
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa
File: be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa (raw, json)
Hash identifier: 8c7Ctc/E2sWvCwEiT1JFzlf6FVwCwv3j44qTOlsQaOs=
Subject key identifier: E5:70:F4:1E:51:A5:36:03:4F:5E:B5:99:90:EE:37:55:B4:69:C3:98
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584EC372988A733E6DB585E697E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 20115
IP address blocks: 68.189.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:72:98:8a:73:3e:6d:b5:85:e6:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=5d17dbec-13a0-43ff-a572-019e7f9a46ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6b:14:db:6d:76:d6:06:31:9b:29:04:d0:0f:
b2:cc:99:7f:f1:ca:c9:33:06:6e:28:b0:b0:6a:60:
71:ef:86:db:ed:3f:32:30:1b:da:0e:8b:7a:19:08:
f6:80:07:1d:f0:5c:05:1e:85:42:1d:c7:88:7f:27:
2e:c0:c2:e6:04:21:5f:14:fd:d7:47:c6:47:cb:43:
8d:58:ae:00:0a:44:1c:ad:fe:97:15:e1:13:9d:50:
dc:f8:90:f1:d1:8e:d7:85:5e:b8:a8:06:4a:b7:95:
c3:65:0b:a7:96:77:0f:12:1d:63:0a:16:8a:46:ac:
ab:3c:0f:d9:95:19:af:41:8a:f2:97:f6:e6:0d:8f:
60:73:a9:d6:bb:da:b0:db:82:1f:23:26:85:91:6b:
c5:05:a6:80:ec:09:17:69:54:05:f4:fc:1e:d3:ba:
db:eb:5b:64:50:7b:46:96:68:b0:27:7a:7a:f7:69:
44:de:b2:b2:71:cc:8b:d9:5b:8a:8f:79:f0:a4:03:
29:0f:5b:68:cb:d6:a3:02:a6:16:a0:2e:b8:d2:cb:
b2:42:ab:65:a4:08:37:c7:c7:1f:13:7c:d4:85:d0:
28:78:c2:44:ad:e8:05:92:94:e1:b4:ac:4c:88:6e:
43:8e:56:1d:ae:20:4f:33:d5:30:89:bf:34:eb:f7:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:F4:1E:51:A5:36:03:4F:5E:B5:99:90:EE:37:55:B4:69:C3:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.189.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:55:77:f7:90:3b:e8:4d:3f:67:26:46:14:1b:e7:89:75:cf:
1e:ad:17:0f:ae:32:f9:7a:e3:82:1e:36:cf:09:e2:ca:f4:8b:
54:01:0b:25:1f:a9:eb:13:c8:7f:c9:e4:93:5a:68:15:7f:8b:
24:88:15:99:52:b1:c3:92:c4:0e:9c:e9:8f:73:a5:38:12:ea:
91:60:75:44:e1:33:a5:bc:fc:11:ad:78:8f:de:6f:0a:2b:d4:
8e:17:27:29:1a:88:86:a8:a8:8d:cb:a8:7a:f4:6c:88:bf:d1:
b1:e4:7c:ad:56:8e:3b:0f:02:01:22:bb:9c:92:94:c6:43:82:
c3:80:7d:9a:b0:77:16:15:58:fa:c5:be:ec:cf:f2:5d:7d:a4:
d3:09:13:f5:58:e3:1e:1a:db:10:49:20:89:f1:9e:c2:d7:4f:
b5:01:a5:aa:3f:f1:69:8f:92:48:60:a8:fc:14:19:02:d4:ac:
dc:74:6c:c9:70:e0:f7:ef:ee:a9:31:4c:6a:b4:54:ae:33:66:
8b:33:63:65:5a:24:96:3c:fb:cd:16:b7:04:a7:0e:dd:ef:a0:
7a:a5:6d:50:54:d2:17:c9:d6:fc:d4:3d:ec:df:b9:cd:cb:7a:
af:b8:cc:e5:41:2a:1b:3f:b0:70:ea:8d:0c:09:8d:1b:40:a8:
91:87:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:15:54 2026 by rpki-client