
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbb1ec2c-866d-3a22-b7af-8966bf7b3802.roa
File: dbb1ec2c-866d-3a22-b7af-8966bf7b3802.roa (raw, json)
Hash identifier: Fml0k/Gdmxyb1KP089vA7YgVDFZeDx0w3fnh6bE18jU=
Subject key identifier: 8F:A2:D3:C8:43:16:23:3C:9C:43:25:FA:3E:54:D0:53:5A:C1:A7:AE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F35E7C2980B253E708A70F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbb1ec2c-866d-3a22-b7af-8966bf7b3802.roa
Signing time: Fri 18 Sep 2026 01:00:12 +0000
ROA not before: Fri 18 Sep 2026 01:00:12 +0000
ROA not after: Thu 17 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 174.217.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:35:e7:c2:98:0b:25:3e:70:8a:70:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 18 01:00:12 2026 GMT
Not After : Dec 17 02:00:12 2026 GMT
Subject: CN=8af872fb-e169-46f3-8902-e5f37a7633c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:84:de:06:da:fa:d6:f9:b2:ba:8c:0f:49:
12:e5:26:6a:b4:c2:b8:82:44:d9:ec:ae:d8:de:43:
7d:e6:41:ed:1d:d4:04:17:32:f9:40:d6:14:e9:c2:
83:e5:4d:59:48:69:dc:8c:9f:dd:b1:65:2e:7c:e3:
32:9f:ee:45:56:bb:80:7f:e0:73:47:2f:ce:80:46:
c3:22:80:bd:6b:a6:bb:68:c6:37:fb:b7:01:3c:4a:
17:82:14:bf:51:26:9d:27:10:11:65:02:48:5f:d4:
e6:4d:6d:92:a1:44:03:ef:e9:66:f1:b7:e0:e2:2b:
9c:d8:36:11:38:c0:67:3d:ab:a4:6f:7e:60:ee:24:
fb:07:65:16:13:66:b0:f9:25:c2:de:22:06:a8:83:
da:41:5d:2a:5c:c8:19:69:8f:71:a7:b7:9f:17:a0:
fe:e5:42:20:55:0e:ab:3f:71:34:14:72:d9:ef:b0:
1b:fa:fb:61:15:97:8d:cb:4b:de:47:da:b4:e3:03:
4a:2d:b0:11:8c:20:c6:cf:ce:ef:93:f1:07:45:9b:
b1:10:12:47:3c:f0:d0:a1:8e:b1:e4:77:d2:79:46:
7a:20:16:0c:30:ef:b8:3e:e1:f0:9d:fa:e2:03:98:
1a:17:86:42:db:e4:22:25:4a:f3:bd:53:13:ff:7d:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:D3:C8:43:16:23:3C:9C:43:25:FA:3E:54:D0:53:5A:C1:A7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbb1ec2c-866d-3a22-b7af-8966bf7b3802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.217.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:78:da:b3:e8:f3:e2:d9:c7:38:71:cf:ad:9f:d4:03:db:8d:
17:06:56:12:fd:0c:35:5c:2b:8a:2f:6b:78:76:35:49:0c:10:
de:a1:89:c0:ac:04:33:62:c0:37:3c:49:ac:cc:03:1c:66:80:
d0:59:94:ee:42:fe:4d:2a:2d:46:86:a2:26:e1:9a:59:1e:da:
60:26:d7:7d:06:3c:84:f2:ae:4b:1e:b3:e3:80:3d:e9:de:e5:
55:01:a9:53:9f:d2:8a:03:24:b8:22:53:84:7c:c4:da:ca:16:
45:7c:27:bd:75:f8:c0:7a:4e:a4:30:1c:bb:b4:a9:21:b8:a0:
45:f5:df:fb:38:2d:55:e7:c3:ba:d7:76:60:f7:09:76:fe:f3:
12:4b:a7:2e:f6:ee:49:f7:6f:f7:95:00:14:98:33:7e:37:17:
4b:eb:74:99:87:4e:b3:b6:a7:1f:d7:13:3e:ad:01:11:60:69:
44:21:25:c7:97:ee:4d:ca:3c:59:b7:8c:08:ca:56:25:88:e0:
01:bf:3e:ac:e4:a0:c3:66:53:d6:48:67:6b:94:25:e0:88:30:
77:41:38:e4:33:5b:13:22:06:f2:31:8e:de:75:36:49:09:ea:
cf:7d:ad:67:96:4e:15:34:5a:99:b5:66:0e:ec:cf:06:5a:dd:
32:c3:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:54:00 2026 by rpki-client