d:48:6c:c7:
b9:22:0f:28:fe:21:da:5e:c7:44:c9:09:13:bc:02:
b0:bc:2e:5c:c9:a8:97:c7:5c:a8:d0:9b:8b:d1:1d:
3a:f2:33:f8:d4:64:45:15:48:93:99:b8:4c:b1:5b:
b6:a5:25:4a:2d:46:c0:b1:61:16:8d:ff:95:50:04:
71:40:05:74:46:e8:33:aa:27:27:48:a0:b0:8b:c8:
d0:92:a9:56:3d:94:a0:f7:7d:c3:d4:a1:ce:58:df:
57:64:51:8a:a9:b0:2b:4e:c7:b7:14:61:3f:09:ce:
4e:28:05:06:2b:8c:b3:07:17:4c:83:59:87:13:47:
3d:f6:5f:a5:9f:31:c0:4f:0a:0f:2a:b2:cf:c2:c9:
99:3e:91:74:79:82:3a:1a:6c:62:39:8e:c9:58:ee:
43:8a:15:25:21:8c:91:7a:20:b7:b5:67:0b:2c:8b:
fd:25:bc:0c:a6:62:0a:ce:53:30:3d:41:a5:93:26:
4d:c9:8e:aa:53:14:ea:a4:a8:d8:08:cf:0d:58:79:
88:f6:d9:91:04:1d:84:c7:26:10:e9:a4:a2:9b:08:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:21:B2:45:CC:FA:B4:5A:69:A5:15:8E:76:C3:DE:1B:28:3E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9048c1a-e4d2-37b4-b5b2-5100295c4084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.1.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:5d:bf:9f:39:a2:26:a2:ab:f7:12:db:3d:b6:13:07:b8:37:
0e:c4:33:08:dd:3e:c5:ab:39:60:f5:9a:e6:cd:f0:b6:16:05:
cf:56:59:3c:d0:a3:bd:c8:0c:ad:3e:13:9a:70:8d:1c:cc:60:
04:1f:5b:2a:fd:dc:06:f7:2b:45:e0:c0:6f:f5:72:09:04:27:
76:ae:94:d7:da:7a:75:1d:fd:a8:51:a6:d7:40:f4:b0:88:45:
ed:09:19:32:63:81:88:69:15:9d:af:dd:04:bb:c5:84:18:29:
2b:45:fb:6c:99:e1:15:c6:47:dc:78:c5:f1:40:d2:a9:54:aa:
46:af:d3:e9:5e:79:80:25:80:ca:f5:da:e9:1c:3b:82:eb:f5:
7c:82:5e:fb:8b:4e:e9:91:d4:8e:50:7f:83:1b:54:fe:83:31:
02:68:21:08:47:db:7f:79:27:d5:26:02:0e:7a:51:dd:5f:9f:
9d:2c:22:37:45:f0:1c:a7:5a:72:c5:eb:f6:6b:d5:6a:fb:c8:
1c:b5:5a:dc:b3:60:ff:57:46:ef:af:05:f8:6e:c9:69:e3:6b:
a4:2a:97:1c:3c:d6:59:00:d7:a1:2d:34:04:e8:be:61:e8:9e:
7b:5c:c4:a8:3d:7a:10:4b:a3:ea:35:01:83:99:f8:33:74:46:
5c:75:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:58 2026 by rpki-client