
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json)
Hash identifier: FD4LqNG/mq1Ef6iPwKIogLe8rc1RJKtZfPfSSM9iBZE=
Subject key identifier: 07:7A:CC:9F:7C:24:2E:B3:AB:ED:DE:28:AF:52:29:92:25:CA:FB:E7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D6C0FC8ED2CEE65992F66F8E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 701
IP address blocks: 68.131.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:c8:ed:2c:ee:65:99:2f:66:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=cc005330-1791-4221-8cf4-7789bb088b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:73:a0:76:3b:d3:91:6d:57:07:61:ef:03:
73:25:40:0d:41:a0:af:84:05:a1:30:71:08:5e:e3:
56:2c:95:cc:9f:ed:20:95:7c:9c:ee:10:c1:66:28:
24:63:0f:3a:3f:93:9e:db:b8:46:73:b1:69:2b:1c:
01:67:01:b2:3d:cf:85:17:53:83:45:3d:c9:63:25:
2a:e0:c6:2d:d0:30:dc:63:ac:c1:dc:f0:ab:a5:90:
57:82:79:d1:22:ef:af:18:e4:a5:f1:dd:28:45:05:
fe:6a:c6:aa:78:9d:05:5b:ef:19:6d:d2:89:9b:22:
b5:60:58:d4:e4:df:db:ed:82:6f:ea:95:22:76:56:
90:a8:97:48:28:1a:8d:bb:94:25:f1:42:13:c9:97:
6c:30:7e:04:fd:c0:45:33:75:c3:39:23:34:71:49:
51:8e:d8:b3:86:7e:34:36:98:63:be:a4:62:5d:0a:
3f:c0:c7:11:c2:5b:41:88:23:94:d1:f0:e1:ed:3d:
09:ed:3b:32:05:a4:5b:35:99:95:d2:e1:1a:55:fe:
9a:8c:84:49:d1:87:7f:00:89:20:3e:62:96:ba:4f:
83:2a:f7:36:1a:23:35:01:a3:a6:10:2e:06:97:13:
21:7d:04:63:1b:50:16:ea:0a:37:ac:e4:18:2a:39:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:CC:9F:7C:24:2E:B3:AB:ED:DE:28:AF:52:29:92:25:CA:FB:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:87:e8:1e:3b:be:02:7c:02:0d:8b:2c:47:b4:90:40:b4:c7:
f7:89:84:36:26:23:d9:d4:85:20:fc:c0:33:fb:41:9a:18:29:
aa:9c:f7:10:84:84:a9:1a:9f:d7:7a:89:eb:b8:49:e4:87:3c:
1d:bc:0c:5c:10:4c:93:47:e4:15:97:ef:d7:da:f9:3d:c2:43:
a3:c7:24:b4:93:bd:af:80:f0:ee:b8:8a:bd:ae:06:4f:22:cc:
77:4d:28:f9:62:bd:99:17:8f:4b:d0:1b:3e:02:9a:65:47:1e:
30:17:3e:9f:02:fb:a3:a3:ec:7a:fd:83:74:99:81:4a:c3:5f:
5b:19:19:c1:d8:d6:e9:88:51:02:99:77:dd:28:56:d7:8f:b0:
bf:53:37:fb:aa:b0:85:2e:ee:1a:29:a8:42:bb:50:5d:73:b8:
48:ce:ac:a9:36:39:dc:ae:f3:dd:6b:18:74:60:be:19:b5:09:
ce:a8:49:fe:50:d0:af:03:ae:79:1f:27:05:6d:67:9d:5b:d1:
05:f8:ba:5e:7c:46:4f:97:0c:a5:65:20:2b:34:a0:5e:f0:80:
b9:47:22:6e:7a:eb:8d:3d:0b:8b:53:30:5a:eb:c4:9a:10:74:
b4:60:ba:d9:46:7f:2f:d0:72:12:17:83:4a:02:b2:68:40:60:
71:89:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:24 2026 by rpki-client