
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b32554a-3202-3fbd-8814-cc0a61d5568b.roa
File: 7b32554a-3202-3fbd-8814-cc0a61d5568b.roa (raw, json)
Hash identifier: zfohSmhnRdorM7N/PUF1qcw1VQTn0pSSw1mhGXWLK60=
Subject key identifier: 01:C2:40:02:AB:FC:E3:E8:10:CC:E4:A0:9F:E1:D9:6C:88:46:3F:8D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D290F56906373D6349817CD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b32554a-3202-3fbd-8814-cc0a61d5568b.roa
Signing time: Sat 14 Mar 2026 01:00:31 +0000
ROA not before: Sat 14 Mar 2026 01:00:31 +0000
ROA not after: Fri 12 Jun 2026 01:00:31 +0000
asID: 22677
IP address blocks: 71.91.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:29:0f:56:90:63:73:d6:34:98:17:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 14 01:00:31 2026 GMT
Not After : Jun 12 01:00:31 2026 GMT
Subject: CN=3f02b4a2-5d82-4690-a883-45d6022ca52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:26:90:2a:9e:01:56:b9:81:11:b6:0f:84:
42:03:aa:29:40:63:42:db:49:45:92:67:f4:b7:2c:
0f:95:a4:8a:90:fa:90:e5:ea:7c:04:ef:1e:c0:3e:
73:e4:0f:1d:b2:73:ff:ed:a8:15:9d:2b:de:2a:86:
17:2d:c6:09:42:ed:df:8f:ad:9f:19:b8:a4:84:f1:
20:b4:13:35:86:93:11:23:fa:7d:19:ab:84:d8:2d:
be:14:58:f8:04:2d:70:1b:50:20:7e:86:fc:73:1d:
c1:56:6f:fb:ba:85:e5:94:39:7a:47:74:bc:3d:52:
6a:75:9f:69:84:97:f9:44:0c:92:03:ab:7a:fc:8e:
98:81:0f:31:32:3d:5a:6d:8c:9a:63:c6:26:34:92:
79:f2:86:0f:65:d6:ef:a8:6d:b9:34:99:17:de:b4:
4c:fd:bb:ee:1e:3e:d7:96:2b:0a:9b:26:5b:32:52:
bd:13:a3:d8:54:91:ac:c2:a9:5b:9d:7e:67:83:71:
dc:90:5d:71:58:5b:00:5e:be:15:38:c1:f4:a5:4d:
bc:d2:9c:29:c7:cf:f6:cc:5e:e8:12:dc:d9:d3:5a:
23:d8:df:4f:7d:6c:c9:3d:14:3b:f8:5f:58:a3:84:
94:0d:c0:97:06:49:cd:90:07:aa:a1:db:4b:88:8a:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C2:40:02:AB:FC:E3:E8:10:CC:E4:A0:9F:E1:D9:6C:88:46:3F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b32554a-3202-3fbd-8814-cc0a61d5568b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.91.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:7b:ea:23:63:b7:eb:9f:d5:96:67:1e:02:32:8a:36:93:0f:
4b:21:08:16:91:6a:5b:de:78:4f:c8:ad:44:28:09:e1:53:76:
2d:4d:89:ac:10:b2:f9:8e:53:bf:43:39:4a:8e:24:a3:04:18:
4c:0f:6d:58:82:cf:d0:c6:1b:7c:b8:0f:d0:ee:a9:4e:68:10:
0b:b8:15:63:f5:ef:30:a3:00:6a:27:d8:e4:7f:8d:31:37:df:
a2:64:33:6b:30:4c:e5:02:e2:57:5a:98:90:ab:7d:da:66:b2:
2b:25:1f:db:fd:4b:2f:b2:da:c2:c9:d9:7b:16:2e:21:d4:c3:
cc:6c:5d:ac:28:a5:7f:34:82:40:35:44:4d:67:1f:7f:58:89:
51:08:49:ff:8b:0f:03:dd:bf:59:b8:c7:2e:27:3d:51:da:80:
e2:d9:70:be:ea:a3:d7:47:c6:c7:0b:26:00:0e:1a:08:50:b2:
6a:3b:23:a3:15:bc:c8:75:f1:b4:4c:2b:3c:00:9d:09:7f:ed:
50:d1:f6:55:6e:16:a2:f0:ca:4b:f7:4d:12:d4:fd:87:62:19:
49:b6:61:81:c4:64:73:6e:a6:65:d7:4b:ae:b0:01:82:15:74:
12:7b:52:26:96:9b:45:19:71:0b:d1:6f:bd:ab:c4:9a:e1:62:
a7:1c:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:17 2026 by rpki-client