
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/911e1824-630a-3784-b2e8-69d7338b2da4.roa
File: 911e1824-630a-3784-b2e8-69d7338b2da4.roa (raw, json)
Hash identifier: gcyz+OFnBVl8rAKu2JrdjerkoT17ZPHjDKdag3eIgXg=
Subject key identifier: E3:40:76:11:F9:28:E4:52:09:C0:66:83:99:E5:71:04:81:BC:8C:CD
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB90C96ED66518457EC380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/911e1824-630a-3784-b2e8-69d7338b2da4.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 35.151.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:90:c9:6e:d6:65:18:45:7e:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=3eedcd42-b880-4634-8265-246a08842cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:51:ce:2c:d9:03:45:34:da:d8:aa:fa:0b:
60:dd:16:51:55:0f:5e:45:27:72:16:ee:5b:a6:e1:
11:02:ba:4a:fd:7d:2e:fa:26:9d:c8:db:db:63:e2:
32:e9:fe:ce:6c:43:48:18:be:e1:3d:cc:70:58:0e:
18:8d:a3:c7:d0:93:72:f4:99:06:d9:66:78:58:f6:
86:f1:a5:08:2b:4f:80:b8:57:19:ca:e0:5a:5a:af:
a3:bb:33:72:05:77:09:96:76:fe:2a:d1:16:32:2c:
df:ab:9f:18:51:bd:9b:30:df:10:a4:8d:03:b4:5e:
aa:27:c2:c5:7e:00:0e:93:f2:bb:d4:e4:9a:9b:a6:
cd:54:4a:b5:70:5a:9d:db:30:ac:c7:76:43:5c:4c:
66:06:b1:31:f0:b8:c9:08:f4:75:01:d6:91:df:70:
32:c9:c8:57:2c:97:c5:e5:58:bc:f8:54:8a:97:c8:
80:cc:bb:72:17:e7:65:94:c2:97:91:2c:6c:15:e6:
d4:03:3a:01:7a:a2:ab:91:70:85:da:64:ba:92:27:
9a:c5:ec:18:7c:91:46:58:e3:a9:51:c2:2f:78:c3:
e3:e1:29:16:7c:ff:14:ed:a9:1d:c6:d4:5f:93:1b:
54:e9:47:9f:7f:0c:9e:c3:e7:c1:28:de:53:d6:8f:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:76:11:F9:28:E4:52:09:C0:66:83:99:E5:71:04:81:BC:8C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/911e1824-630a-3784-b2e8-69d7338b2da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
35.151.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:3e:36:de:2a:00:92:f6:3a:1f:24:18:6e:4b:5c:41:19:d2:
77:11:17:bf:e0:d2:7b:20:d1:28:2d:c2:6c:20:65:b1:6e:cb:
ef:3b:4f:4d:3b:66:5d:9c:ea:5d:ed:82:5f:e4:e4:a7:1b:dc:
f3:38:24:a1:d4:3c:22:51:ba:3d:01:b3:65:b2:d6:47:8c:81:
67:83:7d:35:5e:e8:47:92:27:9a:bf:17:73:d5:b7:ca:77:53:
34:03:9a:fa:16:5a:5a:cf:b0:42:01:06:e2:33:15:3b:e6:f2:
c5:ef:64:9d:06:ba:11:11:43:1c:ad:4f:1e:f9:10:aa:52:d5:
e5:25:11:e1:43:b7:b9:ca:a2:79:fe:99:59:ae:c2:37:78:86:
20:37:91:b1:48:1d:e8:32:d0:a0:46:ac:16:5a:ab:e3:17:4d:
f6:c9:c4:e7:6e:18:69:e6:e2:4f:6c:af:a4:f0:63:41:dc:10:
1e:3c:cb:a0:e6:68:63:9d:71:5a:88:f0:8d:91:71:08:a5:dd:
a0:71:cb:5f:48:48:29:e3:a6:7e:83:ef:a2:17:d8:a3:85:87:
96:0d:0d:00:34:dc:b5:1b:50:13:21:5c:30:0c:75:a4:15:83:
8c:36:d5:ce:4a:b8:f5:6a:4c:5d:07:2b:00:60:7b:4a:7f:53:
5b:84:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:50 2026 by rpki-client