
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8634852-3398-3bed-bce1-906bff7592e7.roa
File: f8634852-3398-3bed-bce1-906bff7592e7.roa (raw, json)
Hash identifier: RXh/xkiFWTiPEK8YF7ENEvummtuofOPrgwlLDB/gLXo=
Subject key identifier: 82:6B:3F:E1:35:C3:7F:44:F2:A0:83:90:B4:D1:11:DF:24:AE:7D:41
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584D40CB73EB8251E52981251260
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8634852-3398-3bed-bce1-906bff7592e7.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20115
IP address blocks: 24.247.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:73:eb:82:51:e5:29:81:25:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=8d7e4a55-496f-4973-a190-103a83a59aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:61:f9:31:c8:67:c7:4a:8c:51:af:58:34:
74:a9:9c:2d:b4:bd:ab:98:3a:a1:c5:2c:ee:c8:bf:
62:36:92:ee:ac:72:21:c5:55:dd:0c:29:18:c1:02:
1e:cc:a9:6d:76:16:70:ed:6c:76:fb:e9:c9:b2:88:
a2:5f:1d:4b:c5:2e:9c:ec:a1:c6:f3:0c:f7:2b:40:
cd:df:bb:2f:53:ae:d5:6f:55:ab:3d:1d:71:60:8a:
0f:12:7c:92:f3:6f:5c:4f:a3:88:9f:4b:64:44:5d:
2c:d1:03:4c:ba:2b:14:7c:90:65:06:1a:25:b5:fc:
0f:e5:82:8f:af:56:55:70:00:ff:45:d7:95:5f:e9:
85:fd:60:c4:03:19:16:3d:9d:9b:4e:2c:dc:63:29:
ad:38:eb:bc:4d:dd:96:da:6d:81:f8:c8:89:dc:cb:
ee:e9:2b:2f:51:ff:ce:a8:85:35:40:7b:66:27:2e:
84:41:49:05:77:ff:6a:2e:5d:80:d9:48:5f:23:ca:
9e:7d:89:4f:e9:83:db:64:d2:f2:36:ac:9a:3a:e0:
49:54:1f:ba:1e:85:3a:0e:70:7e:03:48:8a:25:6a:
1a:47:4c:82:1f:66:02:53:bb:f5:52:68:3f:f5:cf:
28:32:d7:47:24:fe:1b:70:0d:e3:03:dd:5b:dd:f4:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:3F:E1:35:C3:7F:44:F2:A0:83:90:B4:D1:11:DF:24:AE:7D:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8634852-3398-3bed-bce1-906bff7592e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.247.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:7a:7c:e8:54:b5:79:6f:3f:23:f3:9b:92:82:ec:57:3e:ff:
f3:55:cb:88:97:85:c8:f2:3a:89:9e:74:db:b3:71:3f:24:ae:
e8:b8:1f:b9:d6:dd:2e:85:04:63:77:75:d4:96:29:ee:0e:97:
e5:8f:62:72:a9:ef:e9:b4:31:7e:19:0b:be:fa:58:7f:be:4d:
73:6d:bb:27:6f:1d:58:f9:30:f4:f3:e5:4c:66:ee:d4:17:33:
b5:40:cd:9d:bf:0f:ab:8e:9d:54:56:72:b4:de:09:d9:67:41:
c3:6b:5f:3d:22:a2:ec:7b:ec:ff:30:ad:40:7f:19:02:94:d7:
e9:f0:0c:9c:6b:ce:0a:e0:e2:77:2d:f0:49:c7:01:e7:74:84:
c7:70:53:55:c9:48:cb:9e:11:0f:d5:97:25:4e:ae:ba:08:86:
17:2d:97:45:9f:06:48:0c:ac:79:34:01:db:de:e4:1b:ea:8e:
66:15:40:ad:24:a4:55:bc:16:ea:92:50:c2:d9:89:50:a8:c2:
ff:15:53:40:ff:71:68:29:9a:3c:bf:4f:e4:66:80:12:aa:f4:
95:d6:d4:cd:ce:0b:02:79:77:b6:02:27:7d:1b:fa:d8:5b:85:
80:83:29:10:a4:f1:92:24:32:d3:ac:d9:0d:4b:a9:85:69:4f:
9e:d0:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:35 2026 by rpki-client