
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f2028f3-da96-3f3f-8433-a8c7a9d92192.roa
File: 3f2028f3-da96-3f3f-8433-a8c7a9d92192.roa (raw, json)
Hash identifier: Cf+cnmQvD3g4u2C9nEan825I1qCc51OqcFymGhvPi/o=
Subject key identifier: 11:54:D0:EE:AD:05:19:69:69:9F:3F:6F:EB:77:15:56:F6:46:64:66
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CADB3197658AAAACDAD100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f2028f3-da96-3f3f-8433-a8c7a9d92192.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 68.187.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:db:31:97:65:8a:aa:ac:da:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=f4eafb25-96b7-41a3-8422-0f2c96d75c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:0e:71:3d:e6:89:bf:86:2b:a5:5e:f2:78:
5b:65:b7:a8:17:c1:81:28:6f:e9:e8:3a:d8:71:55:
55:5f:65:15:3b:8e:93:df:73:53:19:41:b2:02:bd:
67:c0:5c:2c:e8:07:c9:32:0d:32:79:2f:3c:f9:bb:
cd:8c:02:e5:a2:4e:47:1b:ca:6b:04:24:35:ea:dc:
b0:8f:7d:a8:61:a9:25:2e:ed:68:11:56:f9:a6:6b:
3a:b9:65:cd:50:fe:2a:8b:99:fe:ca:b6:0e:7a:e8:
e4:4a:0d:85:56:94:04:0a:b6:37:62:72:4d:fd:b9:
97:6e:51:5c:63:36:16:77:4e:15:f7:a4:4e:dc:b5:
85:a8:b8:dc:b7:c8:b1:59:b4:77:8d:8e:b6:0c:40:
56:ac:25:1d:ce:96:c2:71:c4:b9:bd:35:0c:ff:60:
40:12:25:fa:32:9e:ac:31:9d:59:7c:93:3c:0d:12:
0f:01:21:9c:cc:ae:c5:c7:d7:36:db:6a:f8:6e:56:
c7:01:eb:fe:86:9a:d2:9a:1e:0a:81:73:1b:0a:d3:
48:7f:74:c7:f5:f2:cc:c4:94:a1:49:1f:94:25:7e:
6f:3d:44:84:f2:4a:ad:8c:30:b0:d7:6d:f7:5c:c1:
5b:e4:3e:13:07:63:35:b9:a7:35:f7:d5:3e:21:08:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:D0:EE:AD:05:19:69:69:9F:3F:6F:EB:77:15:56:F6:46:64:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f2028f3-da96-3f3f-8433-a8c7a9d92192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.187.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:2b:60:40:33:69:dd:45:5b:0d:94:75:73:59:0b:af:1a:2b:
0e:5a:d9:d1:51:9e:63:a5:49:35:7f:ee:18:54:b3:b3:ad:09:
23:6d:03:ac:d0:6f:d5:0f:9c:e9:01:a0:d6:ba:b3:1c:44:90:
bc:16:b8:b0:99:91:d7:b4:17:81:45:45:4f:00:d7:8a:33:de:
47:77:eb:a5:75:fb:03:8c:7c:46:cf:bb:48:c2:84:40:0e:22:
ef:db:82:ae:39:7f:4f:2a:e6:6d:ab:3b:33:98:ed:e9:28:6e:
1c:8d:21:17:98:a0:e4:5c:5f:76:99:ad:d8:7b:fd:e8:a1:66:
c9:c8:9d:33:bb:9e:11:be:49:0d:1f:e7:b4:ea:63:11:fa:65:
ef:28:be:93:65:ad:99:c7:fc:75:01:d5:4d:72:5b:46:3b:88:
64:f8:bd:a6:90:1e:18:fc:1a:95:78:07:98:a6:64:d4:7b:97:
45:d2:c7:90:34:79:70:13:ea:e1:36:41:fc:d5:7c:41:92:ed:
06:7a:bb:28:63:5b:fc:f0:12:5b:0e:84:47:49:df:d1:5c:82:
59:17:83:3b:97:77:fc:d8:c9:7a:c3:45:c5:07:53:cd:da:a9:
46:48:47:45:21:b6:f3:ec:3e:5c:f9:ae:39:9d:f5:6c:cc:80:
e7:47:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:55 2026 by rpki-client