
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25bca2fa-ffca-3449-a2e8-9c1d916d890e.roa
File: 25bca2fa-ffca-3449-a2e8-9c1d916d890e.roa (raw, json)
Hash identifier: lG6hcw4IsJ81wXQTLPQI3M0jz99xClRv8Ixt7UEYOC8=
Subject key identifier: F4:1B:54:D4:0B:4D:B1:74:9E:97:20:26:20:78:20:35:A2:8E:BF:3D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CAECEC9667917A949DE280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25bca2fa-ffca-3449-a2e8-9c1d916d890e.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 96.33.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:ec:ec:96:67:91:7a:94:9d:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=ae808638-8ae4-43b4-b83c-d1ffe3ba6619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:0f:90:95:db:8b:e4:ff:da:59:3c:31:34:
ca:56:7a:bc:91:bf:7b:be:d2:f4:c2:c9:43:a5:91:
eb:98:98:05:2c:b1:18:d9:d8:10:ee:59:9a:15:f4:
f2:a6:f3:fd:cf:d7:7a:31:7f:73:ba:6f:2f:94:26:
96:a1:62:df:6d:e3:a3:49:25:b3:d6:b5:e6:91:bc:
05:ac:43:69:8f:ae:b1:32:95:5b:db:46:a1:1b:f7:
61:43:7a:af:12:a7:5d:2f:53:ac:62:28:4b:2c:b9:
29:5e:f6:7c:df:36:cb:85:cb:08:60:2d:47:56:9d:
4f:d3:6f:36:a8:00:78:2c:f0:25:c0:e1:15:fa:89:
ac:ad:80:f3:96:9b:8c:48:9b:2a:1b:af:dd:66:d2:
ba:20:e6:a1:17:10:ea:87:71:5b:22:82:1b:26:ff:
23:19:0c:b4:19:d6:b9:68:b1:1e:25:13:7e:be:cb:
b7:76:ba:9d:8c:81:ec:0b:73:1a:36:3b:d8:1d:a9:
eb:1e:a0:ed:e9:7c:d7:3a:9f:68:a0:00:c3:12:ad:
8d:34:33:80:df:ef:7e:7c:c9:09:56:93:79:7e:8e:
01:3a:a2:0b:7b:36:e0:ba:fe:92:7b:6b:18:50:99:
ea:15:18:95:7c:ca:0f:43:2d:4f:79:be:7b:df:ad:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:54:D4:0B:4D:B1:74:9E:97:20:26:20:78:20:35:A2:8E:BF:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25bca2fa-ffca-3449-a2e8-9c1d916d890e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
96.33.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:58:89:0c:d7:43:64:c1:26:07:fd:c7:47:c3:ae:6a:41:bb:
a4:b8:c2:4d:d1:48:f2:4a:a6:d7:2c:57:e0:32:ea:aa:6c:65:
d0:f7:33:6b:89:9b:7a:7d:94:71:5b:06:2d:2e:5d:4e:b1:4e:
b9:b5:eb:7b:53:50:70:0d:f4:71:65:57:eb:8d:c6:8b:c1:b1:
29:80:58:93:8b:f6:b9:54:27:d8:02:c6:34:ac:13:30:da:61:
66:57:ff:47:3d:dc:89:e5:f4:7a:c6:77:66:8f:45:ff:32:bf:
dd:ac:3f:af:ac:77:6f:c9:d3:f6:68:aa:fa:5b:98:f6:9c:42:
5a:ca:61:00:43:70:70:a7:fc:cf:66:89:56:7c:56:90:2e:36:
57:b5:57:44:4a:7b:f8:8d:2c:29:7a:ea:3d:f2:b7:8a:ed:bc:
a4:d8:3c:89:38:fe:54:08:c6:ad:36:70:2b:bd:82:d4:00:e0:
15:20:13:fe:f9:f3:e7:5a:11:2e:f6:43:8a:a1:68:b5:cb:e7:
b7:ae:8c:4f:ea:94:a6:ec:36:52:65:85:49:6c:12:e3:d8:85:
a5:6d:dd:3c:ad:2d:7f:c7:fb:76:68:9e:48:17:17:fa:f5:68:
c2:62:cc:78:3e:b7:31:b5:17:37:16:90:30:60:9e:e8:82:0e:
a1:b7:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:33 2026 by rpki-client