
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
File: b3d1120a-b857-30de-bd4c-58937c25ac9b.roa (raw, json)
Hash identifier: r3GUCq1inA9tardtyMMuXLXo0M1/RWqT6npZOP7+rXA=
Subject key identifier: 8F:6F:6F:85:5C:23:EA:1C:5F:AE:E7:39:0D:F6:F3:D0:A9:6E:D9:2D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB7F0EFCE16F08B34AD180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 71.8.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:7f:0e:fc:e1:6f:08:b3:4a:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=a374b3e4-142d-4250-9b96-83ec509dd54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5b:8c:26:87:db:d8:b0:f4:e3:9a:8c:b0:4a:
0c:3f:eb:66:17:1e:8e:42:57:a5:ba:f3:c1:b8:c0:
af:b5:5c:dc:f6:3e:a8:d1:5f:44:24:f2:07:fd:f9:
2d:e4:fd:a3:49:7c:c3:18:a9:88:b5:49:64:83:d5:
07:e8:53:19:48:89:fd:4c:e2:f9:23:26:78:4a:e4:
84:3a:5b:70:8d:51:17:b0:cb:71:06:58:9b:4a:27:
18:0a:75:3f:18:fa:21:5d:6b:39:9a:33:aa:ca:9d:
60:3d:67:7e:8b:62:fd:c2:d7:79:2f:aa:a3:9e:9f:
63:3f:8c:d4:b9:ab:7c:f9:4b:5b:5b:07:93:62:32:
0d:ee:07:82:ff:be:78:45:8b:99:55:3c:ee:c4:1b:
ed:05:fe:37:6a:5e:4b:fa:05:4c:71:74:2e:80:4b:
af:7a:80:5a:54:a1:45:85:78:7a:ec:f2:db:b5:bc:
ce:f4:90:2c:de:6f:14:eb:ab:32:fd:6b:c3:5b:5d:
9f:d5:0b:e1:39:c0:16:1e:b3:4f:87:9a:1d:cb:ee:
2e:37:e9:06:52:47:be:1e:a7:3a:6e:75:37:da:7c:
d3:fa:15:47:48:e7:f0:02:d3:24:69:d1:63:27:c4:
87:59:93:da:13:0c:94:cc:3f:f2:60:08:43:4e:f5:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:6F:85:5C:23:EA:1C:5F:AE:E7:39:0D:F6:F3:D0:A9:6E:D9:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.8.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:82:ca:df:00:03:45:42:ff:96:27:4f:32:c5:0e:c9:06:42:
ad:bb:19:1a:a1:ce:2d:ca:31:22:64:53:21:cc:13:48:12:5e:
47:25:4e:3f:e5:94:98:86:7a:41:a0:39:ab:db:6b:f4:4c:e2:
a3:b5:55:93:a4:1a:2b:04:2b:fc:85:99:12:73:88:84:32:e9:
93:42:e1:ed:44:3c:f3:5e:ee:ac:5b:02:2c:12:56:e1:18:2e:
d0:7d:7c:e9:bb:68:66:2f:0e:34:2d:0f:4e:ec:6c:66:13:81:
15:38:7d:10:ee:1b:fd:d7:62:13:af:59:61:d1:68:14:45:d2:
86:3f:38:56:2f:9f:a7:d5:4b:37:f6:aa:7a:b5:5f:67:21:7c:
be:7f:eb:45:a7:34:2f:8b:66:c0:ca:f6:37:b7:f3:e1:08:1e:
e2:d4:73:88:c4:c1:1d:b3:7f:10:84:6b:18:39:06:51:e8:20:
3f:15:1c:26:7e:02:98:90:4f:d8:d4:5c:d3:bf:5d:92:f8:c5:
75:7f:ea:2f:8d:87:a1:83:e6:ae:f8:34:f6:5c:2d:a0:df:9e:
0c:bd:02:96:b4:4f:f5:9f:3c:18:e4:15:37:f1:e4:40:74:06:
cb:3f:b2:93:b4:e4:20:b8:6d:a0:2d:b0:4f:e4:0b:1e:c8:94:
aa:04:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:38 2026 by rpki-client