
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/59d8ff03-53e4-3043-9bb4-6a398c785137.roa
File: 59d8ff03-53e4-3043-9bb4-6a398c785137.roa (raw, json)
Hash identifier: U8AxlKdQ25XhhVMs0j9O5ZwmGyWMnWofXDjraWYjeHs=
Subject key identifier: A5:7E:E3:12:61:EC:B1:E9:C4:22:82:CA:87:6D:A5:15:86:D5:8F:52
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D2644C8E58E7ABB1AFFAE3B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/59d8ff03-53e4-3043-9bb4-6a398c785137.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 11351
IP address blocks: 168.148.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:c8:e5:8e:7a:bb:1a:ff:ae:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=4a7602b5-ef36-4cea-99d4-e5467997708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:eb:7a:0a:53:db:09:5e:fe:ae:47:ef:83:
36:38:1d:30:e5:e9:f7:70:14:2e:c2:e2:c9:5d:15:
c4:47:ff:98:a2:36:89:d7:28:fc:8b:8f:e7:bf:fe:
78:7b:f9:a3:bb:3f:2d:8d:3e:6b:fb:16:11:69:4a:
47:a8:32:54:b6:c8:dc:b4:33:f7:ae:57:03:b6:5b:
09:18:46:f1:75:e7:49:80:c2:1e:06:9d:a9:b3:7f:
5f:b1:7b:40:92:60:53:85:c7:a7:73:d5:58:28:87:
b3:c2:e1:66:98:0e:f4:e1:aa:b1:21:c0:88:37:74:
1b:ea:fd:68:ed:59:ef:4d:3e:3f:4b:c0:d6:95:6f:
40:b6:f4:78:42:d5:4e:21:27:a8:6d:e8:32:9d:20:
ec:fb:f6:fb:62:2f:0a:ff:08:0a:6a:66:33:a4:74:
33:85:7c:e9:d5:b2:56:db:1e:7b:13:a0:de:ff:5a:
1a:92:a1:83:d7:ae:11:6b:33:11:eb:e1:77:d5:a2:
ac:47:61:19:e5:3b:28:75:3f:10:1b:a7:9b:45:8a:
84:08:63:16:97:30:f0:6f:c1:50:72:80:10:07:4b:
d4:70:d6:bd:ed:06:ca:fc:da:7c:7a:c6:88:1f:2b:
3e:11:73:73:bb:52:1b:d4:a9:c2:c2:e5:68:1f:fb:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:E3:12:61:EC:B1:E9:C4:22:82:CA:87:6D:A5:15:86:D5:8F:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/59d8ff03-53e4-3043-9bb4-6a398c785137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
168.148.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:a5:fa:b7:f4:28:c9:c4:90:61:29:24:42:e1:c1:76:8f:88:
75:aa:e9:33:5e:87:b2:84:0b:44:c2:39:57:17:92:8e:1c:a1:
1b:8c:12:ab:1c:33:e7:9d:41:64:76:30:45:3d:c7:95:c3:87:
33:96:b4:f8:e9:95:4a:eb:66:c3:13:07:69:46:a8:0b:bb:92:
53:f5:67:fc:b6:c6:a5:1c:ac:63:17:2e:44:0e:9a:98:af:73:
1d:fa:50:e1:d4:a6:9a:31:3a:e4:13:d3:75:fe:c5:16:1e:b8:
17:9b:09:5a:05:9c:e8:7d:07:2e:a7:b1:f1:a3:6c:bd:97:59:
16:b3:b0:70:a9:17:3d:76:66:2b:1d:79:f2:2b:45:1a:ef:96:
0b:c1:b2:38:4e:5c:68:29:19:b4:7b:a7:6e:79:2e:2a:df:32:
69:ec:0b:7c:eb:72:af:e5:40:3b:b4:f4:53:1b:45:d0:5c:98:
35:dc:0d:e7:43:81:25:c9:ad:7a:04:a6:81:37:3a:bf:15:01:
09:4d:70:11:02:30:41:cd:71:c9:fe:ce:1b:4d:a3:9c:81:48:
99:cf:d2:c8:5b:55:db:12:c5:bb:ec:67:04:3e:4b:4a:ac:26:
4f:62:e7:ae:ef:f3:48:51:64:eb:31:77:e6:fa:5d:8a:cc:17:
9c:01:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:04 2026 by rpki-client