
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/689b5aa8-e566-3ab1-acd5-5af0a739e1dc.roa
File: 689b5aa8-e566-3ab1-acd5-5af0a739e1dc.roa (raw, json)
Hash identifier: B5X1ImixZEfwqJlc7rV2+7VfDPg0BQ5FIwM1WAINAdI=
Subject key identifier: 6D:C7:CB:F8:F7:5F:17:8B:74:86:DF:67:ED:69:A8:8C:E4:B3:C1:BE
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584F5BD602AF5005F43F1A853290
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/689b5aa8-e566-3ab1-acd5-5af0a739e1dc.roa
Signing time: Thu 01 Oct 2026 15:05:13 +0000
ROA not before: Thu 01 Oct 2026 15:05:13 +0000
ROA not after: Wed 30 Dec 2026 16:05:13 +0000
asID: 22974
IP address blocks: 71.10.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5b:d6:02:af:50:05:f4:3f:1a:85:32:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Oct 1 15:05:13 2026 GMT
Not After : Dec 30 16:05:13 2026 GMT
Subject: CN=e409b1b1-110a-41e6-94c5-4167d406ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:66:9e:07:54:39:c8:c5:39:68:b0:69:ad:
86:e7:64:e8:c0:09:f9:be:9f:12:df:31:84:64:58:
36:ae:6a:66:97:6a:31:66:fe:9c:b6:3d:21:b8:c8:
0b:76:3e:f2:01:d4:e3:63:6a:2e:43:d4:b9:d4:3b:
97:e1:09:4f:29:84:c0:61:dc:ee:a9:63:ec:0d:24:
b9:35:e1:81:82:0c:df:c1:ef:e8:6b:aa:83:45:80:
3b:b5:bf:64:f8:81:17:3d:d7:06:30:18:8f:fe:fc:
1c:93:a6:32:bd:c9:47:ab:75:8f:25:64:6d:3f:1e:
1f:31:6f:73:5e:15:e5:72:a6:13:72:fc:2a:d3:64:
2e:b1:4b:25:42:2d:b9:13:a1:69:0d:b0:8e:15:af:
34:af:70:ca:8d:84:bb:3a:4a:75:37:d6:fb:f9:af:
ee:5d:58:5d:1c:27:61:ba:cf:95:7f:43:a4:bc:9c:
d4:bb:4f:f0:85:e6:d9:9a:60:ba:fc:73:04:85:25:
e1:cf:87:0e:08:5f:52:cd:f9:f2:fb:dc:1d:4d:ad:
d3:05:47:ce:fa:67:79:73:7d:ed:2d:c1:9e:d4:bc:
ee:63:57:14:cf:cd:72:6d:02:84:11:d2:a6:a0:fa:
90:5b:55:db:f5:4a:ef:e6:6b:ea:31:8c:73:1e:58:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:CB:F8:F7:5F:17:8B:74:86:DF:67:ED:69:A8:8C:E4:B3:C1:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/689b5aa8-e566-3ab1-acd5-5af0a739e1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.10.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:bb:fc:39:ab:f1:ec:48:7c:2a:8b:55:0a:31:10:53:a3:83:
62:cb:00:84:ae:3c:bd:32:49:f2:0f:ef:9b:b6:1e:dd:0a:86:
f3:26:dc:2e:9d:b6:b5:9a:d3:e8:4a:91:6b:80:62:9d:d2:e8:
96:5b:de:27:fe:01:45:93:ff:f2:b8:fc:6e:5d:22:b2:f4:01:
ee:e4:94:dc:a0:ba:a4:1a:4b:f3:94:d6:ed:66:e8:56:3d:2b:
63:14:bc:a0:6c:38:f8:b2:65:8c:47:d5:64:a2:06:53:6b:25:
67:b1:1d:4b:df:b3:30:34:ec:cc:b6:c5:30:0b:bd:3d:cd:3f:
86:88:6d:0b:df:cd:2f:aa:d8:ea:63:ef:e7:87:f3:7b:d8:1e:
7a:ee:05:c2:69:73:0d:7d:35:6d:b0:fc:d1:4a:eb:a1:3d:d3:
03:28:be:aa:ce:76:88:a2:68:71:48:7e:bb:e5:a5:5d:d4:eb:
f6:3c:b6:d8:50:31:14:bd:54:00:c1:0b:29:44:7c:2d:98:90:
8e:d9:b4:64:22:3f:5c:8c:5d:b5:64:de:30:4c:23:20:2f:45:
a9:22:21:cf:37:79:d5:c2:6e:16:85:75:22:0b:e2:d9:e4:6b:
7f:d0:30:26:15:d4:28:01:2e:ab:2c:fd:ad:63:69:e5:ce:94:
f2:81:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:48 2026 by rpki-client