
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
File: 04b328e8-739b-3c12-82aa-7a968703666c.roa (raw, json)
Hash identifier: vLQNzNIp/kqQgn4maYSoua8rMtOZkFxma4ycaCmfRnI=
Subject key identifier: 12:C8:83:DD:44:CE:80:9A:1A:E4:0A:F8:02:59:96:20:A6:4C:04:AC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D47C4FE1ECA283836FB05A580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.244.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c4:fe:1e:ca:28:38:36:fb:05:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=d4f2b534-ad38-4581-8411-526a2ea7e18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:4e:7c:61:2c:d0:4d:5e:55:e2:2f:cf:be:
3c:5c:62:f3:56:5d:37:87:03:57:c9:a1:f7:17:9d:
ac:a4:d6:3d:b6:55:bf:d0:35:3b:3d:65:9e:6f:83:
ac:51:f4:bd:ad:98:c1:a0:08:69:3a:34:98:8e:87:
f7:36:a6:51:59:45:f4:34:4e:cc:90:72:08:e0:e9:
93:5f:b0:ab:d7:2a:6d:be:69:97:6e:75:dc:39:ec:
46:92:e1:4b:5b:d3:67:88:ed:cb:7a:75:c5:02:63:
b7:70:32:78:ba:78:a1:fe:4c:9f:e9:4f:4a:6e:4c:
46:91:31:7e:97:15:d3:f8:61:74:11:43:8b:82:b0:
45:a6:0b:60:a1:ef:86:a4:79:a0:80:05:6b:84:20:
ff:da:05:06:3d:6f:01:6c:9b:00:87:0b:b6:30:b0:
14:2c:25:43:bf:96:54:e5:35:08:a0:10:51:c3:d5:
54:6d:43:ed:e7:7f:45:66:23:37:67:0b:3e:86:ac:
80:63:76:75:20:7e:25:81:1f:8f:41:42:1e:35:a9:
7a:f5:40:49:1a:93:9d:33:c8:66:eb:7d:d0:5e:e2:
d9:17:07:32:c0:3b:57:2f:40:10:87:6c:2d:42:56:
93:d6:48:0b:3e:d0:af:ff:c1:c2:61:8f:d2:6a:89:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:83:DD:44:CE:80:9A:1A:E4:0A:F8:02:59:96:20:A6:4C:04:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.244.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:48:b2:92:e9:c0:f5:02:b0:57:da:5b:90:48:93:6b:a5:37:
e3:9d:2a:d3:38:b3:84:51:f5:cb:fd:03:e7:92:0d:de:64:83:
ca:03:79:08:43:ba:28:a7:09:de:2a:b2:76:e0:b2:b1:6e:eb:
0d:6a:ca:3d:a3:4b:a4:9a:02:1f:f7:d3:87:fb:b6:08:7c:fe:
2e:45:4d:08:60:59:0b:0d:1a:76:f4:85:02:42:4d:cd:a4:33:
f6:f3:2e:0c:ab:11:f4:c1:2a:42:08:ff:4e:da:55:e1:71:6c:
c3:f0:72:66:e8:f2:1b:07:c6:69:56:f5:90:25:76:04:e1:11:
18:2e:eb:4b:2d:a0:fa:91:e1:0b:91:0a:9f:9c:6c:56:47:cd:
ff:aa:d0:27:b9:37:c5:5c:e0:20:40:20:4b:25:b0:13:6b:b1:
2b:31:cd:23:33:3b:1a:14:04:cb:9b:93:63:07:cc:0b:ea:a0:
82:c3:7f:3f:9d:13:a2:ba:7e:3b:e5:70:f2:a8:60:45:2c:90:
7c:00:93:11:25:42:ef:7a:c0:87:33:0b:e2:cd:73:8d:e6:45:
23:22:2d:d8:61:05:36:c9:b5:14:21:6a:a7:80:cd:83:e9:59:
d2:d4:7d:e1:83:3c:c6:f3:c7:c4:8a:2f:a1:6d:f9:7b:c0:87:
01:d6:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:29 2026 by rpki-client