
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2978b928-8c90-3aa9-a76f-0dc64fc14c76.roa
File: 2978b928-8c90-3aa9-a76f-0dc64fc14c76.roa (raw, json)
Hash identifier: MGPg9MzZ/phlgviwqj8snQ9dMw/rgszkBMbn65z5TaE=
Subject key identifier: E8:D4:1F:13:A1:B4:24:F2:AC:80:B4:79:1D:B9:B1:2D:AB:A8:D3:B2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F225D128B5296984ABBCDDAE8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2978b928-8c90-3aa9-a76f-0dc64fc14c76.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 72.108.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:12:8b:52:96:98:4a:bb:cd:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=320c3323-ea89-43c5-b37f-3f9a5cfd4109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:6e:42:e6:a5:64:ef:72:4b:c3:a1:21:05:
be:fa:64:4e:d8:9c:5e:98:ab:b8:40:d8:19:39:70:
e8:bc:ca:00:b3:f5:04:6d:bf:be:ce:a2:b7:90:91:
30:0f:50:d0:66:24:d1:d8:c5:04:99:36:e8:c4:b7:
06:e8:cb:ff:cb:0f:26:8d:bf:f7:6c:e9:78:92:d7:
83:45:1f:49:b0:85:3f:f4:05:21:81:52:95:c6:53:
dc:fa:e6:70:99:b8:8a:2f:9a:c5:30:1c:80:72:b2:
b1:7d:df:5d:f9:fd:e9:7d:3e:04:5d:07:4d:37:40:
66:9c:ab:b9:d6:ad:f2:d6:04:59:56:9e:5a:15:17:
aa:6c:e1:a0:0d:3a:ae:ee:e8:37:5e:9f:a9:e2:69:
83:a4:a9:b7:79:25:98:d8:a0:de:6c:81:c5:c9:8a:
9e:25:cc:e0:f1:5d:8e:0b:e8:9b:b7:d9:d9:ee:6f:
1e:52:bf:4b:49:84:86:b1:02:e9:79:c5:e5:2c:1a:
c9:94:66:fd:30:83:c9:78:93:ba:1f:ac:19:95:8b:
b7:38:55:b3:10:73:41:39:71:fa:ed:4b:00:2f:a5:
30:25:73:19:68:af:d1:a3:a5:cc:57:9b:7a:3d:e6:
e8:86:2e:fd:18:58:46:b7:8f:2c:57:8a:70:f5:35:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:1F:13:A1:B4:24:F2:AC:80:B4:79:1D:B9:B1:2D:AB:A8:D3:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2978b928-8c90-3aa9-a76f-0dc64fc14c76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f3:d2:eb:10:b1:35:b3:80:7b:3f:ef:a3:7c:29:a9:da:0e:
8b:1e:70:44:ee:b4:3d:5c:6a:06:34:45:15:75:dc:5f:d8:7d:
e4:cb:ab:d0:29:44:19:c9:20:ae:31:af:78:99:9f:c6:32:21:
f1:1a:8a:1f:81:bd:90:4c:5c:8e:ae:f1:ba:69:cd:1c:4e:69:
63:7a:45:2f:15:ab:43:d7:6e:f0:bd:88:59:f7:e3:1d:ef:c3:
28:a2:6c:a8:5d:8b:4f:f4:09:27:0f:a4:59:bf:3e:41:50:9d:
6f:9d:77:4b:4c:6a:57:74:6d:27:3e:78:61:97:01:b2:1e:b2:
66:9e:e4:8d:e8:19:ac:2d:09:38:12:63:19:f7:bd:92:a8:c0:
9f:2d:0a:64:31:5b:89:cc:6e:fa:83:14:be:72:8e:e7:39:85:
75:be:bc:51:53:73:15:c0:db:32:cd:e2:4a:ca:ef:71:c5:f9:
e5:53:27:36:f4:06:7a:be:21:27:3d:7a:8f:23:d0:a2:d7:cd:
59:90:7d:da:c5:22:c4:90:d9:f2:dc:47:80:57:ca:7b:94:41:
cd:f8:40:6c:ec:02:19:ee:66:36:34:15:e1:a7:a1:50:0b:cd:
60:dc:66:b9:dd:bd:e2:f5:06:23:63:1c:83:43:78:e6:99:c2:
a0:0e:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:55:12 2026 by rpki-client