
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3136e800-f895-33a4-af92-936d52f89961.roa
File: 3136e800-f895-33a4-af92-936d52f89961.roa (raw, json)
Hash identifier: PYsQEaOfh5JUL44CH6LmZscq3CJe0GaHnaLeUJ5WDNw=
Subject key identifier: 01:C3:50:75:A8:73:13:87:24:4A:89:F6:15:20:AF:F5:5C:A0:E7:DE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CAD133EE89832BB0B2BF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3136e800-f895-33a4-af92-936d52f89961.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 68.115.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:d1:33:ee:89:83:2b:b0:b2:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=6a29dad4-e527-4f2b-b3c1-0b8390a7b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:c0:c7:e5:37:a7:f8:c2:b6:df:a9:c8:21:
a4:34:d7:47:b6:5b:65:a9:12:6d:7b:be:5c:59:89:
47:50:d5:37:0d:23:4d:d5:fb:92:c0:4f:d9:43:93:
d0:30:22:77:04:0f:3c:a9:49:bf:26:56:b1:c3:ff:
44:55:e0:4a:c7:2a:61:6b:ea:6d:fa:d5:bb:2a:99:
ee:bb:10:aa:9c:a4:88:03:49:65:fc:28:71:00:be:
ac:00:46:67:f8:f0:e5:ee:1d:49:d4:31:c6:6e:3c:
cf:d0:38:b5:d4:55:1e:90:60:af:81:cb:e1:d0:98:
58:1d:f1:76:7c:d7:12:26:43:b4:d1:2e:91:ce:12:
25:8b:e3:57:74:55:94:43:6c:d5:4d:ea:93:22:1a:
bb:9a:47:6c:6c:d2:8d:b0:9c:83:6d:80:50:11:36:
73:3b:d0:97:01:46:84:17:4b:79:6a:c2:9f:05:98:
cd:de:27:23:e8:f8:65:a9:e5:c9:c6:6c:f6:f7:7f:
7b:40:8e:8c:99:82:f2:c7:e4:8f:66:d4:03:79:e7:
43:07:e0:ff:17:69:12:1e:8f:4d:e3:96:0d:99:82:
4d:00:ee:ac:7a:aa:8b:c0:ca:3c:e1:16:48:cd:17:
34:9f:cb:4e:f1:a5:fe:8e:f2:34:10:8a:79:62:66:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:50:75:A8:73:13:87:24:4A:89:F6:15:20:AF:F5:5C:A0:E7:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3136e800-f895-33a4-af92-936d52f89961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.115.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:07:79:d6:d8:08:b6:a8:d9:a0:02:b5:f9:8c:70:cb:6c:d0:
ee:fd:4a:0f:ee:04:3f:59:1b:c2:fe:ab:e1:d6:f2:9c:a8:6b:
a9:98:f2:cf:ca:b6:63:b2:e5:38:00:22:88:3b:9b:55:83:75:
a4:cd:6a:44:8c:c0:f4:16:2b:de:0a:4d:42:f2:d1:ee:85:e9:
d2:a9:05:d7:b5:11:c9:7e:ae:62:db:fa:b9:a8:25:d6:8f:18:
67:2c:f6:4d:34:80:5d:9b:f1:fa:06:65:11:02:b6:e7:b0:d9:
ce:6e:e3:35:7a:ad:f7:c1:c6:49:59:9a:53:fa:fc:ad:e3:ec:
4f:db:7e:9a:78:eb:99:f2:aa:11:c3:fb:c2:70:2f:72:8c:a9:
5c:94:22:4d:ff:6a:84:43:53:52:ed:5d:97:7d:10:7a:ea:99:
89:a4:f0:4b:a7:b5:9e:42:3c:17:45:50:b8:dd:9e:b6:41:7a:
4d:ed:6c:dd:38:c1:1c:ca:70:59:82:95:83:ff:81:12:74:bc:
e7:7c:c3:a1:0f:ff:c3:18:35:64:a3:e2:6c:33:14:db:86:95:
3f:5d:50:d0:70:e6:72:b8:53:ab:b3:62:5e:e1:86:bc:42:eb:
50:5f:01:c2:5b:82:db:e4:b5:7a:5c:cd:76:a8:6f:0d:f1:6b:
c9:9b:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:34:48 2026 by rpki-client