
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b789c757-5061-3169-9774-a18c01e0c46e.roa
File: b789c757-5061-3169-9774-a18c01e0c46e.roa (raw, json)
Hash identifier: fCETstq9dOYV5HgVA7p51GESAAAvo/2g4wIYtfD9aL4=
Subject key identifier: 4E:D7:08:49:CF:8E:38:33:6D:A4:0B:5B:81:DA:F3:FC:E9:6D:72:EB
Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Certificate serial: 010D0C9F4328584EA2DFD027183A93EE564A27C0
Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b789c757-5061-3169-9774-a18c01e0c46e.roa
Signing time: Mon 27 Jul 2026 09:00:12 +0000
ROA not before: Mon 27 Jul 2026 09:00:12 +0000
ROA not after: Sun 25 Oct 2026 09:00:12 +0000
asID: 30600
IP address blocks: 72.58.0.0/16 maxlen: 24
72.59.0.0/17 maxlen: 24
72.59.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a2:df:d0:27:18:3a:93:ee:56:4a:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Validity
Not Before: Jul 27 09:00:12 2026 GMT
Not After : Oct 25 09:00:12 2026 GMT
Subject: CN=a47455b7-7020-4292-bb2d-7cedc7a12704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:ba:75:69:e1:25:1c:57:6d:0a:16:f1:73:
42:60:f8:85:b6:8c:f8:69:73:9e:25:1a:d4:3e:25:
a0:b4:01:5f:c7:81:35:fe:74:82:48:88:d1:a2:27:
8b:e9:2e:bf:d9:a8:67:c4:1d:ad:89:78:e5:5d:a4:
af:34:a4:b2:9b:fd:d2:ff:6c:78:22:fd:7f:7f:d3:
3e:63:3d:5f:97:99:e4:98:61:1d:66:c7:0e:94:24:
ff:17:21:41:09:29:0f:c1:5f:d2:40:58:e6:f7:65:
8f:1e:03:21:af:ca:cd:7d:8c:d7:5f:7a:0b:ba:e5:
fe:68:f2:68:d7:22:43:33:13:69:8f:e9:2f:19:a8:
42:19:e9:4a:02:77:c6:f4:33:9c:21:68:46:ab:a1:
9d:9e:03:95:d1:49:e6:af:12:de:53:00:a5:fb:fc:
0c:2c:dc:c8:16:e7:64:aa:00:20:6d:be:cd:8a:a5:
d6:92:70:d2:43:aa:fa:cb:98:a5:39:a2:78:b3:52:
24:19:ae:e1:5e:4c:d7:e2:c9:21:59:96:24:2c:7c:
56:13:14:ab:5a:74:76:3c:f4:45:1d:cf:10:5a:97:
e8:7c:c7:79:94:aa:42:ab:77:ce:25:a7:73:33:bc:
42:fb:31:5a:8d:29:2e:f5:97:8e:f7:c6:47:8e:c5:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:08:49:CF:8E:38:33:6D:A4:0B:5B:81:DA:F3:FC:E9:6D:72:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b789c757-5061-3169-9774-a18c01e0c46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl
X509v3 Authority Key Identifier:
keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
sbgp-ipAddrBlock: critical
IPv4:
72.58.0.0-72.59.159.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:98:1a:cd:23:ce:02:c1:48:87:41:de:65:f1:93:f4:95:6b:
58:ff:4f:c8:e6:9b:ae:67:27:9d:85:21:eb:b5:3a:de:c2:10:
b6:a8:c0:6d:c4:ed:e1:bb:cf:a2:bd:72:96:0e:b0:f5:2e:5f:
c7:65:bc:d5:a4:30:8e:e6:7a:46:46:88:cf:89:f6:7c:c2:2c:
21:3e:24:03:c3:7d:e3:3c:14:dd:ab:33:d0:63:5a:0f:7d:a8:
aa:b5:f0:ba:1d:cc:bf:96:8c:23:ef:f7:b0:dc:e0:08:96:e9:
f0:d9:c7:00:b6:af:3b:2b:0e:f3:15:37:ac:a9:92:49:51:e9:
0c:8e:68:8e:ce:b9:25:88:38:63:b3:b3:e6:70:0e:7f:83:d7:
80:f3:3d:c9:fa:fc:b0:50:cc:ab:ab:04:d2:a8:cf:54:cb:e7:
8b:2c:6d:44:96:be:21:ca:85:7b:11:ce:b2:fb:8b:46:46:d9:
dc:d8:cf:59:b8:57:37:d7:68:27:5a:30:00:b9:ff:ca:89:e8:
fe:a8:be:48:b6:0c:e9:83:a2:dd:31:73:e5:af:ce:6b:17:2e:
39:94:ce:da:0b:ef:72:12:9e:ad:77:a1:65:f9:ef:6b:d8:0a:
f0:4c:4d:32:27:51:ef:30:fc:ff:37:60:da:59:7d:a5:ce:42:
a4:94:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:56 2026 by rpki-client