
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa
File: e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa (raw, json)
Hash identifier: rtLAb6IIlEuXbSfAllGxjJ34YCn9onF7zj9Je6pUx0g=
Subject key identifier: 52:4F:DB:24:92:96:2E:5C:5B:E3:A4:A3:D5:01:65:5B:0E:95:28:E0
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CAB7E88E04817E0451B780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 71.86.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:b7:e8:8e:04:81:7e:04:51:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=50c0ee99-6f6e-4f8f-b0d6-e8455e2f67ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:9a:4b:24:24:66:9b:d8:94:51:fc:ca:5f:
b5:80:92:d2:10:7c:13:33:e4:9c:64:ca:8e:50:a2:
d0:c8:04:1f:78:da:65:75:ea:df:44:5c:fb:66:2e:
5f:e7:29:bf:6a:bf:b4:dd:d4:62:e7:00:32:1d:c8:
56:05:12:06:88:ee:48:f6:a0:39:9f:3b:08:25:51:
dc:7a:87:f4:4e:96:bc:76:0d:36:8c:18:22:cd:24:
ca:51:55:0a:6f:16:0b:3f:2d:f4:bd:4f:0e:52:1e:
90:67:89:ba:a4:5e:49:bd:1f:e1:47:b9:7b:58:67:
e8:f0:a4:fc:be:0d:28:d1:49:d5:f4:73:e8:4c:38:
e7:68:f6:2c:a1:73:c9:f9:db:f5:ae:c7:b2:c4:b9:
d1:72:af:20:ed:17:20:a6:df:f3:28:00:57:6b:ca:
9b:56:55:35:10:c6:8f:b4:54:01:7c:e4:f1:da:5b:
13:43:43:80:4d:e8:1e:08:b2:c1:f6:e0:14:6c:6d:
39:bb:b8:00:84:cc:f2:70:40:ca:e6:33:a2:04:c1:
9d:98:26:a0:86:1e:98:e3:cf:87:da:eb:4e:cd:94:
a2:e9:1f:5d:a7:c3:da:bd:c3:b6:45:cf:ab:c4:8e:
a5:35:44:b1:bd:dc:10:b7:21:d2:d3:42:42:f5:09:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:DB:24:92:96:2E:5C:5B:E3:A4:A3:D5:01:65:5B:0E:95:28:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.86.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b5:39:8a:3e:a4:20:9f:01:86:90:1c:63:53:89:31:91:29:
08:1c:fc:32:fa:87:c8:5f:3b:ad:4d:f5:26:26:78:e2:b5:cf:
c7:fb:1e:e2:93:b9:96:93:80:dd:31:31:38:1f:1f:fa:4d:4b:
9f:e2:94:90:55:c6:83:96:99:82:fa:5e:d1:b3:5a:f2:68:8c:
e0:2f:a2:5c:eb:79:54:0f:a7:11:ce:ec:10:69:99:90:4c:c5:
e7:2c:63:da:40:1e:e1:27:06:fb:8b:89:f6:6e:7b:6a:90:fe:
09:6a:e3:9e:34:47:c0:3d:9c:46:cf:38:02:d6:09:6e:7f:83:
6f:22:a5:94:2e:12:17:e9:7a:f2:df:bb:b8:a9:28:3f:52:38:
72:3b:26:1a:16:6a:5c:73:ef:4b:fe:19:eb:65:f1:3c:e0:72:
a1:c9:24:d9:e7:fa:d2:b9:2f:b1:89:8c:ef:3a:2c:bd:8f:d0:
f9:6c:81:b3:39:cd:03:65:26:be:45:97:77:63:27:34:07:4b:
90:28:35:68:aa:7f:60:51:fc:f2:f9:25:33:a6:1f:11:b6:36:
45:35:f5:b7:5f:0d:24:c4:38:7a:23:56:48:10:e0:3f:87:da:
ab:ee:b5:fd:30:83:7f:03:93:3f:29:09:0f:22:54:ec:27:93:
fc:4e:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:17 2026 by rpki-client