
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bae11a8e-f426-3619-bf87-191f98dbd600.roa
File: bae11a8e-f426-3619-bf87-191f98dbd600.roa (raw, json)
Hash identifier: +5KyfbtBeyYwoAtUWZKtpRmJbrTzweBiBeM8iOUJF8o=
Subject key identifier: 07:3C:67:2F:AF:E6:80:99:11:C3:4D:A5:87:3E:A0:EA:BE:FC:05:2B
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584E210F50C8B0AEF8C504BCDB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bae11a8e-f426-3619-bf87-191f98dbd600.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 20115
IP address blocks: 68.118.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0f:50:c8:b0:ae:f8:c5:04:bc:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=e1064968-55ff-42ec-b7dd-f0645281cd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:37:df:2e:f1:d6:45:38:e7:e1:0e:d1:ff:
17:e1:57:64:38:ca:25:38:43:1d:93:ee:cc:7d:89:
e9:99:aa:36:17:b4:05:26:1e:cf:19:7f:73:d6:8a:
ed:79:26:f5:12:6a:66:ed:55:5a:77:a1:4e:a7:91:
d8:cb:cd:d7:cf:79:7a:47:1f:37:02:0a:f6:83:e7:
c3:6f:20:ed:6d:33:75:9e:d3:7a:6b:45:67:b7:c5:
6c:ff:48:a3:63:91:da:d1:1c:ca:65:81:a3:58:a1:
8f:c6:5f:b3:70:f1:87:af:13:83:e7:f0:55:b1:4c:
be:84:ce:dc:0f:b8:22:38:e2:40:60:90:d4:8e:f8:
dd:ba:c4:84:e0:16:52:fd:2b:16:cb:f4:f2:f0:ee:
2e:92:f1:0a:ef:d5:a2:0d:81:2a:9a:fc:62:71:04:
0f:82:60:08:89:5f:c9:b1:b9:cd:24:3c:55:28:38:
bb:8b:ff:35:51:c3:2c:5e:ff:f6:e0:cf:0f:b3:80:
6b:5e:20:be:92:57:62:2a:a2:6e:20:55:ce:c7:b1:
89:1e:b3:e6:9d:8d:cc:2b:9f:50:85:92:2c:b5:0c:
e6:ac:22:1f:66:66:ab:76:46:98:1c:39:4b:89:48:
67:73:93:7d:ea:ee:93:85:ed:9f:07:53:7f:03:50:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:67:2F:AF:E6:80:99:11:C3:4D:A5:87:3E:A0:EA:BE:FC:05:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bae11a8e-f426-3619-bf87-191f98dbd600.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.118.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:3c:ad:4b:5b:f4:94:03:21:9d:78:cc:69:5c:9d:bd:8e:15:
3a:bc:98:94:40:52:d8:54:e2:57:8d:4b:41:60:70:a5:f4:0d:
63:e7:c2:cc:43:6b:2f:f8:7b:8b:8f:eb:a9:96:3a:c0:55:f7:
e1:e0:af:78:73:ac:76:5b:e1:5e:fe:84:f9:a8:c6:36:20:c2:
df:5f:e2:b7:d2:98:da:56:d9:6f:eb:5e:ed:5b:e6:18:7f:24:
ef:07:84:40:34:73:03:4d:2e:93:3c:2f:e5:e1:2e:47:fa:2c:
6e:3f:19:f8:39:b3:24:a1:a7:83:e8:52:4a:fa:b9:c1:35:c2:
ef:b0:9c:bf:b4:eb:a8:37:30:9d:c5:04:76:6f:08:df:b6:6c:
8f:f4:ab:08:9f:41:af:82:f9:89:c3:cf:74:7a:8e:c9:55:ad:
f7:53:2e:34:cb:ad:fd:e5:9b:1f:f7:ba:9b:13:16:fc:58:99:
25:08:ae:a2:28:5c:98:9d:85:66:99:72:3a:6e:1b:59:94:16:
8a:e0:d0:0e:c3:ae:5a:8e:ff:98:be:3f:51:ca:13:f7:d3:05:
84:c2:d8:0e:6d:db:32:e2:ba:19:64:98:59:69:73:41:af:25:
bc:9b:7d:84:15:c7:e4:bb:d9:64:a2:54:34:29:b7:09:56:c9:
99:7c:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:43 2026 by rpki-client