
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c8dbb3c-1989-3bb2-8649-2e9a421bfb42.roa
File: 8c8dbb3c-1989-3bb2-8649-2e9a421bfb42.roa (raw, json)
Hash identifier: xRgBJA9bEFsAWUnCHAFLVGI1vY+L29yq7MaQqD1Et3g=
Subject key identifier: 10:EB:0E:26:A7:4A:0F:4E:47:9C:1A:1A:A2:3E:C0:35:9D:B8:95:97
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F0672564DA35B098E711DCB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c8dbb3c-1989-3bb2-8649-2e9a421bfb42.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 6167
IP address blocks: 97.138.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:56:4d:a3:5b:09:8e:71:1d:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=e8e72f7b-18ee-4030-9874-01188c36eadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:1a:75:52:79:ff:ec:f8:d5:da:cc:4e:08:
24:8b:dc:9f:8a:34:06:56:b0:a4:d4:2d:46:ab:b7:
49:d8:7d:40:5b:fa:eb:51:c9:f2:16:8b:8a:f0:97:
73:eb:bf:f5:32:0c:10:9b:09:82:77:75:ed:ee:65:
33:55:42:2c:b8:c4:1d:07:88:b9:b6:e7:ca:1b:b6:
39:a8:90:c0:0d:df:8d:4b:9b:d5:c8:e7:25:9b:76:
1a:db:a1:2c:b7:7f:dd:6c:12:7c:b7:43:c9:49:4b:
f1:f3:37:8c:a6:6e:09:ba:a8:b8:51:a3:ab:15:dc:
d4:3e:1e:3e:2d:b7:b6:c3:fc:b7:16:3b:50:28:75:
50:c1:c7:ff:67:26:f9:a1:d5:e9:52:12:f0:e8:71:
14:c1:08:9c:ea:99:4f:0f:48:c8:77:c6:bd:dd:80:
d9:ef:94:4c:70:c5:85:a6:a5:3d:71:7b:46:fc:cc:
c2:ff:86:ce:84:c1:cd:da:04:f2:04:17:85:23:1f:
fb:7e:bd:7b:77:f1:39:31:be:fc:4b:ea:59:67:e6:
59:43:74:ce:e0:91:dd:27:47:81:2a:12:49:79:64:
68:82:e3:bb:aa:df:31:48:4d:c1:18:f4:c8:12:e7:
a1:ab:46:22:73:33:eb:eb:91:c9:f6:52:f1:8e:0c:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:0E:26:A7:4A:0F:4E:47:9C:1A:1A:A2:3E:C0:35:9D:B8:95:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c8dbb3c-1989-3bb2-8649-2e9a421bfb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.138.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:86:a5:78:92:52:59:97:22:1f:24:f2:36:82:67:cd:c1:7f:
6c:ac:65:ed:f7:76:e8:4a:fa:21:e9:fb:16:6a:ff:e0:38:a3:
4f:77:b2:7d:4f:26:c8:38:08:21:35:c5:23:15:f7:73:ee:7b:
cf:75:4a:e2:49:8f:28:e9:72:1f:bf:73:e8:9d:01:0b:f4:5e:
6d:20:15:b3:83:2c:19:c3:e1:d2:4f:8c:5a:da:11:ed:a8:0c:
01:04:54:ef:8c:4d:77:2c:44:e5:22:e8:de:2b:41:de:bd:95:
34:b0:98:c5:4e:22:b7:15:1d:c1:0c:ad:6d:e6:c2:01:da:ef:
26:eb:9d:1b:31:f3:f3:90:31:63:18:bb:09:86:c6:04:e3:ba:
41:5a:8c:bd:2f:98:e3:1b:8b:1d:6e:b4:e9:38:c5:66:46:28:
30:bf:58:17:18:23:e0:39:9f:c4:3a:b2:52:a0:39:87:f8:36:
ab:e8:8e:b7:40:52:2d:7a:be:46:09:9c:c1:bd:ba:85:8f:dc:
b7:55:65:8d:2a:04:21:92:2f:ee:ff:e6:08:5f:d7:28:81:e8:
bb:38:c4:50:25:d9:c4:5f:52:11:6e:7c:09:e4:80:9d:e6:15:
fb:00:7f:52:9c:49:b8:0a:13:2f:4a:dc:66:19:34:25:26:d3:
72:f7:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:44 2026 by rpki-client