
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d945078-df1e-343f-b385-4b88b5048131.roa
File: 1d945078-df1e-343f-b385-4b88b5048131.roa (raw, json)
Hash identifier: Zpuic+x0lPelhKW4lLPC6sCYsDV56EB3MgBJ7B4Of4g=
Subject key identifier: B8:FD:98:0D:C3:EA:5E:28:A4:A3:79:0F:7B:28:91:FE:6D:58:2C:35
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584E90BA543EBEC28A30DDFE9280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d945078-df1e-343f-b385-4b88b5048131.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 20115
IP address blocks: 24.196.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:54:3e:be:c2:8a:30:dd:fe:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=f8bdb80f-5dc8-495e-8475-7531157471da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:2e:ae:11:21:d8:80:8d:48:d9:53:02:21:
1f:2f:04:62:73:85:2e:cc:0c:47:12:67:78:3a:9c:
76:d0:e1:29:b9:9e:c1:1b:94:29:12:02:1f:05:02:
2a:81:fb:4b:80:d2:2c:b9:57:91:eb:dd:50:bb:cb:
75:17:b4:fa:b8:93:f8:de:8f:42:2f:d2:cd:e7:d5:
49:35:8e:1c:6d:e5:a2:70:16:05:28:00:8f:48:30:
8b:31:15:10:09:2e:6e:21:fb:3a:40:43:c2:03:35:
34:87:43:ab:3b:49:88:9c:d4:94:b4:90:4f:f6:74:
12:49:20:4b:a8:b5:9a:62:fe:8e:44:28:28:85:7d:
0e:41:f3:3f:80:38:97:b4:d2:9c:bf:d2:e5:cb:88:
28:8e:1a:d3:c6:ca:64:2a:5b:59:f6:e3:05:26:96:
2b:98:16:77:20:36:23:40:2d:cc:db:87:53:38:91:
d4:b1:44:35:d2:83:24:ed:d4:3d:00:d0:4f:1f:3b:
c9:cb:3d:00:0f:21:66:48:63:bb:0e:a3:a8:20:07:
f1:03:f9:c4:2c:42:c0:4a:ce:8a:10:b9:2f:d4:64:
21:14:0e:7b:e4:52:0d:49:5c:b3:ce:54:d5:23:4b:
d3:5a:98:a0:ba:cf:9c:82:2a:31:e0:9e:96:d9:0f:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:98:0D:C3:EA:5E:28:A4:A3:79:0F:7B:28:91:FE:6D:58:2C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d945078-df1e-343f-b385-4b88b5048131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.196.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:c1:8e:99:ec:d7:63:4e:52:4d:7a:a7:6c:d7:0e:88:50:c9:
97:51:3a:7f:f8:4e:e0:6e:ab:4b:75:94:43:fa:ee:fb:d2:5c:
77:25:d9:54:8e:36:f7:85:fa:2d:48:2b:f2:4a:13:83:0e:02:
ab:ca:3e:6b:bd:23:5f:62:76:69:6e:f9:cf:91:15:94:04:61:
03:c8:98:29:6d:a4:3e:e5:3d:94:c6:b2:80:c2:a7:2a:96:69:
2d:95:90:e8:40:37:19:fc:ba:78:c7:e5:fd:b5:c1:19:0b:af:
07:ca:c1:f6:11:87:47:f4:76:17:a8:0d:44:9f:35:f0:3b:02:
a2:5f:9e:3e:ab:61:ac:a2:a3:45:b0:f1:fb:ee:5b:1c:50:95:
7c:03:dc:b7:45:fc:50:dc:53:b4:63:d1:7f:2f:9f:7d:07:62:
7f:b6:f9:1a:c7:66:46:02:a4:ba:7e:8f:55:16:e4:e9:9a:ea:
fd:6e:69:33:25:10:e1:f7:97:b1:71:4d:f4:9d:d8:91:0f:75:
95:c5:54:46:a9:1d:1f:21:38:35:81:73:58:c4:c1:13:fc:d0:
e0:a5:fe:af:ee:a5:8c:b9:78:ae:73:13:6f:ca:44:53:45:ec:
5e:f1:a3:f4:90:dd:2f:73:a3:f2:a0:03:ca:b2:1e:8e:75:45:
a4:9b:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:02:06 2026 by rpki-client