
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afdfde4c-6aaf-357d-9199-086d809ba21b.roa
File: afdfde4c-6aaf-357d-9199-086d809ba21b.roa (raw, json)
Hash identifier: CldoUGiokvt4rDPxsCTaKDsL1mZwdbaYWJNP4zukWtI=
Subject key identifier: 97:4B:CE:26:06:1D:B7:70:C2:56:10:B8:75:F0:70:6A:EF:98:E8:07
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584EC3727D5B7F08D6C043991100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afdfde4c-6aaf-357d-9199-086d809ba21b.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 20115
IP address blocks: 66.168.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:72:7d:5b:7f:08:d6:c0:43:99:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=243fb2a9-eaa0-41e7-a4c8-f4569de59573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:5b:2b:24:84:66:06:17:9b:a3:27:d9:9c:
c9:f3:35:e2:a7:9e:98:8c:17:0b:a4:71:ed:27:c4:
84:a4:8c:f8:84:ec:cc:07:34:4a:ec:34:75:18:1d:
86:d8:17:46:0e:76:37:96:4c:17:3e:65:13:a2:4c:
da:93:f9:4b:1a:2f:64:9f:68:d3:bf:2e:a6:5f:00:
30:79:6e:0b:7c:23:ca:20:82:80:f9:14:f5:4c:27:
59:f5:db:bc:8e:14:29:ee:90:af:46:f3:95:f6:9b:
eb:4a:79:35:40:03:d0:ec:fe:8f:27:97:67:b8:9c:
57:1d:37:af:09:68:ad:c0:a1:2f:73:3c:80:08:1a:
a2:d7:12:c7:18:b9:45:c4:e3:e0:40:03:51:8a:86:
59:73:8e:a1:c7:40:cb:01:bd:de:4b:27:3d:3a:3a:
39:9b:79:b2:d3:96:aa:cc:b6:28:a4:19:8c:1b:9c:
2b:98:f0:61:ff:e7:bc:5c:cc:74:7d:f1:85:58:a2:
39:a2:3e:df:27:84:ee:44:d1:6c:2d:1c:dc:49:0b:
f8:94:49:f3:aa:93:b3:41:7d:4e:42:89:1e:e0:3e:
09:34:39:ab:5a:93:77:8c:7b:ef:5e:b6:91:85:d9:
12:55:6b:e9:bb:76:6e:5f:12:ec:06:dc:4d:0a:a6:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:CE:26:06:1D:B7:70:C2:56:10:B8:75:F0:70:6A:EF:98:E8:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afdfde4c-6aaf-357d-9199-086d809ba21b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.168.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6b:82:bf:c3:fe:4d:62:78:ef:e3:90:26:79:bb:59:66:40:
d4:4f:f6:bc:03:4b:d6:f9:68:04:1a:bc:12:6c:f4:9f:2b:c3:
ff:74:64:85:d0:c8:b1:12:f7:b3:64:9a:55:c9:85:4e:9a:af:
77:7f:6e:31:e8:ca:f8:df:fb:31:e8:ed:6c:35:f0:4f:49:ec:
a6:de:a9:ad:bd:c4:34:4c:35:3f:59:3e:13:ac:92:f9:34:71:
38:d5:20:d3:ad:b3:f4:b1:18:bf:3f:c7:5b:a4:60:e9:54:51:
2e:83:d5:49:15:19:a4:08:cd:df:a9:34:e2:ee:52:d4:30:8a:
9d:0e:90:f1:79:fb:f7:27:55:c3:00:25:d3:1f:83:6a:11:35:
02:18:7f:fc:e0:cd:93:8b:02:35:f3:0e:08:4f:19:a1:c1:a0:
fc:63:09:59:eb:86:1d:b9:94:02:fb:01:d1:cc:6f:68:2d:d3:
56:93:fa:c8:89:cd:2b:de:db:30:27:c7:bb:34:17:b2:8c:7c:
1f:9d:50:1f:59:ca:57:77:25:b8:8b:bd:ec:a5:41:0e:71:37:
cd:3a:2d:fc:13:54:d9:5f:40:86:1e:fb:4b:01:05:3b:fb:18:
4e:8a:dd:7f:32:f8:2c:48:c6:57:19:8f:04:58:8d:b6:0d:86:
4f:9b:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:15:06 2026 by rpki-client