
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
File: 2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa (raw, json)
Hash identifier: poLYZefCInTj+6ZB5coLxfLOD+E9hQcScnAs+OoX/3w=
Subject key identifier: B3:A8:85:92:0E:08:7E:D3:4B:6B:53:71:EF:C3:09:E8:58:1A:E9:6A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E4559FAB103EA4454EB6D0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 701
IP address blocks: 209.118.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:fa:b1:03:ea:44:54:eb:6d:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=d7f2ae15-d73b-40ee-be5d-d97d8bd6496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:70:75:b0:eb:74:c1:1c:70:2b:97:90:7f:
f0:48:68:b5:42:a3:f7:67:9a:67:44:0d:a6:b5:43:
ec:de:5a:c8:ee:ad:ab:f5:24:96:2b:86:6c:88:be:
94:56:e3:f1:d3:42:f8:0c:19:a9:5d:82:67:31:62:
65:fb:cc:b2:43:61:19:5b:0e:ed:27:dc:3d:e9:23:
06:36:1a:e6:d8:dd:56:ae:d3:af:61:27:ff:7f:ff:
55:ec:88:90:cd:b2:37:d9:57:02:68:9e:c7:d5:b8:
5a:bf:54:7c:0a:2a:53:fd:cf:99:e1:de:6e:96:9b:
04:28:15:d8:80:b3:bc:8b:33:9e:2b:ae:a4:b2:91:
6e:a4:be:63:65:a0:6d:71:df:6c:9c:36:77:49:95:
03:3b:4f:df:de:12:8e:4e:6e:b5:65:c4:ae:55:85:
29:b9:a2:f0:e2:ce:61:57:76:fa:4b:9f:8e:62:66:
28:6d:32:6f:3c:d2:7a:22:01:e9:8a:2b:87:3c:fd:
88:8b:05:3d:91:70:f9:47:97:49:7a:6e:d5:e0:b9:
5c:a8:f5:49:38:25:4b:07:cc:67:9d:79:0f:02:af:
c7:c0:3e:f4:36:dc:04:97:f8:ec:4d:5a:60:db:f9:
67:bf:7e:19:86:04:ba:8f:56:2e:e5:f9:dd:cc:73:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A8:85:92:0E:08:7E:D3:4B:6B:53:71:EF:C3:09:E8:58:1A:E9:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.118.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ae:3e:59:a6:8d:bf:2b:66:44:f6:11:f2:54:3b:60:97:79:
5c:ce:37:96:06:34:cd:75:72:00:f1:52:89:7f:ec:7c:6a:29:
7f:f1:ad:e9:fd:ad:f8:bc:a6:88:27:25:b1:1c:71:5a:be:cd:
c3:63:70:02:42:1e:d1:bb:88:10:51:b0:59:c6:d1:6a:88:e4:
cc:4a:dc:a8:d6:04:ff:f2:dd:15:b0:17:64:e1:fb:50:e1:7d:
d9:7f:04:b6:a8:c0:f3:99:6d:56:95:06:d6:03:f1:bf:73:2b:
20:88:46:a9:14:16:f0:42:0f:ae:2c:f6:d0:b5:60:b4:29:c3:
19:21:53:ed:a6:a0:4d:6a:25:ac:73:08:29:a0:71:9b:80:01:
89:d3:13:2b:82:37:71:5b:ba:51:93:d4:fd:a9:45:1f:d3:40:
5d:56:3c:48:b2:b3:19:3f:50:0b:36:04:e0:79:b0:ee:9e:a3:
ff:38:73:b3:32:b7:a0:4e:8d:68:f1:e0:08:92:11:95:dd:e2:
39:d5:35:0d:8d:a1:81:05:fe:11:8b:b1:c9:bf:e8:80:70:57:
20:90:b5:a8:65:1f:ef:ca:1d:75:d4:f1:fd:a2:8f:30:00:3c:
af:0b:ab:1c:35:ad:ff:13:b6:c1:d7:24:75:45:91:d3:64:7b:
30:e8:d0:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWfqxA+pEVOttBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDdmMmFlMTUtZDczYi00MGVlLWJlNWQtZDk3ZDhiZDY0OTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFRwdbDrdMEccCuXkH/wSGi1QqP3Z5pnRA2m
tUPs3lrI7q2r9SSWK4ZsiL6UVuPx00L4DBmpXYJnMWJl+8yyQ2EZWw7tJ9w96SMG
Nhrm2N1WrtOvYSf/f/9V7IiQzbI32VcCaJ7H1bhav1R8CipT/c+Z4d5ulpsEKBXY
gLO8izOeK66kspFupL5jZaBtcd9snDZ3SZUDO0/f3hKOTm61ZcSuVYUpuaLw4s5h
V3b6S5+OYmYobTJvPNJ6IgHpiiuHPP2IiwU9kXD5R5dJem7V4LlcqPVJOCVLB8xn
nXkPAq/HwD70NtwEl/jsTVpg2/lnv34ZhgS6j1Yu5fndzHOv9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOohZIOCH7TS2tTce/DCehYGulqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQwYzdlNWUtYmNiMC0z
NGY5LWI4MTMtNTg3MzFmYTg3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKuPlmmjb8rZkT2EfJUO2CXeVzON5YGNM11cgDxUol/7HxqKX/xren9
rfi8pognJbEccVq+zcNjcAJCHtG7iBBRsFnG0WqI5MxK3KjWBP/y3RWwF2Th+1Dh
fdl/BLaowPOZbVaVBtYD8b9zKyCIRqkUFvBCD64s9tC1YLQpwxkhU+2moE1qJaxz
CCmgcZuAAYnTEyuCN3FbulGT1P2pRR/TQF1WPEiysxk/UAs2BOB5sO6eo/84c7My
t6BOjWjx4AiSEZXd4jnVNQ2NoYEF/hGLscm/6IBwVyCQtahlH+/KHXXU8f2ijzAA
PK8Lqxw1rf8TtsHXJHVFkdNkezDo0Ik=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:35 2026 by rpki-client