
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ffc95ab-a946-3219-990d-a164b3031e56.roa
File: 9ffc95ab-a946-3219-990d-a164b3031e56.roa (raw, json)
Hash identifier: 1LE3hl0afXVak80+vw2htWXpIwvX0h1sKCJd3unxAzw=
Subject key identifier: 23:98:51:15:09:E7:5D:4A:66:15:48:E9:BC:7F:BB:30:AD:F7:B5:8F
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584F655E39F769AE76AD8619B5F0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ffc95ab-a946-3219-990d-a164b3031e56.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 20115
IP address blocks: 71.88.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5e:39:f7:69:ae:76:ad:86:19:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=751bfe3a-4702-420f-86f6-dfaa2a1354f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:e8:d0:00:8a:4b:f4:ac:ee:ef:38:bf:11:
44:b3:0e:56:f8:aa:a5:a6:d8:09:01:a8:3b:ac:a9:
14:2f:f1:25:40:03:05:34:96:2d:e6:8c:41:8d:25:
2c:92:83:e0:6c:1b:54:e0:12:10:56:f7:84:de:42:
47:64:04:be:98:06:a6:bb:a7:bd:59:0b:e4:6e:6c:
f2:26:be:ed:3f:4b:f0:0c:9e:24:22:55:2b:1d:35:
22:ad:23:e0:fb:5a:72:b8:a4:52:30:98:11:91:41:
06:a2:ae:37:3d:60:af:5f:c3:59:fb:05:66:da:fb:
17:93:8e:d8:dc:f3:95:8c:f8:f3:9c:59:2b:95:f9:
af:1b:16:eb:e7:ef:e8:6c:f1:a7:b7:fc:41:30:21:
e3:6d:00:99:f4:a3:37:89:58:e7:0c:ba:60:9b:b4:
90:22:b3:4e:d1:49:42:ee:f7:d9:d3:4f:e6:cd:ef:
c7:4f:34:4e:d0:2a:c7:5b:85:b9:3d:1c:b8:06:ea:
93:f9:db:44:49:cb:c8:bb:4e:84:39:f1:43:4f:16:
9b:cc:67:37:f2:b0:8e:6d:f9:f2:1e:a9:7a:10:f1:
c2:87:e3:70:e2:f3:e0:f6:82:29:24:90:74:00:d1:
83:93:b7:99:ea:53:1c:2f:38:13:76:05:a8:23:34:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:51:15:09:E7:5D:4A:66:15:48:E9:BC:7F:BB:30:AD:F7:B5:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ffc95ab-a946-3219-990d-a164b3031e56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.88.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:43:47:02:fe:68:01:b0:8e:69:6b:44:7e:51:2a:b3:56:c5:
94:27:be:38:1a:cb:7e:f3:c5:5b:9f:54:fd:82:43:2a:88:c0:
d6:23:70:b4:52:2d:5b:2a:c4:5a:cb:77:13:b2:5c:53:d8:04:
3a:2f:c4:60:bc:7b:07:24:c6:a8:45:ac:12:81:34:7f:24:11:
41:17:7f:a3:c1:1d:a5:b6:ba:cd:b0:2d:8c:01:02:eb:55:1c:
cd:e0:ae:1d:84:66:68:d5:31:c9:25:5e:d6:e3:2a:75:8a:31:
61:ec:ab:f3:f2:36:b0:2e:b1:00:0d:75:c7:3b:f7:be:78:8e:
87:55:67:12:51:d6:81:f0:c9:31:f0:d8:00:85:99:b0:62:fa:
e0:3c:ef:a4:d0:40:ef:76:a1:77:b8:47:82:49:51:f4:90:28:
1a:ea:7c:1e:68:bd:12:0f:16:31:c0:c4:30:04:bf:54:54:7e:
a2:71:04:72:ec:65:66:dc:89:65:58:bb:7b:ca:c8:bf:7f:22:
c6:c5:54:ca:81:8e:34:ae:01:de:db:8c:7a:72:54:3a:32:b6:
c1:1a:78:b9:ad:0f:5f:22:0c:ec:ce:34:a8:53:c8:04:b2:61:
ae:dd:0b:5c:ef:86:3a:70:e6:b2:f8:a8:53:b1:6b:c5:ca:99:
16:db:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:27:25 2026 by rpki-client