
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa
File: 127f2590-aa16-3529-ac5f-be5897bf0b7e.roa (raw, json)
Hash identifier: XylhqECZ5C+F7P8FXqH4msPFhmpGaSTTNo2rdlxQC7k=
Subject key identifier: CD:AC:D8:84:E6:D8:55:82:60:4B:01:DF:0C:32:EB:0A:F7:E9:15:2F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D83CAC0F3F68F8D5EA4158180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 97.133.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:c0:f3:f6:8f:8d:5e:a4:15:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=32b87bb2-9922-43c3-bc1f-28afb6c19063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:e7:82:b7:2d:9d:6e:05:7e:0d:98:9e:8c:
0b:10:3c:12:77:99:25:bb:53:26:20:63:fd:a0:bc:
4f:f1:f6:d7:65:ec:4f:2d:80:72:0e:7b:fc:4e:40:
ed:ec:9f:b3:0d:ee:5c:05:e4:98:5b:cc:7e:37:a2:
8c:8f:b1:20:77:0f:39:b9:42:cd:48:1a:23:e3:14:
2c:44:98:f3:ed:40:82:ad:ef:ec:6e:b7:ea:c0:02:
bc:b7:34:6a:17:6b:87:3c:be:68:f7:9b:b6:a7:55:
18:7b:bc:69:31:e6:f1:49:cc:8b:c1:44:c1:f4:ae:
47:59:b1:19:56:e2:79:ef:23:71:16:47:9b:70:de:
72:5a:96:60:92:1e:d0:22:96:7b:02:e1:4d:f7:86:
27:1e:99:e0:d6:fb:34:b1:48:34:64:58:40:49:6a:
9e:66:41:28:59:f5:44:52:4b:62:2e:5c:14:8a:a3:
ab:28:03:42:09:31:18:15:40:af:40:af:be:2c:26:
aa:03:3f:7d:8c:eb:93:39:a7:11:f6:75:ac:3f:ae:
0b:7c:34:26:40:b4:44:53:03:32:fc:b4:24:8a:67:
df:af:dc:10:85:31:a7:e9:3a:04:5c:c1:8d:bd:6d:
9b:d9:bc:fb:a1:ea:dc:e3:58:67:df:31:3f:b8:fc:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:D8:84:E6:D8:55:82:60:4B:01:DF:0C:32:EB:0A:F7:E9:15:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.133.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:12:83:8d:54:2b:f1:25:57:93:ae:76:c5:38:96:d0:3b:f3:
e9:a7:78:7f:1b:db:f1:c0:83:e9:46:26:41:c7:f5:f5:8b:5f:
a8:df:59:cf:62:a6:ee:67:53:be:5e:89:cd:3f:bd:97:95:16:
5e:6e:8b:cb:31:d8:10:8c:8a:da:72:3c:62:b6:57:ec:e6:53:
05:1e:3d:fd:54:ca:cd:54:a1:5b:2d:b9:ff:62:91:04:64:0c:
30:ce:50:cb:14:7a:cc:5d:10:05:4a:d7:19:6d:36:d5:ea:89:
13:95:e3:65:87:9e:36:99:96:00:6b:fb:97:03:de:9e:88:73:
da:8b:c5:47:13:82:28:46:97:69:69:f8:22:74:6e:1d:bb:a7:
d9:af:91:28:19:87:49:4f:b5:18:ed:60:69:c0:a1:98:c3:2e:
91:bd:5a:92:de:6a:6f:b4:53:8e:9d:89:60:14:f1:95:2b:7c:
9f:ce:ff:8b:79:1a:33:47:5e:2c:5a:98:2c:4d:0f:4a:26:bb:
a5:2b:a4:91:3a:f7:89:6c:54:20:7c:30:6a:f3:c9:2b:45:eb:
59:b8:42:1d:4f:65:73:d6:12:9a:90:37:53:3e:3d:28:c1:25:
12:9a:48:1a:83:c8:6a:7b:63:3f:8d:41:08:36:2d:80:59:bd:
2e:72:b2:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DysDz9o+NXqQVgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MzJiODdiYjItOTkyMi00M2MzLWJjMWYtMjhhZmI2YzE5MDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8LngrctnW4Ffg2YnowLEDwSd5klu1MmIGP9
oLxP8fbXZexPLYByDnv8TkDt7J+zDe5cBeSYW8x+N6KMj7Egdw85uULNSBoj4xQs
RJjz7UCCre/sbrfqwAK8tzRqF2uHPL5o95u2p1UYe7xpMebxScyLwUTB9K5HWbEZ
VuJ57yNxFkebcN5yWpZgkh7QIpZ7AuFN94YnHpng1vs0sUg0ZFhASWqeZkEoWfVE
UktiLlwUiqOrKANCCTEYFUCvQK++LCaqAz99jOuTOacR9nWsP64LfDQmQLREUwMy
/LQkimffr9wQhTGn6ToEXMGNvW2b2bz7oerc41hn3zE/uPzfsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2s2ITm2FWCYEsB3wwy6wr36RUvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTI3ZjI1OTAtYWExNi0z
NTI5LWFjNWYtYmU1ODk3YmYwYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYYVwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsSg41UK/ElV5OudsU4ltA78+mneH8b2/HAg+lGJkHH9fWLX6jfWc9i
pu5nU75eic0/vZeVFl5ui8sx2BCMitpyPGK2V+zmUwUePf1Uys1UoVstuf9ikQRk
DDDOUMsUesxdEAVK1xltNtXqiROV42WHnjaZlgBr+5cD3p6Ic9qLxUcTgihGl2lp
+CJ0bh27p9mvkSgZh0lPtRjtYGnAoZjDLpG9WpLeam+0U46diWAU8ZUrfJ/O/4t5
GjNHXixamCxND0omu6UrpJE694lsVCB8MGrzyStF61m4Qh1PZXPWEpqQN1M+PSjB
JRKaSBqDyGp7Yz+NQQg2LYBZvS5ysvI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:26 2026 by rpki-client