
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0daf0724-d02a-3bd1-8352-0653220f3c98.roa
File: 0daf0724-d02a-3bd1-8352-0653220f3c98.roa (raw, json)
Hash identifier: tXrV7d60RW8IOBZmNkwB0+Ye7pSlP3eoYm98DMcuVys=
Subject key identifier: E7:42:78:BC:C7:65:F0:D4:EA:92:65:BE:23:35:13:C1:95:0F:1F:83
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB5419E618EB10B0217000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0daf0724-d02a-3bd1-8352-0653220f3c98.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 24.216.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:54:19:e6:18:eb:10:b0:21:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=b0eef9b8-b00b-444b-b408-2974def334e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:1b:8f:2e:8d:cd:0b:da:7b:3d:27:35:73:
0e:38:61:9a:4a:93:86:c6:60:08:e6:cd:b3:40:73:
a1:5c:43:72:ad:3a:23:bb:94:af:17:cd:3b:cb:a9:
d7:00:17:30:3b:10:46:9c:fd:c2:de:f0:2f:11:ee:
ce:ae:32:0c:6e:c2:4a:9f:cd:67:18:79:40:b4:74:
71:8d:f9:f3:ff:35:26:3f:9c:8a:29:86:36:b8:b0:
87:c2:14:ed:70:ef:d4:47:ae:eb:c1:4f:e3:ce:3d:
4b:b3:63:d8:32:38:9c:82:c3:87:07:c7:a9:5b:f3:
29:f2:30:78:58:5f:2c:85:f5:fc:e8:07:a4:4b:01:
84:f5:21:6f:7e:7f:16:81:a2:1b:e9:84:f7:a9:82:
66:5a:04:25:1e:50:d1:e1:e8:39:63:c5:71:ae:4b:
b3:b2:73:b5:a3:2c:49:c4:9a:2f:75:9c:59:8e:32:
8e:d0:64:39:36:9c:66:19:37:38:2e:9b:71:14:05:
b1:34:4f:4e:53:4b:fa:41:6b:ed:07:ba:5e:a7:4a:
21:2f:4d:6e:a1:5e:bf:ab:fd:ca:cc:56:c3:e9:76:
be:a5:3d:75:55:5a:17:e6:ab:8a:f7:db:76:06:a9:
b6:f1:98:04:37:26:44:e4:2d:69:d5:84:8d:9b:40:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:42:78:BC:C7:65:F0:D4:EA:92:65:BE:23:35:13:C1:95:0F:1F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0daf0724-d02a-3bd1-8352-0653220f3c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.216.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:36:11:1e:15:ba:e3:e4:26:1f:84:a0:62:24:21:e3:3c:b4:
75:60:87:66:42:7d:cd:34:f6:be:49:95:c7:60:a5:58:1d:44:
2d:38:b1:67:69:16:28:03:fb:5a:87:f1:9c:16:c9:2c:1d:e8:
1a:02:b0:8d:1d:5d:41:dc:ff:2c:13:d4:09:3f:f0:32:d2:52:
45:9b:60:ca:cb:21:e4:75:48:84:0c:1a:67:2c:05:06:78:0b:
3c:1d:3c:86:07:f6:5e:b7:09:4c:2a:84:11:23:03:df:1e:b7:
72:30:37:97:74:b2:e4:9d:a9:24:20:4a:a8:1b:b8:d7:74:df:
5b:a8:82:73:9c:ad:1a:24:ab:41:43:c1:50:13:0b:94:39:64:
ff:f9:b4:d1:cf:a5:ea:38:10:51:5e:3d:77:05:7d:6f:cd:ed:
a2:a9:b4:a0:78:6a:3b:36:45:02:8d:00:51:2a:b4:cc:4a:f6:
0b:e0:52:ea:e9:d1:27:c8:e9:ba:85:53:4f:31:68:28:7d:e1:
c5:17:7f:cf:6e:5e:e7:77:33:03:67:85:95:05:32:04:ff:96:
1b:95:e9:b0:c9:ad:1c:fa:fe:08:f6:cb:f7:77:14:fc:5c:39:
25:59:de:85:8a:f1:68:fc:c8:60:1c:1f:00:fa:4c:07:c7:61:
36:13:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:33 2026 by rpki-client