
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa
File: 33dd2e0a-3c38-3dfc-8538-02c19f370233.roa (raw, json)
Hash identifier: G4nCPSGbYB7zaaHLl0djdoTrDT2M2SjU7bozOmxAGcI=
Subject key identifier: D4:16:D6:3E:04:A3:EC:87:3A:C6:CC:A8:FE:60:27:FA:A2:58:EA:C5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D746FE232374AF3AC010718E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 701
IP address blocks: 199.202.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:e2:32:37:4a:f3:ac:01:07:18:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=c4ffe9d1-ce0f-43d9-a70f-8b7378dc32a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:b1:25:31:4c:94:36:25:0e:9f:da:f9:db:
2d:4a:9d:5f:f5:cd:88:fa:c9:41:ec:e1:b1:3e:7f:
fb:35:da:9f:68:42:12:e4:3c:e3:c4:43:a8:c0:e4:
7c:1a:3f:e2:0d:17:9a:86:7f:7a:ed:d5:35:27:21:
63:7c:f1:fd:24:8b:1c:f1:ba:bf:b8:2d:45:fd:c5:
94:b0:26:1e:64:cb:d0:c4:13:b7:17:c0:2b:15:6e:
2a:fc:99:77:6f:9a:a8:cc:9f:52:1b:f0:b6:a1:58:
90:6c:da:fa:b6:ea:4e:61:f9:93:6b:0d:c5:c1:11:
84:52:0d:d5:dd:e1:b9:37:f6:a8:59:dd:04:aa:20:
e4:05:6e:f0:55:51:3b:e7:6a:88:71:04:92:db:a8:
0d:78:cb:d8:77:e7:cd:0b:0b:16:d1:ff:04:8c:cb:
bb:83:08:5e:d8:ee:ef:ca:78:e9:43:4c:5a:1d:ac:
4b:99:89:fc:94:11:ff:d1:c0:a4:93:cd:0e:a1:2a:
1d:fa:c0:49:33:32:f2:d8:61:1c:91:58:26:4a:c9:
6f:5e:1f:e5:93:3a:85:5b:5f:0b:31:3d:ca:27:9c:
7f:a6:5b:2c:c5:06:a3:18:a7:29:67:ab:30:a8:7b:
f9:1e:35:19:55:b0:cc:84:46:80:1a:7f:70:25:f5:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:D6:3E:04:A3:EC:87:3A:C6:CC:A8:FE:60:27:FA:A2:58:EA:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:e5:e8:b6:a9:56:74:b0:59:02:45:4c:03:6c:1f:67:d1:fe:
d5:7c:a7:80:22:0d:53:e2:b9:ee:bf:19:53:23:ec:71:c7:41:
72:46:d6:c0:a8:89:a3:1a:45:30:52:5c:2b:12:89:08:87:09:
19:48:b2:91:18:16:fb:06:5b:0e:0f:0d:84:05:4a:44:05:3e:
5e:00:fc:fa:fc:82:f6:1b:16:62:95:2d:bb:7a:d7:35:db:4c:
d4:98:08:50:f6:5b:f1:5a:7c:34:bb:21:d2:81:50:a3:49:e8:
81:80:24:73:6d:b8:b5:ed:ab:2e:80:1d:d9:67:cf:dc:c4:be:
9e:b9:34:28:77:04:12:14:ed:7b:e3:0c:9c:29:76:89:b8:e4:
0b:04:bf:4b:ef:64:9c:4d:02:6c:f6:73:9e:f1:bc:46:de:ed:
25:40:75:0d:fe:52:fe:10:4a:fc:ae:80:98:39:e7:b2:29:b6:
bd:54:de:bf:9a:74:32:26:a1:dc:98:7e:59:bb:a7:e0:2a:04:
2a:01:a1:10:7e:78:62:be:36:a0:e8:5c:a6:74:af:ef:52:52:
b7:85:b4:bd:ba:d8:8a:82:6b:83:0a:ed:4e:15:52:ae:cf:ad:
c5:64:6d:84:b4:91:c2:73:d5:a8:47:35:fc:da:0c:2f:84:4d:
ac:ff:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:24:47 2026 by rpki-client