
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9244e246-f9e2-3cd3-8983-0e98281a217c.roa
File: 9244e246-f9e2-3cd3-8983-0e98281a217c.roa (raw, json)
Hash identifier: k2VrCjpptYFIexIQcJ4a2C4paqy8xNfWjTE1OTZSCHY=
Subject key identifier: 10:14:2D:E0:A8:89:AC:87:42:23:68:C7:D6:F0:AF:54:AA:EC:B0:B8
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB471DC20ABEF5D6BB9D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9244e246-f9e2-3cd3-8983-0e98281a217c.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 16787
IP address blocks: 68.114.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:47:1d:c2:0a:be:f5:d6:bb:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=b8b70336-2a60-4d7d-9626-f371f69e351d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:b2:22:6d:99:71:92:4c:1b:17:30:74:94:
1a:91:56:2e:df:4c:fd:7d:99:ee:b2:10:a5:e9:cd:
36:28:60:ef:68:17:9d:2f:0b:30:72:25:8d:8f:17:
f1:32:fe:6e:cf:28:e2:e6:bd:b6:79:fd:8d:05:76:
70:4e:bd:ad:13:4c:0c:2b:74:4a:32:b8:83:dd:75:
86:df:f6:aa:f0:2a:b7:09:1d:04:25:4f:ec:b7:26:
58:74:66:e1:99:54:3f:35:07:21:2a:52:c5:a4:9d:
da:a5:ae:c8:81:20:27:c5:bb:44:e3:f1:d2:de:1b:
fb:22:28:fe:42:c9:f8:35:85:b6:7a:2f:a5:32:60:
e0:19:5a:8d:a4:a7:e5:42:6a:a2:08:3d:d3:d2:6d:
f5:bb:38:5c:1e:58:ef:04:70:2a:9a:67:8a:7b:d3:
e3:e2:80:bb:7d:03:6a:3a:19:e7:3a:af:35:93:87:
20:1f:45:cc:7f:e3:81:34:24:36:7a:96:fd:35:76:
6f:07:e7:cc:a9:a8:48:44:79:83:2b:0e:50:1f:86:
fd:4a:49:d1:83:82:ca:1f:43:c3:92:ca:ea:ca:98:
49:68:a1:ec:d1:59:3e:bf:0e:31:1f:6e:65:73:52:
55:03:5d:2d:10:23:45:97:c2:98:be:03:ea:ae:ed:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:14:2D:E0:A8:89:AC:87:42:23:68:C7:D6:F0:AF:54:AA:EC:B0:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9244e246-f9e2-3cd3-8983-0e98281a217c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.114.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c8:3e:15:c2:77:e0:3d:c0:21:2a:62:00:6b:b6:95:64:0b:
b8:ce:4c:1b:40:45:64:ce:b3:a7:58:c4:fa:67:9a:4c:fe:9f:
5d:e5:11:36:a4:3c:2d:d7:70:5b:90:fc:a3:a0:38:8a:af:be:
3d:c1:be:25:11:0e:5d:18:e9:c9:8d:be:0e:e2:a3:41:08:06:
c8:7e:2a:c4:5f:7d:60:87:90:02:7e:57:95:37:e4:0b:a2:99:
08:df:9c:e4:86:3b:7c:0c:ce:c8:80:1b:ee:cb:93:86:50:1b:
52:fb:43:6c:04:2f:47:97:37:46:78:62:3f:85:0a:bd:8d:c8:
cb:86:6a:de:98:f1:aa:9a:47:b0:f7:69:90:08:0f:98:44:00:
e4:ad:61:23:e5:c5:7c:55:db:70:66:24:90:c8:3f:9f:0c:7c:
73:e1:00:59:77:19:2b:f1:e7:5f:be:78:99:50:b1:a2:7a:57:
b3:64:d0:49:fa:23:d7:af:a7:6b:be:9f:62:66:2e:56:a0:1e:
72:2e:f9:22:5e:9c:f4:ed:5f:cf:52:20:e9:dc:d7:bd:a4:fc:
36:39:35:ca:3f:21:87:9b:ef:8a:5b:74:04:29:73:10:9c:b1:
43:9d:de:64:c1:68:60:9a:03:fd:d1:26:1c:ef:d9:67:f3:70:
93:33:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:23 2026 by rpki-client