
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37e1dd43-07ca-34fd-851f-76b13c5da04f.roa
File: 37e1dd43-07ca-34fd-851f-76b13c5da04f.roa (raw, json)
Hash identifier: 2RTieGsW4+bdvLb8/vSTN5x/y3LxBhq5whEDHiRcQ6Y=
Subject key identifier: D5:08:30:40:CA:61:76:12:F5:8B:7B:FC:8F:15:5F:2D:1C:D1:A0:54
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F3FAD473ACD9295D845D4AD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37e1dd43-07ca-34fd-851f-76b13c5da04f.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 701
IP address blocks: 68.237.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:47:3a:cd:92:95:d8:45:d4:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=42b3ae18-8d95-4a44-a42e-317d1ae5f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:04:dc:9f:e9:0c:6e:29:70:a0:63:42:93:
62:70:8e:23:f9:80:71:a9:c3:76:09:3d:95:0e:19:
5f:7b:e1:b7:24:5b:30:8d:19:7b:8e:30:e7:10:65:
80:da:18:fa:1e:c0:54:7f:e0:ca:f2:e4:0a:35:3c:
d8:57:1b:a3:4c:cd:2e:8c:18:58:ab:bc:62:da:b8:
a6:ce:39:43:f1:8c:b8:a5:7c:29:05:51:9e:ab:b8:
b4:d1:c2:be:33:c8:21:9e:b4:1d:94:86:02:fa:dd:
a3:44:78:6d:83:4b:db:ea:67:bf:6d:0d:51:52:da:
ab:55:31:29:cb:77:52:ea:34:0d:8d:a3:29:f4:37:
1b:94:1d:2f:86:f8:67:f4:43:47:f6:18:ac:b6:e5:
83:2d:db:d9:a4:cc:6f:b9:87:30:27:03:da:40:a1:
80:23:56:a6:54:5a:fc:81:db:63:6d:6d:3c:cd:51:
c5:08:cf:28:0e:3c:96:f3:c9:65:f9:8e:67:fa:7b:
e5:5f:cb:09:0c:0e:fa:4f:83:97:34:cb:06:23:1c:
96:18:e9:60:04:ce:62:2b:31:e1:96:8e:a8:83:6f:
71:db:c2:68:62:0d:06:74:e6:71:cd:93:1a:29:77:
91:6c:30:a1:f2:ba:3d:64:dd:ec:b0:c8:72:ed:df:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:30:40:CA:61:76:12:F5:8B:7B:FC:8F:15:5F:2D:1C:D1:A0:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37e1dd43-07ca-34fd-851f-76b13c5da04f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.237.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:47:7c:b2:82:33:f2:38:11:27:1e:58:f2:40:96:23:ae:7d:
b9:0a:e5:ce:4b:dc:76:15:07:1e:f3:65:de:97:b9:76:3e:fe:
fc:5d:de:f6:58:6d:d8:97:32:b1:39:56:03:2b:5a:f8:f2:59:
da:cb:ff:ba:6d:1f:4d:d1:73:9f:1f:de:2c:44:9a:ab:26:b6:
81:ca:29:32:aa:69:47:cb:33:1a:8a:13:31:a7:a3:1b:2a:11:
1c:df:71:1d:b8:76:25:2c:68:25:e0:a0:f1:09:4d:da:1b:b1:
05:d9:62:c4:23:50:ef:93:46:ca:5b:50:e8:33:b5:43:21:81:
df:50:3e:25:10:6d:81:18:3e:68:93:69:39:22:9c:b2:d7:b1:
e0:da:8b:4a:97:d2:86:8f:2a:59:e7:6b:29:50:54:74:f8:88:
fa:03:65:fd:e1:c1:c4:f2:57:57:74:ab:b6:a2:81:41:a8:6e:
19:9a:06:49:1a:ba:8f:66:32:43:c2:f2:d8:d1:9e:76:38:62:
d0:f1:0a:be:3b:d0:b7:1a:16:54:42:5b:70:3b:c8:b7:ea:cc:
3f:dd:37:37:78:e2:4d:c0:b0:20:dd:08:07:b8:82:6f:fd:31:
2b:53:68:12:cb:dc:de:04:99:74:97:11:b6:f8:56:f3:a4:a5:
77:34:92:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:41:47 2026 by rpki-client