
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7856f232-6e2b-386e-9fa0-c830573c5b1f.roa
File: 7856f232-6e2b-386e-9fa0-c830573c5b1f.roa (raw, json)
Hash identifier: ujW8ZUPB4/OmK83LxUeT4+MpNAiprfZZQo5+SRgKpVk=
Subject key identifier: A7:F0:86:B3:68:EC:7D:13:18:9D:5A:86:25:C7:4A:75:CB:37:0E:1A
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CADD866A32C5092A251F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7856f232-6e2b-386e-9fa0-c830573c5b1f.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 71.13.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:dd:86:6a:32:c5:09:2a:25:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=ad4ea362-ea8b-4911-a771-6dcef7710bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:34:15:c3:76:22:ea:09:ff:2d:bf:ee:78:
31:87:59:48:9e:9b:46:59:2f:36:67:9c:1b:49:e3:
a8:a5:20:e9:22:f9:d1:d5:ee:21:6e:08:69:f2:1c:
29:2f:91:c0:4e:c6:72:23:d9:10:50:1a:f0:00:03:
05:a2:aa:62:54:25:f2:c1:2b:00:1e:c6:06:25:39:
79:95:cb:e9:94:58:93:c6:30:48:79:b6:c5:24:78:
9b:f8:a8:7b:93:60:76:fb:ac:0c:77:fd:86:dd:61:
81:91:8b:0b:f4:d5:45:e7:4d:d8:52:25:a2:eb:22:
87:ae:39:61:af:ef:94:12:19:69:a6:83:99:98:c7:
65:d6:c0:1e:88:61:b7:8b:5e:e1:bd:d2:f8:bb:fa:
f3:e4:79:34:97:df:03:8c:a5:64:3f:24:de:45:f9:
5b:61:d8:46:aa:c2:06:e8:91:af:f0:ef:14:6e:a0:
c1:6f:aa:94:b9:30:50:c2:21:25:88:46:83:ea:0d:
92:a8:56:c6:f4:dc:fb:c5:de:7e:be:b5:f6:2d:63:
e7:05:35:9a:fa:93:5c:59:c5:37:6d:68:78:c1:d4:
7e:0c:26:1f:31:46:6d:b5:43:6e:7e:3f:df:a6:bf:
9a:d2:6a:4d:30:71:c5:b1:43:ec:f3:3b:2a:d6:2b:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:86:B3:68:EC:7D:13:18:9D:5A:86:25:C7:4A:75:CB:37:0E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7856f232-6e2b-386e-9fa0-c830573c5b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.13.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:29:ba:a6:54:1b:33:ec:4f:11:69:34:00:95:a9:ed:51:a6:
57:07:0e:d5:e1:f7:2e:d4:08:fe:df:93:fb:51:3b:b4:df:b9:
ff:6f:af:f7:d5:17:c2:9f:d9:79:f6:75:0b:32:1b:20:e1:26:
3d:4a:5b:08:6a:0e:9f:3f:6d:f7:55:e9:7c:bc:30:c8:19:8a:
3e:e1:be:63:b3:44:36:8d:49:bd:5b:a8:f0:b6:fb:cc:40:55:
36:07:af:e8:b4:da:7f:0c:d9:4d:6c:e5:3d:1a:a7:a0:1b:6f:
6c:13:ab:ca:4f:72:2b:e9:f8:60:62:f7:da:bc:05:cb:f5:81:
51:ec:0d:3d:07:39:2a:7a:1f:58:2a:53:ac:78:a7:ce:3a:d5:
2c:bf:72:a1:9c:0f:d8:3a:6c:19:56:51:29:23:b0:3c:87:77:
3a:d1:c5:eb:2a:91:f0:29:a3:6f:b2:5f:11:c7:94:62:90:2a:
4d:9a:93:17:56:53:b8:5d:3b:f3:fb:09:e0:ff:97:e0:38:0e:
d5:42:07:d5:2c:88:6b:9d:2c:c9:c8:94:80:77:06:37:99:e8:
02:fb:be:25:73:54:3d:d5:32:ba:03:32:33:a7:ce:14:8f:f3:
c7:80:f4:7d:4c:0a:9b:35:8d:ae:b0:2e:5b:21:aa:e8:cc:87:
47:bf:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:17 2026 by rpki-client