
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
File: a880d51c-6851-39e3-bdb9-911f86ebabaa.roa (raw, json)
Hash identifier: dlt0WrvwrpKw2q0VBmS5qvNOO9sDnR8SeKAOROyUGt8=
Subject key identifier: A2:7E:B6:05:64:29:C3:C2:F8:E6:B2:17:61:5D:00:1C:7D:CF:87:C5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E9D4A9D8654432A8B0EA500A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 701
IP address blocks: 209.158.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:9d:86:54:43:2a:8b:0e:a5:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=72a5c6da-4c79-44be-bc46-5d28c865d132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:d0:77:54:d0:a2:01:a7:f2:82:68:13:84:
92:7c:57:04:d4:9e:03:2b:ad:65:99:d8:0e:2f:dc:
bf:e3:76:95:c5:2c:f8:93:ff:3d:4c:1d:60:d8:9e:
38:11:53:1a:91:56:28:45:09:dd:67:cc:03:04:20:
b6:1b:b0:5b:78:ae:8c:60:31:4e:55:95:4a:e5:7d:
7f:00:85:34:2b:13:16:ff:dd:93:ab:d8:6b:8a:1a:
c7:e4:ed:54:31:90:8d:03:03:53:3a:27:b4:82:c8:
8f:f3:e9:9b:b4:5b:4f:30:de:34:cc:c2:a8:4f:85:
6b:b2:96:38:99:50:52:81:11:c4:61:54:fb:95:a6:
00:91:a7:ed:36:0f:e0:f6:82:66:d8:b8:8a:8e:c3:
b3:da:ae:ed:61:b6:cc:be:ad:7c:23:18:ab:c4:30:
67:a1:a3:8d:a6:14:29:a8:0f:5d:69:6f:85:9d:3e:
eb:e4:5c:8c:fb:8f:5e:42:3c:28:e6:ae:da:cc:34:
15:17:1d:ba:50:5d:e5:39:75:74:e8:5f:6a:87:05:
5a:d8:93:b7:46:d6:e9:17:a5:e9:4c:bf:b6:2c:27:
10:d0:28:aa:ad:09:c7:b2:08:99:e2:78:25:bd:0d:
aa:81:6c:0d:95:6f:74:da:f3:9b:76:51:2e:53:73:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:B6:05:64:29:C3:C2:F8:E6:B2:17:61:5D:00:1C:7D:CF:87:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.158.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:de:d9:7d:b2:4e:93:cf:aa:01:0b:74:dd:f2:cf:4c:a9:ea:
5d:65:53:36:6c:e1:c5:b2:92:48:e2:6f:a6:b6:ca:d2:42:0e:
a3:39:ff:dd:ec:a7:fe:ae:90:f8:43:5b:90:bb:cd:14:04:04:
f5:f7:95:f3:e4:64:c2:72:a1:25:f0:c0:18:5b:25:3e:c7:bd:
ec:36:da:04:76:61:1c:7a:bb:04:a6:98:ab:06:f9:14:8a:ec:
5e:75:c8:e7:a4:ee:b8:a6:bf:b0:30:8e:2e:70:f8:0a:94:66:
4d:a5:e2:66:f7:f9:a7:71:3b:2e:06:05:32:e6:b3:bf:c5:f8:
f3:54:e9:37:f6:d5:ba:91:3c:83:5b:87:a0:25:3a:d8:76:16:
50:09:23:73:20:c7:03:b4:a7:bf:11:51:eb:40:a3:db:99:a3:
44:05:80:19:c3:4d:d1:1f:ce:53:5f:4f:b6:17:68:ef:37:70:
21:69:e3:52:04:8b:3c:d3:de:fc:c1:84:f7:99:2e:cc:f7:ee:
e6:ea:33:75:3c:0f:85:5d:32:74:72:d1:24:47:7f:43:8a:42:
15:d5:31:f3:57:f9:d4:ee:36:43:13:60:e6:d8:2d:66:4c:94:
a7:10:66:56:8f:03:86:8c:90:9b:38:3d:d6:c0:b2:ac:79:e8:
98:3c:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:03:11 2026 by rpki-client