
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ac723594-448f-3c68-aedf-8412bfa96012.roa
File: ac723594-448f-3c68-aedf-8412bfa96012.roa (raw, json)
Hash identifier: ++0TMvNXlBr3A6j9nWPFBcMAsasfc92Dz7W2up1lLT8=
Subject key identifier: 98:BF:A1:59:D5:AF:72:D9:D2:93:85:39:BD:3E:72:36:D9:D0:47:DE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D290F5438D2ADCFE18D774D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ac723594-448f-3c68-aedf-8412bfa96012.roa
Signing time: Sat 14 Mar 2026 01:00:31 +0000
ROA not before: Sat 14 Mar 2026 01:00:31 +0000
ROA not after: Fri 12 Jun 2026 01:00:31 +0000
asID: 22677
IP address blocks: 96.35.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:29:0f:54:38:d2:ad:cf:e1:8d:77:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 14 01:00:31 2026 GMT
Not After : Jun 12 01:00:31 2026 GMT
Subject: CN=1cbcf949-80b8-47ed-839f-6166d394103a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:11:b9:6b:ba:b3:64:95:86:a9:83:66:32:
16:73:ee:5d:dd:52:74:70:3f:90:4b:36:e8:a2:28:
53:1a:47:08:bd:62:9e:de:d3:ad:d2:da:3e:e3:a2:
c7:9b:16:65:bf:31:4a:46:51:d4:63:da:8f:a7:1c:
3b:60:11:52:e9:77:9d:e0:f0:c9:e1:17:41:de:68:
d7:38:e2:c3:12:b1:85:b6:f1:90:ea:86:9a:76:e9:
01:d6:6b:f4:ac:c9:a0:0d:8c:bc:0f:79:48:c2:5e:
a8:a6:ef:23:d4:c2:9c:52:35:66:85:86:1b:67:0f:
fd:fc:c1:7e:19:44:35:8b:1f:30:86:7c:e9:e1:ac:
c4:c4:ee:2c:a3:11:de:7a:75:ec:e1:7e:ef:e7:dc:
94:be:f0:b0:64:ed:94:ba:d5:4f:01:d5:b2:3a:4e:
25:fa:63:2f:3d:bc:74:75:2f:aa:b8:6e:0f:49:8d:
a4:42:ea:4c:5f:32:48:aa:56:60:dd:c4:fd:dc:ec:
a9:bf:b4:7b:e7:bf:56:21:5f:20:8d:bf:56:34:ef:
77:2c:e0:51:ca:0b:0a:93:77:d5:0b:cb:59:70:24:
12:90:e0:a9:b6:a7:bc:09:45:bf:26:0a:76:2a:02:
b0:21:58:59:be:97:c6:81:82:7c:1f:68:6c:c5:f6:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:A1:59:D5:AF:72:D9:D2:93:85:39:BD:3E:72:36:D9:D0:47:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ac723594-448f-3c68-aedf-8412bfa96012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
96.35.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:34:a5:00:02:58:84:a0:3b:5e:55:53:00:a4:68:fd:0d:f1:
e0:3f:67:35:b1:d0:47:f9:09:30:ab:d4:69:66:82:c1:87:96:
7f:03:0f:4a:36:12:ad:f8:36:f3:6b:eb:1c:5c:67:d1:53:c9:
15:6e:58:84:a3:37:1d:e5:64:e3:92:d2:c1:b5:db:1c:94:b9:
f7:4d:f8:25:d1:ec:5f:ca:31:8f:39:42:8b:b8:99:37:c1:e4:
9b:37:3b:c5:25:7c:ca:db:4f:f2:10:d8:0f:40:e4:30:92:b7:
f4:7f:79:8e:c2:a4:51:90:81:c4:c1:b1:22:b6:cb:23:a1:9b:
43:84:dc:33:28:5d:80:4f:0e:6b:4b:68:c1:1e:ba:e2:d3:fe:
98:f8:06:0b:27:db:7b:74:00:08:6d:20:7c:1f:f3:ed:e8:03:
13:09:84:9a:09:9b:a6:5b:9b:29:64:e1:34:38:ca:d0:52:f0:
8d:19:fd:b8:ed:27:05:35:9c:62:2d:3f:cb:fd:ec:11:9a:3f:
98:67:29:f8:68:63:73:7a:7b:57:1a:04:01:5d:72:1d:d8:d8:
30:2c:fc:1c:cc:bf:f0:1d:fc:ea:23:96:48:04:06:36:4e:36:
d3:6b:3f:d2:11:b2:e3:a9:7a:67:7c:2c:b6:fd:6a:f5:75:33:
5f:e7:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:49 2026 by rpki-client