
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
File: 66ce0b4e-7237-3244-be3e-2799aece7280.roa (raw, json)
Hash identifier: HajLT+3pvdybF8gurvffaguBxoiEx17cPF8cM/4O/K8=
Subject key identifier: 20:5C:9A:64:79:34:1B:6C:C9:B7:12:56:33:F7:46:FE:B8:EC:C0:98
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E016B35C6A6E5636483037B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
Signing time: Sat 30 May 2026 13:00:10 +0000
ROA not before: Sat 30 May 2026 13:00:10 +0000
ROA not after: Fri 28 Aug 2026 13:00:10 +0000
asID: 6167
IP address blocks: 174.202.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:01:6b:35:c6:a6:e5:63:64:83:03:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 30 13:00:10 2026 GMT
Not After : Aug 28 13:00:10 2026 GMT
Subject: CN=53825085-dc42-4ba8-9aed-f4df7962fa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:04:5f:51:b8:cf:8c:c5:70:6a:26:70:42:
f7:3d:a8:24:3b:09:25:25:53:32:bb:1f:bc:09:3c:
cf:22:39:ea:77:8d:9f:87:08:2e:2e:fc:da:99:a0:
33:a3:23:24:d1:7c:75:eb:51:61:cd:fc:5a:16:8e:
d2:08:75:3d:79:60:9c:f3:b2:3d:51:1e:31:75:50:
7b:e6:51:ff:ea:7b:d0:b5:53:a5:ff:3b:ba:0e:87:
3b:5b:46:e8:3f:90:56:0a:67:5b:c9:c4:0e:8a:7a:
a3:20:e2:03:1e:0a:e1:46:36:c2:e1:03:27:1d:d0:
a4:6b:d1:33:48:4a:c5:b8:3c:aa:2e:b3:8b:98:23:
a7:55:17:68:87:06:45:b5:0b:a0:01:f4:4a:7f:36:
a5:64:85:af:43:6f:68:0a:47:9d:e9:96:bb:70:c7:
31:ec:1b:09:8d:50:36:12:6d:fe:8d:ca:e4:9d:48:
a3:82:62:40:de:7a:3a:b9:12:90:5a:d0:c7:a4:61:
40:e4:88:87:7c:f7:83:7f:21:97:c1:3a:2e:4d:5f:
cf:35:c9:5e:79:4b:6b:22:a0:87:3d:ed:5c:6a:8d:
b9:10:af:3c:98:69:a8:af:8a:93:e4:6f:47:9a:9e:
95:42:ea:06:52:57:2c:37:70:25:1a:15:ad:90:71:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:9A:64:79:34:1B:6C:C9:B7:12:56:33:F7:46:FE:B8:EC:C0:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.202.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:00:c9:4f:16:f1:14:76:6b:a5:6b:8a:2f:21:e3:21:9c:f6:
63:43:2f:86:8c:f6:8f:51:47:41:bf:df:d8:61:7e:f6:86:9d:
2d:5a:5c:7d:de:26:3f:e6:e0:e2:43:92:c8:47:3e:c2:d7:d3:
c6:01:ba:75:75:0d:4d:52:12:d1:6f:8e:a6:60:3f:0c:7d:9e:
6d:dc:5d:c0:13:8d:19:c5:24:53:76:f6:02:18:ab:4a:cd:e2:
72:52:e8:65:75:5f:77:16:00:e9:98:02:3f:1b:f1:ab:56:a4:
a5:1b:f1:b5:86:64:41:5d:aa:e7:cd:b3:be:3a:fa:14:29:8b:
27:d3:56:67:69:a2:91:64:e3:40:9e:83:5f:4d:17:ab:62:67:
97:f1:13:81:1d:e4:e8:57:21:78:83:52:1b:85:06:c2:0f:08:
8f:01:bd:ed:fe:2e:68:32:ee:b3:90:49:f5:03:97:9e:5c:0e:
a8:83:81:50:d0:dc:a2:c7:ab:6e:69:9e:bb:fb:52:6d:f7:18:
e4:61:0a:65:66:29:6f:3f:97:e2:22:d5:bd:90:d5:a1:94:95:
9d:41:35:d9:09:c4:27:99:5c:af:1f:04:90:f9:be:02:66:3b:
16:8f:80:d5:d6:a4:dd:d8:91:90:43:a9:67:a6:81:c3:fb:f1:
17:91:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:35 2026 by rpki-client