
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
File: 37671870-1971-3272-bf72-f2be3bd65b13.roa (raw, json)
Hash identifier: ljop6jwjAypy5JHenVqK3Bam/hQLwE03AJ1+VoA4yJs=
Subject key identifier: 18:27:BC:A4:1C:9F:C6:75:58:D0:2C:7A:3E:2F:3D:07:41:20:2F:E5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D9FB57D78275F7D15ACD48C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 72.108.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:7d:78:27:5f:7d:15:ac:d4:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=4db626e4-52d6-4acf-b0ac-777bc06a2fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fa:ac:81:ca:99:89:1d:17:42:d1:2d:7b:6d:
e6:2e:5a:b6:33:98:62:66:83:14:26:55:b7:56:ef:
d0:a3:0c:d3:a0:e7:9d:44:59:b0:31:0e:6d:79:13:
69:87:28:02:6b:f8:13:33:db:f7:bc:9c:14:b2:92:
1a:d9:c3:70:79:44:31:13:b9:a3:77:b8:e3:65:bc:
7c:28:55:dc:83:54:0d:aa:94:86:a8:ba:32:de:eb:
51:12:8c:c3:38:65:e8:aa:99:0e:24:e1:49:fc:6c:
45:13:e3:1c:04:6c:db:7e:7e:b9:5b:de:fa:bc:8f:
a7:f9:db:0b:f3:a6:fd:1a:18:af:99:5f:1e:95:b6:
68:b3:fd:df:76:04:a4:e2:c2:f2:22:e8:f4:0f:2f:
ba:8f:16:0c:30:c0:02:d5:4a:b4:88:7e:fc:58:64:
3b:0f:35:57:7c:3e:2e:b8:c2:d4:a7:32:42:43:63:
ae:24:3e:f0:ba:fb:f9:09:36:ef:be:3b:c1:1e:62:
62:00:35:40:dd:02:80:60:47:03:ba:f1:0c:66:21:
69:7b:65:d3:11:a6:5d:1d:19:87:4c:5a:d1:fe:c7:
04:16:86:cb:dd:e4:89:f6:14:b3:25:46:51:b7:72:
d9:be:e5:eb:96:59:55:56:e2:46:77:a7:42:4b:34:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:BC:A4:1C:9F:C6:75:58:D0:2C:7A:3E:2F:3D:07:41:20:2F:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:20:34:04:d7:f7:85:38:34:2d:c7:c5:5b:a6:b8:e6:12:12:
fd:21:9c:6f:06:b5:8f:f7:9e:59:a1:93:e9:86:f7:26:64:0e:
1d:39:0a:b2:c5:c2:01:a8:b9:92:a6:b8:a2:da:10:9c:7a:b2:
6f:c0:17:03:0c:c8:4f:93:30:95:5f:30:d4:40:e1:07:b0:60:
f6:8f:6d:d2:6d:b7:fa:40:75:82:02:a8:a2:5e:1e:41:73:ec:
09:e9:89:59:4c:79:ce:41:1b:a9:ad:5a:cd:f6:d3:a5:3d:79:
83:34:de:22:7d:b0:ed:f3:29:65:16:ac:3c:1d:66:43:38:3f:
6f:c0:26:8f:eb:43:0e:1b:ec:33:99:a7:98:1f:57:8a:46:19:
a7:8b:aa:5f:0a:39:d2:f3:ee:18:66:2b:bf:bb:c3:2b:94:cd:
4a:49:14:dd:86:6d:03:f2:57:93:45:2a:d9:a3:fe:56:ca:04:
78:4d:09:76:e2:ac:52:a3:d6:f4:9d:ad:2c:3d:e9:42:2f:7a:
e8:39:3b:a9:9a:fa:69:7f:04:be:96:a9:67:67:48:a6:cc:ae:
e6:d6:85:0f:17:b7:da:af:0e:62:94:46:ff:6b:c8:3e:08:23:
aa:9d:a1:a6:38:2c:f6:0f:71:8f:6e:a6:c4:e9:16:ee:5d:27:
9d:9d:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:43 2026 by rpki-client