
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa
File: a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa (raw, json)
Hash identifier: KY2t23z84nJkoHayZyc8+shQBT6exzgTsyMSOPlk4wM=
Subject key identifier: B7:7B:01:31:13:8F:50:E3:A5:85:4E:88:DE:CB:19:57:89:6C:53:90
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB4989E720F5091304B880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20001
IP address blocks: 66.53.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:49:89:e7:20:f5:09:13:04:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=56b707fc-54ef-4624-aeea-8f97187aa10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:99:44:f7:33:f4:5c:cf:9b:d7:27:77:44:
a9:b4:99:13:84:15:f8:fa:05:0d:2a:bc:09:14:d6:
6c:a6:3e:59:c2:ef:91:28:65:13:b7:fc:c5:92:d5:
14:8f:a2:e6:ad:e2:b4:00:22:5e:1d:67:0d:ed:88:
5f:52:e3:32:7f:f9:7c:ae:06:cd:a4:3a:a6:92:ac:
80:cf:93:1d:d6:cd:40:4b:cc:ae:e1:58:5a:34:00:
80:58:5a:c4:52:b7:a3:10:cf:02:f9:2e:91:59:15:
65:02:0c:50:a1:d3:26:ad:93:28:75:57:9c:4c:d1:
fc:7b:ed:7f:31:4c:57:a0:51:14:2f:1b:b2:84:1d:
d0:f9:cb:0a:de:7e:77:06:3f:d9:00:99:70:7d:bd:
60:74:7c:72:99:6b:e5:c9:3c:cb:c8:3f:e4:29:7f:
29:9c:0d:c2:6d:a4:45:49:76:63:db:55:3c:45:ea:
21:7b:12:bc:2d:66:3a:d1:c6:fb:27:fb:06:58:93:
f1:ff:03:75:af:01:67:29:b8:1f:1a:61:e6:33:7d:
6f:48:e1:71:32:40:d4:7f:59:d9:82:8b:fe:32:5d:
d2:20:c6:9d:24:c7:28:c2:9e:11:16:04:16:3a:de:
01:59:2b:25:69:bb:ec:98:46:a3:44:61:c3:64:99:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:01:31:13:8F:50:E3:A5:85:4E:88:DE:CB:19:57:89:6C:53:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.53.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:37:f4:ae:92:4f:da:08:0e:9d:dc:6c:88:61:85:35:21:8a:
83:1e:42:40:75:57:89:8a:1c:44:68:df:14:22:de:7d:3d:de:
10:08:7e:a2:ed:ac:96:93:7b:1c:3d:3d:35:7d:93:4d:a6:1b:
b1:88:8b:27:55:87:00:c4:59:b0:ee:21:2d:ba:9b:e7:ee:d9:
ea:77:2e:33:9b:32:b7:ca:88:2d:95:b3:9d:60:8e:bc:9b:dc:
e8:d9:a3:22:c9:ed:54:46:84:e5:1f:dd:7c:bb:85:9b:e2:1d:
4c:ae:b9:89:96:b7:c9:e7:7e:0c:f6:8e:bf:90:37:91:88:3d:
69:47:79:41:65:25:bc:ab:76:ff:a5:d1:5b:e6:eb:fe:e0:ef:
62:20:aa:45:20:c4:a8:b7:d2:94:40:dc:bc:d4:71:7b:68:63:
8d:bd:fe:25:48:9f:74:6c:85:e4:a2:7f:ac:a1:fa:2c:bd:b9:
e0:10:66:5e:af:e7:4c:14:8d:01:92:4d:59:42:82:80:52:bb:
76:ec:ec:59:cf:95:40:21:49:f8:aa:8e:68:a7:a4:0d:d9:3a:
0c:05:88:cd:9f:3f:a3:52:75:96:14:50:c7:b6:ff:6d:c5:6e:
a4:41:c1:46:27:6f:43:7f:2d:c1:47:ce:67:a1:87:47:f7:85:
1f:40:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:30 2026 by rpki-client