
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/17ed1db2-d3f5-3f08-8047-bb71fcd2953e.roa
File: 17ed1db2-d3f5-3f08-8047-bb71fcd2953e.roa (raw, json)
Hash identifier: an8AZi49oJavfYyLtFGHlDgaiLhlV1lXw9a8P3QTpRc=
Subject key identifier: 31:70:BD:6F:03:57:0C:F7:90:CF:D9:8F:8E:91:8F:F7:69:83:F2:7A
Certificate issuer: /CN=d554e897-c833-44b1-b0a8-49a6b5ded5f6
Certificate serial: 010D0C9F4328584D624A577DA9AE15E7D25B1D00
Authority key identifier: 71:9F:BE:59:0F:19:E1:AF:A1:3D:7A:81:D0:4E:B7:71:93:5C:87:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/17ed1db2-d3f5-3f08-8047-bb71fcd2953e.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 393406
IP address blocks: 74.121.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:57:7d:a9:ae:15:e7:d2:5b:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d554e897-c833-44b1-b0a8-49a6b5ded5f6
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=a8083332-fbe8-4386-91f1-7594e178bd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:c6:6c:a1:db:a9:97:06:c3:0b:be:04:47:
8c:c8:6f:eb:a4:8b:71:f6:35:1c:75:04:00:32:18:
8a:57:26:cb:da:fd:fb:03:6a:a3:e9:00:3f:29:35:
09:21:24:a0:cd:d9:06:46:65:d0:a7:f5:7c:b9:4a:
06:df:1d:ad:f7:93:f7:05:d4:af:5f:45:1d:da:d2:
3a:4d:54:54:5b:4c:a8:71:3c:31:d5:a9:28:d9:fe:
6c:2d:b5:42:2b:5a:d9:3f:c6:20:bc:a0:a2:3d:6f:
00:51:3e:5a:09:b8:76:39:6c:e4:5c:d0:36:cf:34:
09:c6:79:e8:55:01:a2:02:3e:38:42:8a:04:3a:0b:
68:fe:c9:e3:f3:2c:c0:8e:e7:0f:7b:61:f6:3c:4d:
8b:c0:4e:c2:7d:20:a9:e1:db:a7:9d:7a:a4:1b:b6:
9d:ae:c1:8c:53:7b:4a:a8:b3:a9:69:8e:94:15:5a:
fa:5b:b9:b8:dd:b1:1b:00:b3:e0:85:c0:ea:9a:55:
3d:06:d6:49:f3:ee:41:8d:64:f7:00:c1:2f:fa:ca:
6d:7e:27:e4:d0:d9:c1:dd:00:6f:f5:71:18:ff:c2:
5e:fc:0b:71:a9:6f:f4:e9:1f:75:ea:e8:00:dd:4e:
75:97:98:c7:a3:1a:22:91:8e:64:43:b1:a8:aa:4e:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:BD:6F:03:57:0C:F7:90:CF:D9:8F:8E:91:8F:F7:69:83:F2:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/17ed1db2-d3f5-3f08-8047-bb71fcd2953e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.crl
X509v3 Authority Key Identifier:
keyid:71:9F:BE:59:0F:19:E1:AF:A1:3D:7A:81:D0:4E:B7:71:93:5C:87:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.121.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:67:db:26:50:0f:bd:aa:10:0e:19:0d:67:79:b2:98:62:35:
3c:58:9e:ff:d7:26:da:77:d1:0d:87:4c:89:84:d2:a7:6d:7f:
a7:65:e9:58:25:54:1c:4a:a8:c5:91:48:71:a1:ab:4a:d6:0c:
4d:33:6b:13:b9:35:97:84:f9:9f:81:95:8c:bd:6e:4e:ea:4d:
89:aa:0d:30:ff:d7:b0:b7:37:2e:74:e0:c9:11:03:f7:7f:ef:
fa:25:b5:78:bc:04:d4:38:d8:4a:d1:22:0f:c3:b9:0a:cb:7a:
6d:34:0a:cc:69:7c:06:ea:a4:6f:c8:dd:02:63:ec:6e:a8:76:
d7:88:10:00:16:cc:3e:5d:0f:86:0a:26:d3:06:fc:b3:69:e2:
60:56:e0:dd:a4:8e:d7:10:41:b6:e7:3b:64:fd:b6:c4:37:63:
65:a4:85:b9:77:0d:9f:11:dd:ee:db:4c:76:1a:52:86:f3:e0:
1c:88:13:1a:d8:ad:62:db:a0:ff:19:27:57:b1:99:5a:c9:d2:
d0:b1:d3:af:7b:a3:58:94:3b:24:e8:0b:c8:3e:79:5c:3b:a7:
18:7e:37:e3:03:8c:19:95:ae:c6:7c:7f:18:2b:5e:fc:8d:24:
b4:4f:22:40:e4:d0:67:63:d5:75:38:08:81:00:3a:56:a4:a8:
34:a2:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:15 2026 by rpki-client