
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17c5d1e8-aaf8-30c4-8f24-a474701a95ad.roa
File: 17c5d1e8-aaf8-30c4-8f24-a474701a95ad.roa (raw, json)
Hash identifier: UhQk8fPZYIC8+QN5a6OS9YMPkNTlmvFx4Kc0h/sM0bk=
Subject key identifier: A1:5C:A7:35:16:AD:59:5C:0E:4B:E5:18:7B:E1:D5:09:1C:51:BC:90
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D3DFF910AD7DEE1F4D02208BE
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17c5d1e8-aaf8-30c4-8f24-a474701a95ad.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 20115
IP address blocks: 159.111.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:91:0a:d7:de:e1:f4:d0:22:08:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=4a84f45d-87a9-4c28-8598-9876b38d3d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:63:eb:bd:df:e9:42:4f:bc:64:97:1d:cc:
a4:ef:69:71:e0:90:e2:b4:50:5b:13:a6:32:a1:64:
58:1d:14:f5:41:0f:39:4b:d7:3d:bb:e7:6b:4d:6f:
78:3c:52:cb:f4:2f:1d:f1:28:17:90:2a:01:56:31:
0b:d3:36:a7:ed:9e:0c:c6:a5:cf:eb:47:ae:aa:fa:
00:9d:e9:82:f8:fe:92:f3:0e:14:b7:32:f7:72:db:
15:84:10:fb:69:02:96:6a:06:3e:bf:64:f4:42:09:
0f:53:7f:b6:4d:21:c9:49:b3:44:6d:51:e4:58:11:
95:c4:dc:e9:c7:15:88:96:56:46:f6:26:7f:66:9e:
94:b8:38:5d:46:54:e8:54:3a:6b:48:f6:2e:ad:50:
b7:05:5a:3f:83:88:d6:0a:69:40:a3:16:3c:01:9c:
87:dd:2b:18:a6:88:a7:95:97:42:4e:1e:5a:52:b8:
54:4d:ff:9c:e5:3b:1c:ed:cb:ff:47:60:a7:42:6f:
68:66:4b:51:5f:4c:14:9a:9c:0e:09:6d:3b:a3:42:
d5:04:b0:4a:cf:40:dc:72:9d:b2:41:58:e4:79:ca:
ca:2b:d8:b4:46:4b:e2:63:79:a4:25:e6:70:b4:59:
9d:63:25:26:c0:d3:38:24:bb:69:e0:b1:37:5f:9a:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5C:A7:35:16:AD:59:5C:0E:4B:E5:18:7B:E1:D5:09:1C:51:BC:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17c5d1e8-aaf8-30c4-8f24-a474701a95ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
159.111.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bb:8d:5b:46:11:5b:43:81:e8:8b:7c:3b:e2:eb:23:17:0c:
6f:90:e0:34:9b:9a:26:ad:cb:9f:56:c3:2c:ea:3c:07:e8:e0:
9b:07:59:53:78:cd:61:c8:83:3b:58:8f:3d:af:bb:56:dc:af:
20:08:33:44:8c:04:82:ff:06:9c:a6:af:e2:46:3d:48:81:2b:
26:43:f1:89:14:a0:a4:a5:dc:a4:9f:81:07:2d:9c:c5:f8:c6:
10:29:7f:39:2b:ac:9d:92:17:ac:39:88:28:64:21:9b:26:a1:
c6:88:68:b3:c8:38:05:7b:cc:36:33:91:15:59:9c:c1:0e:e3:
3f:d8:e8:fd:33:19:90:9a:7c:b1:d6:49:27:33:5e:ea:f0:52:
10:10:b0:e5:ae:b4:e2:07:41:81:36:af:44:a3:58:a6:2c:b0:
20:fc:0b:35:b5:21:56:38:a5:24:64:d3:0a:58:0a:4a:bd:4e:
30:80:77:67:7b:4b:05:02:c1:45:12:f1:42:54:a4:0a:55:06:
c3:ea:06:7d:84:cf:60:94:10:8e:fe:b8:58:22:61:55:4f:fd:
66:9e:0c:a2:b0:f3:8a:18:e5:ad:21:3a:39:ec:73:8f:0b:d0:
47:80:fc:6b:31:6a:e1:9a:6b:a6:e8:b6:43:af:cb:0d:77:84:
26:45:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:44 2026 by rpki-client