
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/945c3991-15a1-3db3-a332-6b3fc143a899.roa
File: 945c3991-15a1-3db3-a332-6b3fc143a899.roa (raw, json)
Hash identifier: CyP1jUGfJs1LS2dU5nnHxSWKrHmsNFiOZAiQx2I1Big=
Subject key identifier: 23:73:4E:E0:89:7B:D5:D9:71:CB:40:BB:B4:03:01:93:55:7F:A1:C5
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584E210F4777F42549483B4DA840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/945c3991-15a1-3db3-a332-6b3fc143a899.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 20115
IP address blocks: 66.190.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0f:47:77:f4:25:49:48:3b:4d:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=a9b3e0d9-8e8a-40a8-8099-f094f7366a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:8b:97:1e:b2:d6:65:4f:ca:7f:e7:c0:48:
34:50:e9:0b:0e:c4:db:3c:a0:c2:da:7e:1b:97:3f:
89:99:36:70:5d:a5:c7:15:13:81:0b:9f:93:d2:48:
dd:5b:f8:ad:2f:22:0c:19:fb:bc:ea:f1:47:1c:1a:
9f:89:93:be:e4:65:58:90:74:13:14:47:9f:e3:8d:
71:4c:0e:ad:e2:54:f9:83:b1:64:81:d9:bc:51:62:
54:ea:3b:28:a9:8b:3a:9b:f8:d7:c5:af:0d:ae:82:
67:10:58:63:06:83:69:1a:4f:ca:4a:5b:ca:d1:98:
3d:d0:8b:9e:c2:a1:73:35:f4:13:13:25:4d:d9:0c:
9e:fe:52:b2:a1:dd:ce:9e:06:d2:56:93:fd:06:c4:
0c:e7:2d:20:38:73:1f:94:d1:34:69:68:12:24:e6:
2d:c7:ba:4c:e0:c4:4a:ba:48:a4:da:89:03:7a:54:
c5:aa:56:f4:fc:c8:40:4b:5b:36:2d:a2:79:56:48:
6d:f1:da:26:f6:f6:84:82:bd:b6:6f:be:84:3b:fd:
c8:c4:23:77:e8:8c:99:ff:a4:d8:e7:30:6e:e3:39:
a9:f4:63:77:0e:f5:91:9c:48:fb:52:98:27:62:9a:
ca:22:ee:c0:00:96:c0:fc:0a:85:a1:44:c8:73:03:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:4E:E0:89:7B:D5:D9:71:CB:40:BB:B4:03:01:93:55:7F:A1:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/945c3991-15a1-3db3-a332-6b3fc143a899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.190.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:dd:1d:4c:21:e0:90:ea:43:f2:50:79:24:a9:b2:02:af:d9:
32:32:4c:97:43:0d:63:a1:d5:b5:00:f7:9f:cc:42:13:94:5b:
05:a5:a6:04:04:0f:fe:8d:2d:62:6e:7a:78:f6:f9:37:92:d5:
6c:97:8d:92:6b:bd:55:85:ba:04:07:2c:0c:18:2e:28:50:90:
f9:ad:8a:a0:30:14:af:66:a1:df:5f:40:d1:6c:28:6c:2a:2b:
00:60:9d:57:4b:32:15:f0:f6:18:17:79:1b:0d:2b:0d:83:95:
32:78:42:00:02:c4:39:0f:db:8f:48:3a:8b:c5:a6:6e:35:2c:
1c:9d:b0:d2:cb:06:cb:34:0f:23:51:5e:11:02:44:33:ec:89:
6e:a7:e9:be:90:6c:38:14:a2:98:5d:a6:c4:15:58:f6:ff:02:
85:c3:c6:f1:41:8a:67:5d:08:e3:74:da:61:74:a4:ae:05:b4:
55:2f:1f:98:e7:17:e7:c8:84:ce:a9:39:65:7c:61:f2:4e:a8:
bf:02:72:1b:bb:c5:a3:25:33:2a:a6:e8:20:ba:a9:28:32:81:
a5:7d:3b:46:02:e5:00:0d:d9:a2:13:f0:dd:5d:0f:03:3f:0a:
e7:5d:4f:b7:2b:f7:06:da:29:4b:be:96:d2:65:0f:d3:aa:9c:
37:51:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:25 2026 by rpki-client