
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
File: a880d51c-6851-39e3-bdb9-911f86ebabaa.roa (raw, json)
Hash identifier: B5pCJFT9NKDHQubAJcQ+4AowCFol4RgEJTckyjREjKk=
Subject key identifier: FA:3A:E2:64:E4:79:DB:C0:AB:E7:6C:76:20:F2:BC:97:F3:7C:8F:7C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584CDC67C928F3BA2016596FCB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 701
IP address blocks: 209.158.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:c9:28:f3:ba:20:16:59:6f:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=2b2d8f6e-de50-404c-9f75-cea63abce322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:06:e2:3a:79:88:ac:11:40:b8:01:a1:f8:
c5:4a:0b:42:13:47:54:36:4a:90:6a:eb:42:88:c0:
40:79:5c:8b:f0:49:47:78:5f:c1:69:de:ec:dd:ee:
7f:5a:7f:23:72:69:3f:a7:31:a6:31:49:85:32:87:
8d:f3:18:95:34:87:4c:e8:a5:8a:11:0a:88:c9:e5:
08:9c:9a:66:84:a7:ae:15:67:91:2d:71:f3:cf:8c:
50:03:67:ea:92:db:6e:72:60:7c:70:c9:33:0e:10:
8e:64:b4:b5:42:8f:d1:bb:86:e4:3f:cd:7e:4e:56:
92:91:b4:18:05:1d:e0:cf:40:6b:61:e6:5d:fd:e1:
93:61:6f:d0:4d:00:bc:c4:b5:66:f1:3d:7f:cc:7f:
98:7f:2d:a4:59:c8:88:75:db:3c:79:ac:17:19:32:
8b:80:c8:82:67:77:31:32:03:b3:81:a5:42:62:ba:
ce:49:97:d0:ab:54:f9:0d:c6:04:f1:9b:7d:b5:74:
d2:ca:e1:c9:01:1b:e8:13:44:25:df:e4:a7:d4:03:
38:51:a9:90:f6:4c:fd:a7:d7:cf:fd:54:d9:3f:dd:
f0:16:c3:91:c6:78:43:be:59:d2:02:c2:df:b1:f6:
f0:f2:f3:66:13:dd:7a:88:79:f5:ac:66:be:d9:ca:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:E2:64:E4:79:DB:C0:AB:E7:6C:76:20:F2:BC:97:F3:7C:8F:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.158.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:9e:20:ac:bc:41:33:f7:01:3b:31:49:30:f4:a8:38:aa:16:
cb:fb:30:89:1d:db:4b:f6:0d:0b:e8:68:bf:c7:04:f6:e0:d7:
c3:7e:5b:8d:c3:87:b5:59:dc:97:cc:66:5c:31:3d:c6:0b:0f:
4c:43:b0:27:4b:f7:8b:ec:26:8d:07:16:47:b7:11:b0:cf:0f:
d0:52:e4:7a:bb:74:30:34:03:f5:43:bc:c2:7d:98:d0:ec:7f:
6e:a0:3a:76:1c:10:35:22:13:79:75:0e:c8:76:c8:62:bf:46:
3c:42:a9:5f:fe:61:67:fc:5e:d8:89:6b:bf:8f:0b:cd:b5:13:
ee:24:b9:69:fc:89:70:d0:ae:bf:33:72:7f:66:ff:a9:82:61:
55:7a:38:15:4b:46:66:c3:f1:12:32:72:c9:92:73:2b:9b:c3:
3e:a1:8f:45:11:2f:8d:7f:e8:f0:ee:dc:b2:69:04:73:43:ff:
42:94:91:a4:19:96:77:62:06:b4:c1:92:e0:3b:38:1c:6c:ce:
3c:6e:f0:88:fc:5a:c9:a9:df:2c:7d:8a:1c:d4:0a:ec:d9:c6:
60:29:f4:5e:14:c4:15:0a:21:97:b1:3c:3e:32:b5:bf:65:99:
5d:7d:56:cb:46:28:e5:91:97:4c:b4:c5:dd:82:ce:3a:b1:32:
b6:49:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:27 2026 by rpki-client