
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8bc628-eea4-332d-84d2-c5743c75e991.roa
File: be8bc628-eea4-332d-84d2-c5743c75e991.roa (raw, json)
Hash identifier: BtTiQzKqdi5sfRtiKyFl5AFwFB+k4rM7/4NCGOpnHeE=
Subject key identifier: 67:FD:D5:06:50:FC:57:65:9A:90:2A:E6:59:44:47:84:A9:13:60:E0
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CADAA8F18DD6090B740EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8bc628-eea4-332d-84d2-c5743c75e991.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 68.185.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:da:a8:f1:8d:d6:09:0b:74:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=535c38bd-733e-4838-8c2c-ebbcb03cbaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:2a:9a:9a:3a:09:2f:05:61:37:f2:df:c3:
60:2c:68:05:76:be:b5:2b:43:b9:ca:8e:f4:9c:18:
8c:b0:7c:db:de:bd:54:af:14:12:fc:ba:88:6c:d3:
cd:98:9f:16:a1:2c:af:c5:d2:68:16:6f:c0:47:41:
10:35:43:a1:4e:d4:d3:66:9b:96:49:88:9f:52:11:
97:77:3b:d9:e8:f8:9b:19:76:eb:3d:c7:a5:73:a6:
93:c7:64:5c:8d:24:d8:15:b7:12:0f:63:cd:60:b3:
e2:96:2f:6f:5b:16:f3:1c:20:48:04:5f:67:e2:33:
84:60:f1:24:2d:35:a9:87:e3:d5:73:8a:00:ac:a8:
38:7b:d1:3e:b1:1c:75:84:41:65:0c:b9:ef:c4:2d:
06:00:c3:13:b7:0f:42:a1:bf:93:ed:16:ea:28:5f:
d2:27:0a:24:d9:38:a5:0d:a3:10:36:b1:32:12:57:
7e:86:8a:3d:84:83:3a:6f:1a:5f:66:cd:b5:11:9c:
64:31:95:3b:fc:17:03:50:79:3c:56:50:82:69:0e:
49:cf:48:bf:69:a5:69:a7:28:35:d0:c5:4d:e7:75:
57:f5:3f:2c:2d:86:10:a1:36:e6:7f:ed:7b:b7:c6:
25:1f:6e:9c:81:49:82:54:14:3f:ca:97:3f:d5:2e:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FD:D5:06:50:FC:57:65:9A:90:2A:E6:59:44:47:84:A9:13:60:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8bc628-eea4-332d-84d2-c5743c75e991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.185.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:c4:5c:2b:21:7e:ae:e5:6f:3d:33:1b:4f:97:3f:42:10:cd:
9d:cf:33:e8:94:1f:b5:14:bb:5e:78:ec:ee:f5:7f:31:a1:96:
11:ca:91:3e:20:9e:f0:91:e8:86:0f:6f:50:0e:96:e8:b7:81:
c5:5c:c9:b2:9d:f1:62:73:12:4d:58:18:7f:d1:9f:f4:5b:99:
68:de:15:f4:06:74:ad:9c:bb:1f:26:8d:3d:ec:22:63:3c:cc:
71:dc:3c:58:26:bf:0f:35:d0:8a:86:0a:0f:86:45:8d:93:e9:
77:cc:c7:59:94:d5:b8:89:a7:54:44:93:e1:38:c0:be:ee:a5:
6e:38:60:d3:2b:91:7a:62:13:26:0e:0d:b3:f4:9e:cc:3f:6f:
ab:b8:18:73:05:46:e3:51:85:fe:24:2b:43:ad:e2:21:40:dc:
91:e6:6e:3c:4c:d7:f2:47:46:cd:b7:dd:23:2d:ff:e0:7a:18:
7b:ed:b8:67:9d:10:09:2e:13:94:65:1f:bf:6a:d9:20:9f:8f:
04:7e:8b:8b:c9:a9:17:9b:8f:38:0a:51:02:61:ca:02:dc:8f:
74:61:d4:8d:10:95:24:87:d9:95:a8:1c:93:3e:bf:59:b2:7d:
aa:cd:26:72:ff:cd:69:7e:1b:c8:aa:cc:af:95:0a:8e:0a:27:
81:af:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:11 2026 by rpki-client