
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a20376b7-462a-3c08-8288-234f994d8bc3.roa
File: a20376b7-462a-3c08-8288-234f994d8bc3.roa (raw, json)
Hash identifier: LmFhjj5ovzx84Y6I2mITaCPOxS1twk4o+7LnkTCpvkc=
Subject key identifier: 3A:2E:55:99:57:23:A3:FE:B8:D0:6D:BD:84:31:92:8A:1C:77:D0:C1
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CAFF75979F63D59534D9C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a20376b7-462a-3c08-8288-234f994d8bc3.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 40294
IP address blocks: 47.43.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:ff:75:97:9f:63:d5:95:34:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=45e4616d-4dcd-4745-9b63-bae50f5db5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:6d:47:0e:80:8d:f3:c3:b5:71:e7:3d:c6:
be:23:cd:da:66:72:7c:8d:c8:65:e1:2c:c4:2e:a5:
b8:51:63:9c:f4:7d:f2:85:4e:42:b4:51:2a:53:4a:
1c:b7:f1:a1:4a:8b:39:a8:7d:5c:16:7b:12:97:f4:
d3:09:13:71:3b:60:d0:50:78:2a:01:91:a5:86:4d:
94:1c:89:39:09:ca:53:5b:41:3c:c8:c1:05:a5:6d:
ad:c4:28:c1:3f:7d:2e:45:82:eb:02:65:0f:3b:d9:
9f:30:94:ca:a0:fe:56:15:81:de:ea:15:ca:00:b8:
32:ac:17:f2:34:bf:0e:a3:20:27:1a:9e:ab:ff:e7:
e5:ec:69:09:e4:77:7d:c2:27:a4:45:d2:8f:6b:26:
71:a7:16:37:23:8c:7b:cf:8f:9e:70:57:7b:f2:9e:
9d:78:c5:00:de:ef:32:be:ca:97:be:c2:9e:82:b7:
76:26:0e:07:af:56:60:e7:a6:08:a6:5f:9a:d1:30:
e1:37:e4:ab:5b:3a:64:20:87:af:28:34:ed:1d:ad:
6d:a6:9a:c6:88:79:20:01:36:66:4f:1c:73:7e:50:
58:04:39:9d:a9:1d:0e:0a:88:d9:03:a1:9d:fc:19:
fb:52:aa:d4:3c:00:a9:26:71:c9:c6:06:6c:bf:52:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:55:99:57:23:A3:FE:B8:D0:6D:BD:84:31:92:8A:1C:77:D0:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a20376b7-462a-3c08-8288-234f994d8bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.43.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:16:5b:04:57:bd:dd:cc:e0:be:5d:11:59:60:ec:2b:b3:b4:
79:0d:ca:f6:28:c0:c3:8e:e7:cc:9f:c3:6d:95:b2:73:75:fa:
35:1f:b5:08:75:5f:8c:7a:b1:f1:ba:33:ae:c8:d0:c5:64:26:
50:71:31:31:88:da:c0:60:f5:c6:6d:6a:fb:b9:ec:97:ac:6b:
21:b3:96:9d:3f:8a:ef:14:cd:cd:e9:5a:37:7e:ab:61:a4:d5:
14:fc:6f:60:7b:54:2f:4e:0a:e1:80:cc:d9:a8:51:b5:cd:3f:
4a:3d:60:c9:49:1e:eb:e5:25:6a:01:21:91:8a:c4:b1:78:af:
bd:97:af:a7:fc:ac:e4:57:ab:87:de:95:d0:43:4d:10:68:6b:
76:ff:c1:71:e5:68:7d:32:2b:ec:50:7c:91:ce:38:ae:c0:a1:
27:a8:11:6f:22:b7:2e:81:c3:40:e3:3f:b4:18:47:c2:10:41:
b3:53:e2:2d:5e:8a:92:25:86:c9:f4:11:eb:89:2a:65:65:58:
18:29:b2:77:c5:c4:df:70:cf:e5:77:70:d8:45:9b:cd:df:a3:
f4:51:fe:71:be:b6:c4:9a:03:38:da:43:81:44:53:d4:d2:20:
33:5f:4e:ec:aa:f6:f9:cd:96:81:ee:a8:f8:7e:86:84:17:bd:
7e:56:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:44 2026 by rpki-client