
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa
File: 5a218aa9-a69e-3383-b2ce-6b813018e689.roa (raw, json)
Hash identifier: hjgpY+ikhFFsF+14G6pXDbqJo/w/X+beFBxBu12FlSo=
Subject key identifier: 1E:EA:1E:53:E5:8B:BD:12:E7:86:F8:DF:D4:EF:29:9F:32:0A:32:6A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F71EDBEF6A3F2A01A55F42A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa
Signing time: Fri 09 Oct 2026 13:00:13 +0000
ROA not before: Fri 09 Oct 2026 13:00:13 +0000
ROA not after: Thu 07 Jan 2027 14:00:13 +0000
asID: 14618
IP address blocks: 208.214.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:71:ed:be:f6:a3:f2:a0:1a:55:f4:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 9 13:00:13 2026 GMT
Not After : Jan 7 14:00:13 2027 GMT
Subject: CN=16ef3bfc-03a6-4cd7-933d-3a9eda3de74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:a8:70:53:f9:fc:7a:71:4c:ff:46:a7:70:
f2:07:30:9c:a4:02:3c:37:8c:4f:03:60:ba:88:19:
95:87:6a:59:49:79:84:69:65:85:6b:51:4e:b1:31:
13:35:92:c6:55:e3:4a:fd:b9:41:6e:3a:81:0a:83:
a6:e8:09:3d:6e:b7:76:81:d8:57:e0:3b:67:ce:85:
67:67:6a:ff:76:10:25:9d:00:33:f2:29:9b:c3:3a:
df:7d:80:47:dd:01:a1:5a:fc:62:15:5e:2f:ee:d2:
26:17:63:ab:b3:17:97:ac:86:d9:ec:cb:3d:8d:a8:
ba:f9:af:8f:85:2d:eb:ec:a4:a9:9d:28:14:6d:71:
9f:f2:db:65:1d:e6:c2:9d:34:b1:1c:ab:1f:21:64:
8e:b4:da:bf:ce:eb:05:5a:97:43:d1:84:75:f2:64:
2d:ad:b9:b2:1e:b3:99:86:52:0a:48:75:aa:bb:65:
1f:0c:29:5a:b7:c5:4c:92:84:24:e7:32:a3:3a:d5:
99:42:6e:cd:6d:f5:5b:4c:fd:88:af:1c:a1:d2:29:
ac:0d:1b:a1:59:86:6c:d7:0d:ec:86:da:19:9b:2c:
ae:1d:10:95:67:79:98:a3:05:a3:b8:8d:49:d4:c2:
23:e6:f9:29:00:bc:67:51:45:9d:7d:84:67:72:24:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:1E:53:E5:8B:BD:12:E7:86:F8:DF:D4:EF:29:9F:32:0A:32:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.214.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:09:02:e2:a3:66:5b:5a:90:11:11:ee:7e:5e:80:75:54:1b:
96:a1:03:f3:46:e2:c9:72:80:63:d8:1e:09:86:82:86:05:45:
2c:88:24:75:36:07:7c:d6:31:29:35:53:4e:cc:03:7a:8e:64:
aa:0d:47:7f:96:e2:26:95:30:7c:5f:b0:57:0a:00:be:c4:72:
a0:7e:5d:56:74:06:96:91:6f:79:7c:1c:aa:35:ea:77:e0:f1:
87:d3:68:0a:f2:db:1a:b5:60:2e:76:e4:34:14:9c:2c:2b:40:
88:7d:4e:d1:5c:fb:a1:1e:b0:28:b2:c7:23:3f:dd:86:9a:29:
04:92:07:e3:c7:77:74:64:40:3e:f2:2b:d4:14:4e:3c:0c:09:
52:ea:a4:50:96:49:8c:9a:03:9e:42:3c:22:a9:22:4a:ac:fe:
25:08:98:c7:94:0c:a5:c8:b7:dd:bd:ea:79:43:45:5a:a2:c0:
95:cd:de:79:15:50:00:a6:4f:44:03:16:4a:65:8e:d7:58:c1:
48:be:fa:87:52:9b:b3:07:a1:15:80:69:11:f5:f7:76:cd:b9:
87:13:e7:f5:69:dd:86:fa:6c:a3:b7:27:1f:32:3d:39:e5:c9:
9e:06:e4:af:9d:64:d1:e5:ad:02:23:38:d4:36:e9:ce:fe:29:
0e:5d:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:41:49 2026 by rpki-client