
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa
File: 3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa (raw, json)
Hash identifier: moYdLeN3Tk45fBb0reR092WH8eLE2nkhjWUofc/HC/Y=
Subject key identifier: 33:2A:9B:4F:9F:CA:7B:60:9A:81:99:6B:DC:E0:1A:7A:2A:D5:82:ED
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D4D5A8F7A7150D14D38063600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 22394
IP address blocks: 174.41.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:8f:7a:71:50:d1:4d:38:06:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=7840d4ac-6cab-4c84-9978-6d8ace3e644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:0f:20:02:36:70:13:d0:41:f8:0a:74:34:
46:42:51:11:a8:c8:00:db:b8:a4:f8:a6:e7:2a:0e:
a2:08:29:03:70:62:6f:04:c4:69:86:5b:f3:57:40:
2f:7e:9f:94:85:86:e1:c3:4c:d5:2c:7d:ca:b3:81:
30:09:e0:20:a2:da:50:cb:a1:5c:db:9f:b0:bf:32:
89:3a:b1:29:87:e9:1c:2c:a5:06:43:ab:ea:7f:1f:
39:19:b1:87:00:89:e7:df:55:1e:20:e4:6e:18:74:
73:79:e2:c7:72:6c:1e:77:3a:e6:92:c8:23:f7:23:
fa:18:2f:db:eb:cd:f8:fd:1e:0f:0d:aa:7e:b4:0a:
ed:fd:40:98:7a:fd:34:ca:e0:0c:ea:07:8e:fd:d5:
a1:67:ce:24:de:4c:2f:e3:8f:8f:d6:53:9f:0a:46:
6a:56:99:5e:cd:5c:3f:a3:7f:c3:bc:f1:3a:4c:1a:
36:b5:26:90:ac:62:20:b6:1d:f0:b6:b8:a8:34:c7:
4f:e5:0a:fa:da:a0:ae:16:3e:f7:c0:fe:7f:27:78:
f6:ef:57:ac:d0:30:fa:97:5e:75:89:2f:83:db:53:
f7:1b:26:e8:83:9f:84:cc:63:9f:5e:a9:dc:28:23:
9d:0e:8e:89:ca:12:c8:4b:38:db:b7:95:be:1d:a8:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:9B:4F:9F:CA:7B:60:9A:81:99:6B:DC:E0:1A:7A:2A:D5:82:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.41.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:bc:fb:fb:82:43:fa:29:81:85:97:cc:25:2e:5f:8c:04:c0:
61:f0:e1:35:5d:c4:ad:51:13:89:94:f1:ba:e0:5e:e4:d5:eb:
51:00:ca:60:d2:2d:1c:12:4f:f7:cd:1a:9d:eb:f1:c2:34:13:
dc:9d:ad:00:13:46:91:fc:77:6e:86:f5:7a:b7:66:59:6f:89:
6d:87:24:0d:0f:27:c0:fb:aa:ef:f2:44:0c:b3:cb:49:c0:c9:
ac:1f:24:8d:f3:f8:0f:07:17:36:b2:4e:61:3e:ad:31:df:27:
21:6d:cb:d1:56:23:dc:af:f5:40:15:19:19:8d:9e:8e:9e:c5:
9f:ce:e7:2b:30:8d:8b:a7:bf:58:07:56:67:c8:71:39:a6:e0:
a9:42:71:d5:da:75:82:75:28:e6:ca:11:15:00:7d:82:cf:c0:
63:ff:4c:88:3d:51:b3:82:69:fd:be:ce:a7:cf:b7:9a:72:91:
b5:fe:7a:5b:f8:4a:9f:62:c1:35:93:00:e5:aa:a2:49:de:bd:
de:d7:20:4b:f5:44:db:ec:6d:a7:d3:1d:79:7f:8c:61:43:8e:
eb:c2:b6:b4:0c:ae:07:52:96:86:1b:08:2e:dc:b3:54:22:10:
a9:23:93:7e:15:dd:49:7b:0f:c4:68:a6:1b:09:46:6b:c5:de:
dd:d7:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:26 2026 by rpki-client