
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4aa8a7d0-4370-331c-a491-9ef4f987d7e7.roa
File: 4aa8a7d0-4370-331c-a491-9ef4f987d7e7.roa (raw, json)
Hash identifier: RL/wvbLxmQN+JL1OX9c+Yg9/WiCwOqwLxWNG9qRxo24=
Subject key identifier: 27:B4:58:3D:93:44:76:DA:AC:E8:61:EB:91:5E:BF:A2:7F:9E:35:2F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D0217B6191060460BC9709200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4aa8a7d0-4370-331c-a491-9ef4f987d7e7.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 6167
IP address blocks: 97.207.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:b6:19:10:60:46:0b:c9:70:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=77d22bac-fd7a-4bed-b799-eaff67ce9e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:b4:65:68:2b:1e:98:21:53:cb:33:33:83:
b1:dc:67:b2:60:16:4b:5a:fa:5d:9c:33:8a:aa:6b:
0d:54:81:f9:16:93:b6:64:89:0d:14:2b:3d:f5:eb:
2e:e4:fb:32:1e:ea:8a:13:db:91:da:fc:c1:46:fe:
a7:10:26:70:58:26:72:72:51:ab:bd:47:ab:71:3f:
82:cf:1e:21:e0:c2:f1:0c:54:eb:c3:0e:90:39:bd:
f8:c2:a8:8a:03:af:c3:d3:04:78:52:18:6e:f1:5a:
72:bb:d9:b3:42:a1:b4:04:96:a9:b8:84:4d:5e:5c:
f8:19:a4:ef:d3:31:d0:3b:4f:e1:ee:58:30:60:98:
b6:05:8f:34:71:03:55:37:d0:e3:7c:9a:ed:59:12:
fc:b4:aa:f4:b5:52:a2:e0:f0:10:cd:b6:db:28:fe:
bb:d2:cb:20:d5:36:19:c7:77:40:a3:85:d1:9e:0f:
d2:6d:86:ab:9c:18:7d:14:9d:02:16:e9:f4:88:01:
59:70:44:47:1a:af:c3:93:cc:3a:92:df:9b:f6:94:
12:c9:5a:ba:cb:8b:16:73:2e:4c:8b:fe:59:c3:c0:
16:77:46:10:cf:a7:c3:ad:a8:9d:0e:32:f0:54:10:
4d:9d:4f:7b:a4:f0:64:4e:86:b5:1f:44:19:4f:8f:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:58:3D:93:44:76:DA:AC:E8:61:EB:91:5E:BF:A2:7F:9E:35:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4aa8a7d0-4370-331c-a491-9ef4f987d7e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.207.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:53:16:4a:c0:53:05:47:05:95:80:08:7c:2a:9f:1e:11:36:
c1:fa:f2:2f:c2:6e:dc:85:87:b1:ef:dd:de:b1:ba:29:0d:f0:
3d:a6:8c:0b:79:aa:1d:f5:d2:8a:3c:e3:38:93:64:63:a3:08:
0e:4d:70:84:ad:30:d7:91:c1:c3:f0:9e:23:44:49:50:e2:3f:
0d:68:08:fb:56:14:55:74:57:5c:9f:4f:dd:d4:98:cb:4c:96:
1b:b9:b4:81:1b:6f:c7:45:bd:85:c2:18:fb:cf:ca:9f:a0:4f:
93:b8:86:ae:2f:7e:eb:5c:1e:87:2e:28:60:d0:ec:5b:20:6a:
3a:06:7a:a9:16:db:50:ab:a9:3e:92:7c:e6:47:04:e9:6a:d9:
1b:fa:80:4f:49:b6:7a:62:1c:93:ab:ff:e2:4c:d8:f5:34:a9:
7b:e3:69:91:bd:f0:b5:18:24:aa:81:ad:cf:81:01:41:0f:4e:
2a:c7:23:84:ec:29:71:40:96:05:17:6e:b2:5b:31:cc:a3:89:
70:44:c4:5e:73:d6:c7:9d:c1:73:9e:d9:0f:ca:c8:cb:cb:31:
95:d8:10:48:43:03:13:92:22:c4:f1:3a:90:27:ba:fc:c9:de:
11:c8:99:b9:92:e3:b8:1d:e4:73:53:33:f1:d9:2f:c9:05:40:
73:56:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:10 2026 by rpki-client