
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa
File: 303e7c7b-498d-38d1-b248-ea2a6afa1787.roa (raw, json)
Hash identifier: m5wva4QWm5f1AcbKxAZhhFCY529O8gn8VeMo0IFX5Lk=
Subject key identifier: 7C:59:1B:29:54:3B:74:0F:80:58:4F:B2:0D:87:9E:40:51:26:45:71
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F225D16CB5817ACDB522A6A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 72.106.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:16:cb:58:17:ac:db:52:2a:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=982718d3-6882-47fc-a90f-698b3892e5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:59:dd:e0:9d:ed:88:70:b1:f7:6b:62:d3:
c7:ff:e6:a1:b7:58:4f:ed:01:5d:73:ec:d9:ab:a2:
c3:72:ac:b6:60:b2:67:2d:46:f3:c4:14:09:35:df:
1f:bd:ad:cb:48:fd:fa:59:5f:27:26:fc:93:6f:0f:
2d:a7:37:5a:7f:56:5d:e9:a7:15:6f:69:32:85:9b:
fa:13:fc:09:08:a7:57:cc:b4:1a:b2:88:4e:1e:e0:
fb:39:2a:4d:13:f9:02:06:d5:72:74:3d:0a:c1:ed:
37:a8:0c:18:43:8d:8d:af:e5:8b:90:a9:e7:67:99:
e8:54:10:20:2f:d3:40:c7:93:e8:26:18:0b:90:26:
66:c8:ce:31:c5:ef:0f:c3:a0:8f:86:c2:8a:98:21:
ee:e9:ce:08:82:23:cf:a0:d5:f1:63:40:26:93:da:
62:2d:f8:ef:cf:52:9b:a5:3f:61:3f:3a:21:68:88:
b2:e9:8d:f4:81:7f:94:cd:ed:4f:8c:37:41:44:2b:
1f:56:00:de:9c:10:3c:0c:14:04:72:42:8d:9f:17:
79:b3:b6:9b:26:78:5c:fe:3f:43:ad:ac:b8:b1:99:
b0:3b:e9:1d:fc:83:98:46:f7:5d:fd:5d:51:b1:c6:
cf:71:47:b1:4f:39:99:4e:86:8b:6b:90:8e:0d:f3:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:1B:29:54:3B:74:0F:80:58:4F:B2:0D:87:9E:40:51:26:45:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.106.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:60:9a:7a:78:82:2c:71:09:2e:ff:99:57:4b:55:3f:c0:19:
f2:49:85:c0:cb:55:7c:9c:b7:64:d2:1c:15:48:d5:5c:73:78:
61:d3:90:32:37:5e:24:3e:b4:68:fb:c9:00:c7:75:87:1b:81:
d9:79:7e:da:59:5f:45:6d:99:76:be:7f:df:d6:35:1a:a7:3c:
c7:23:0c:26:f9:06:1f:7b:e4:d3:e9:c3:1e:42:34:23:35:04:
3d:c2:fa:d0:1b:7c:cb:3c:72:70:4b:33:50:cf:70:a5:4c:cd:
5f:9b:a1:62:05:3a:26:74:ec:f6:2e:f8:99:0c:68:a1:72:52:
a3:fe:be:6f:51:a2:f1:af:25:6f:75:af:bb:5d:6e:cb:0f:87:
d7:d9:58:56:6f:69:9d:cb:b2:03:30:84:b5:72:ee:e7:92:f8:
6d:70:2a:4d:be:cf:8a:fc:14:a3:2e:75:a1:07:06:db:6b:aa:
3c:3a:02:9b:c4:73:20:bf:2d:5a:7e:56:b9:49:a2:66:86:74:
30:f8:9f:9c:24:03:88:c4:ab:5d:5e:29:11:0a:f1:00:a5:ee:
9c:85:6c:4c:2b:e6:fd:5c:a2:1c:cd:9b:3f:fa:0a:1c:94:72:
58:74:9d:7e:9a:44:ad:43:62:c4:fb:e1:d9:f6:25:94:5d:2c:
69:f4:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:43:12 2026 by rpki-client