
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa558554-083a-3213-9dd3-eaea5b20fec7.roa
File: fa558554-083a-3213-9dd3-eaea5b20fec7.roa (raw, json)
Hash identifier: O2Ss6Grt49rWuBjhxfUfC+V6K0j2fuwCxPCC3OqKubw=
Subject key identifier: A2:65:7D:44:D5:1B:66:9E:05:E9:BC:ED:C4:DD:A4:E3:D0:AD:FB:1C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D6C0FBA32E7280DBD5E64A480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa558554-083a-3213-9dd3-eaea5b20fec7.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 701
IP address blocks: 68.133.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:ba:32:e7:28:0d:bd:5e:64:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=9d58f708-e80d-4f08-82d9-c6a52ada8064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:1f:93:f8:05:f1:b3:34:2a:af:b3:6e:5c:
8e:d6:c6:20:a5:5b:37:65:5a:86:85:0b:f9:e6:46:
cc:a1:e4:67:36:e3:80:f6:fa:a2:3b:34:6f:59:5b:
19:c8:60:da:47:7f:4b:3f:49:3e:d2:45:af:e0:4c:
0f:97:a9:89:87:20:b7:6a:69:58:62:71:37:0f:37:
d4:cd:56:98:f0:fe:c7:d6:79:87:47:6f:1f:77:1c:
5c:09:d9:04:8c:8a:fa:3a:9f:09:8b:f7:ce:96:b5:
41:d7:79:18:41:16:e1:ac:04:02:15:f5:ef:a4:ba:
a6:6a:33:3a:64:da:3a:3c:f1:a6:f9:9c:67:c5:90:
e0:5d:51:1e:26:96:0f:0a:7d:7e:52:db:9d:b2:32:
59:e4:c7:3a:b5:7f:12:5a:8f:60:64:53:17:a4:f4:
d2:2b:2d:89:7a:06:95:46:e0:f8:ae:26:26:3f:ce:
45:4f:9a:51:6f:c4:bd:5a:18:2f:15:d5:2a:e8:96:
23:55:11:2c:2b:e2:51:b8:b4:0b:93:b1:b7:33:97:
b5:9e:b6:c2:35:d7:3f:3a:b2:1c:30:92:d6:42:38:
35:a2:c7:42:9d:73:c6:a2:15:8e:1d:7f:3a:45:8e:
21:70:da:2c:a6:0e:95:0b:b8:4b:95:a0:a1:75:e3:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:7D:44:D5:1B:66:9E:05:E9:BC:ED:C4:DD:A4:E3:D0:AD:FB:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa558554-083a-3213-9dd3-eaea5b20fec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:90:f2:3e:00:6b:8b:aa:d8:b1:a5:5b:57:d5:51:c0:15:04:
19:24:b0:2c:2d:7d:22:49:5e:b6:d4:27:61:90:03:e0:ed:49:
35:cb:a8:04:83:e0:48:9f:f0:7c:83:fc:2d:b6:13:b7:eb:65:
cf:16:99:98:07:13:29:68:ea:88:31:92:ca:64:08:0a:3c:56:
de:8f:cf:df:5b:b7:b8:1a:06:e2:bc:60:2d:26:0c:ec:4c:7c:
73:3d:a5:18:ba:fb:c5:99:85:9c:0e:ae:fe:10:51:9b:3d:89:
55:05:ed:53:96:28:54:8c:84:80:89:f1:e2:f8:82:f4:bb:3b:
b3:42:b0:3e:d7:ad:e5:b7:67:7c:a2:69:5b:05:7e:68:66:cf:
13:89:9c:3f:60:14:5d:d8:fd:ef:09:04:1e:b5:24:53:0f:45:
a0:39:63:41:7f:65:ee:c6:0a:44:87:7a:34:75:5b:f8:e3:3b:
49:11:29:07:1f:fb:de:9b:c4:2d:76:c7:e3:43:6b:1e:5d:2e:
2b:d4:47:14:a9:c9:57:90:17:cc:8c:3b:a2:18:f8:55:e5:bf:
37:d7:94:78:d7:14:3d:06:33:84:f8:2b:8e:c5:06:ec:26:e4:
42:ba:8b:5e:d2:df:89:ef:ee:f2:c9:d5:79:c2:dc:77:d2:81:
d3:c4:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:28 2026 by rpki-client