
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
File: 17b8cc27-ee15-3d35-a022-3b562756648a.roa (raw, json)
Hash identifier: sWY/gO4noov5yVO1Ffbk25b0F1RUo3lB3Fe3ZpxSfA0=
Subject key identifier: 82:96:41:1C:A4:08:EA:C4:44:7F:5D:20:C2:17:44:56:09:93:BD:93
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB592C43EF2DD73E088A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 104.159.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:59:2c:43:ef:2d:d7:3e:08:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=eb4d7014-8d4f-4e56-904c-ca3dc3e7a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:8c:22:8f:34:88:52:b3:28:d0:29:f8:3c:
9c:65:65:5a:0b:f2:e2:7b:71:de:a8:9f:8e:6e:2f:
73:38:4c:c2:bb:64:98:ad:4c:51:ec:f2:9d:27:cb:
9c:01:0c:6c:8b:cf:3f:76:60:4c:76:18:20:43:2e:
fd:d8:32:c9:43:15:29:be:c5:19:9f:af:bc:52:80:
77:e3:75:34:74:90:b2:3d:35:4c:67:35:0c:c6:66:
64:c3:9e:14:2e:67:35:f5:20:97:a0:04:17:48:a0:
c2:94:60:0c:98:76:f5:03:de:1e:02:09:01:bb:1a:
30:f7:af:bd:29:e9:c9:c2:5e:ee:57:9f:d2:97:47:
62:f8:a9:10:6e:db:5a:6a:3d:8e:fa:f5:ef:7a:c9:
1f:79:50:46:ed:ef:51:a6:a8:34:a0:5f:84:43:a5:
b0:e7:e8:c5:71:5c:10:db:72:a0:b6:fa:be:94:d2:
30:82:ec:2c:e0:5b:e8:1c:20:fc:bb:52:1d:a8:31:
ce:92:0a:2f:54:cf:b9:82:46:ec:67:e9:f0:d5:4d:
b3:13:73:45:2f:4c:e6:13:93:3c:87:56:00:f7:02:
a0:2b:8f:4a:08:26:8d:17:ce:f7:0b:cb:97:e0:9d:
eb:1f:d4:74:44:1e:b0:06:b5:3c:fa:3f:1c:52:9f:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:41:1C:A4:08:EA:C4:44:7F:5D:20:C2:17:44:56:09:93:BD:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.159.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:53:c4:0d:b0:cd:ce:ee:46:3e:10:12:da:f3:1c:e3:04:46:
6c:68:9e:07:20:df:a1:ba:2b:97:9b:6e:5b:b0:28:fe:49:a2:
0a:33:b1:e2:c2:f9:1d:b5:1e:70:5a:4b:1a:82:aa:92:ff:09:
2b:cc:8a:f0:c6:2e:24:cd:b6:22:24:ad:f5:08:b2:91:b8:75:
1f:e8:e6:66:b2:9e:be:ed:f7:4c:3e:86:a3:e8:cb:2f:1b:f4:
5d:84:6f:38:97:e5:46:a2:96:86:fd:6a:69:f7:91:46:4c:e3:
51:ed:d6:af:c7:66:6c:7e:6d:ad:89:5d:00:aa:35:f7:34:73:
ce:f1:9f:b0:c2:15:7d:12:c1:25:6d:73:e9:3b:25:35:c7:7b:
22:5a:0e:35:80:e8:16:af:ed:2a:70:0f:8b:8f:06:f3:70:91:
1b:8e:89:44:37:03:a7:0d:1b:aa:a8:d9:52:29:46:f5:db:60:
bb:8b:32:b5:ab:5c:85:66:b2:e3:c0:f3:6e:32:21:6d:c7:c4:
a8:e9:7c:48:fc:48:90:b1:db:06:14:62:2f:e4:f3:0e:bf:d9:
b1:62:fc:ab:b5:ec:09:29:4e:93:f2:3b:b0:04:4f:21:5c:83:
3d:5d:b6:62:71:40:1e:b2:85:2d:7e:f2:3f:da:43:a6:43:c0:
d1:e5:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:45 2026 by rpki-client