
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
File: db0488e3-95ed-323c-9b97-147429b7c044.roa (raw, json)
Hash identifier: ZG26PTUi6znUteZIaiqXEx52hlDiGiTWaH7vrfpEs7I=
Subject key identifier: AB:30:07:92:9B:17:2B:06:38:99:24:7D:71:7A:9F:9D:B7:4E:4F:D7
Certificate issuer: /CN=35da68f2-165e-4898-bf59-8aa1e523eba7
Certificate serial: 010D0C9F4328584D7266EBD2B9060DDB34AEE700
Authority key identifier: 3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
Signing time: Thu 09 Apr 2026 07:31:06 +0000
ROA not before: Thu 09 Apr 2026 07:31:06 +0000
ROA not after: Wed 08 Jul 2026 07:31:06 +0000
asID: 14618
IP address blocks: 74.113.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:72:66:eb:d2:b9:06:0d:db:34:ae:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35da68f2-165e-4898-bf59-8aa1e523eba7
Validity
Not Before: Apr 9 07:31:06 2026 GMT
Not After : Jul 8 07:31:06 2026 GMT
Subject: CN=ba6f39af-2de0-467b-8ab8-33b54f09f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:d6:eb:73:a7:4b:9d:87:e1:c2:63:9a:eb:
23:74:3d:d4:0e:fa:b6:06:c7:12:5f:2b:2e:db:28:
77:41:50:bb:dc:27:25:d7:87:94:12:95:98:df:7f:
29:dd:0d:89:cf:51:56:41:d3:d6:96:a2:e5:48:fb:
fb:08:7b:9c:5f:3a:cd:24:74:92:89:c2:78:fa:2b:
7f:52:ff:c9:30:b8:33:f0:68:fc:a4:6f:a8:2e:06:
05:1a:5c:c1:2c:cc:33:8a:44:5a:4f:4a:e8:ac:cf:
a6:41:2f:5d:be:db:ac:98:a6:b1:d1:d0:dc:92:e2:
c6:94:99:29:0d:2e:4c:7b:2f:49:c6:66:ea:ed:55:
ad:31:5f:9d:69:c1:c9:a4:10:be:50:33:6a:a5:1b:
a7:39:72:db:94:2b:c1:01:5c:1f:10:c7:55:ff:10:
86:c9:45:95:99:f0:89:65:51:82:cc:70:98:bc:ba:
46:96:44:68:ce:c9:de:66:5a:dd:c9:35:00:7e:3a:
b8:16:b6:12:46:7f:ae:a4:ae:6b:25:da:ab:1a:bc:
98:2b:40:47:ba:ee:a1:67:30:ae:98:0f:60:dc:0c:
0c:82:aa:bc:c5:9e:48:e6:af:76:1b:0b:ae:73:ab:
51:ae:f3:01:97:23:e8:9f:e2:0c:7a:ed:ba:35:11:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:07:92:9B:17:2B:06:38:99:24:7D:71:7A:9F:9D:B7:4E:4F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl
X509v3 Authority Key Identifier:
keyid:3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5e:05:03:86:51:34:fd:31:bb:1f:cd:be:e1:b6:5a:3e:e0:
cc:39:6f:48:21:53:87:a6:9e:84:26:70:49:b6:7e:48:78:9e:
9b:e0:31:7a:1a:13:2e:6e:bc:f6:76:8d:f7:c9:fc:93:70:50:
36:8d:10:b7:74:4a:79:ad:40:4d:47:e9:11:e7:32:9a:d0:ba:
39:7a:d9:fe:c3:59:26:ed:f4:0d:fc:e3:9c:b1:f1:8c:15:94:
71:9d:3e:63:69:29:68:e8:19:d3:93:80:e0:24:37:37:c5:34:
a5:c5:1d:16:ea:68:fa:8b:57:5f:6a:c7:98:e7:79:f3:cf:40:
27:e6:a6:23:aa:81:20:09:f5:42:a6:03:e8:1a:68:46:dd:09:
6b:ad:30:de:09:eb:d6:d9:71:b2:98:e3:6f:dd:15:76:15:b1:
28:90:b6:55:a4:1a:b4:8a:36:37:40:e8:fc:51:95:28:22:2a:
d0:1f:81:5d:20:61:ed:64:fb:30:f7:30:86:67:cd:e3:fc:5b:
c8:5e:9d:79:e7:c4:1d:75:95:03:44:a6:05:0f:f6:aa:39:e7:
99:94:8a:37:19:87:5e:2e:6d:5f:dd:ea:c1:97:6b:ec:bb:5a:
47:6a:9d:ad:5d:57:f5:4e:59:f7:a8:3d:23:d2:18:eb:ab:00:
dc:35:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:04 2026 by rpki-client