
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa
File: 9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa (raw, json)
Hash identifier: 50qbuUfW/mZt1pm8Gv2P+RUZ7sOjRYKytWGaGJ12JPk=
Subject key identifier: 43:FF:4D:0B:85:C8:3D:30:68:9C:43:11:EB:91:D4:F0:0D:A0:E4:27
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584EC3721FB85DEA691AA12EA000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 20115
IP address blocks: 68.191.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:72:1f:b8:5d:ea:69:1a:a1:2e:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=e258d792-175e-4b4f-a4a3-6af2af63494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:76:7f:4a:9d:43:36:03:b9:b5:4d:65:4c:
b8:68:0f:aa:69:d1:6a:5c:b2:c3:42:be:68:69:87:
d4:10:d0:8a:aa:86:93:22:b6:54:7a:1e:e0:42:fa:
9d:61:37:cc:e9:25:75:d3:0a:40:85:fe:5b:fe:18:
66:3c:97:df:d1:18:2e:54:9b:49:e8:f9:c6:7d:6b:
e1:e3:19:22:bd:ca:55:b5:cb:b1:e4:1f:bc:93:91:
3a:ef:8a:51:58:88:71:2b:ec:d7:42:4d:34:e7:dc:
f0:bf:1a:20:43:27:d1:3c:37:96:c2:8c:13:2e:f8:
47:d3:de:e2:1b:23:bd:97:32:0a:d9:1c:fc:f0:cf:
07:e2:23:52:43:eb:db:21:0d:2b:dd:e3:18:64:f4:
82:80:6d:d8:0f:cf:a1:32:26:10:85:37:08:02:c5:
f0:55:f5:2d:cb:49:8b:88:27:f1:85:d9:ec:6f:e6:
81:d4:8f:7b:01:66:ac:b6:d7:99:b2:eb:c5:7b:b3:
c1:f8:d2:b7:9e:b1:d4:18:65:f6:32:6e:1f:80:30:
67:b2:1b:01:da:1b:4c:dc:b8:5b:57:fb:e6:85:33:
02:f5:ab:16:cc:94:9a:2b:5c:25:0b:0c:f1:3e:a0:
89:ce:8e:ac:5f:67:80:5b:ce:0d:88:40:f7:9b:a7:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:4D:0B:85:C8:3D:30:68:9C:43:11:EB:91:D4:F0:0D:A0:E4:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:28:80:06:50:f6:e6:ff:e4:03:eb:82:17:37:98:e6:2e:cb:
51:02:f3:13:8a:93:f9:0c:de:69:47:34:d0:ee:71:e7:82:51:
31:46:99:2b:9f:9a:a4:5e:54:bb:f4:6f:3b:be:46:de:fb:8d:
b0:ba:37:6a:7d:92:2c:88:55:4a:3e:e6:e0:b6:52:d2:b3:e4:
0c:5e:84:66:8d:39:a9:f0:69:5d:9b:df:2e:a8:20:e9:74:e8:
2a:43:9a:e7:2f:0b:94:95:d3:bf:2f:48:d6:c0:82:fc:45:85:
a6:a9:18:84:b0:b3:88:22:5b:ef:cf:fc:52:fb:ac:e8:55:f9:
9c:a0:26:34:22:13:c9:1b:fb:5b:b0:5e:64:48:bc:73:71:17:
08:23:96:26:0a:a9:ee:50:76:23:48:53:38:7b:94:32:77:26:
ad:6a:3f:7e:dc:5f:16:d2:3a:c8:5e:16:6c:25:cc:d6:25:da:
e2:26:9a:e8:d2:9c:d0:48:9a:90:3e:38:15:36:d5:76:6f:e4:
e0:9a:df:ae:ff:ff:49:71:d9:48:e1:cf:0a:65:26:ef:a6:0d:
63:be:91:19:7f:9f:62:08:79:a6:4f:d2:df:4b:18:b7:38:d3:
fa:5d:cb:ab:63:d9:81:81:87:61:3f:43:00:b5:bf:5e:17:ff:
bd:b1:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:11 2026 by rpki-client