
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
File: 39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa (raw, json)
Hash identifier: 9uflGC4CwiV/lpIC8rWCgaJvS1LoKR2Gzy04+fDgdzg=
Subject key identifier: 3C:2C:CC:28:DF:70:9A:EA:9E:D9:A5:70:7B:69:BD:5C:33:F0:6E:73
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D20AF6A6F498D1DE1D2FF3D20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.219.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:6a:6f:49:8d:1d:e1:d2:ff:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=1943cbb2-4d54-40db-8455-dda81a480e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:39:24:dc:85:ab:1a:63:fe:d2:f7:24:f5:
c5:32:53:4a:3c:db:a3:77:27:6b:25:de:80:da:9a:
f9:59:7e:d7:cb:71:e5:b3:08:30:78:e9:43:55:1d:
29:9b:3e:1f:72:fc:63:d2:22:6e:b7:32:6f:31:ef:
69:3c:ac:62:ad:fb:53:3e:37:75:c1:8d:58:b9:a5:
ae:2d:c0:c5:89:71:96:4b:42:55:eb:32:41:9c:f7:
f2:82:df:5f:29:e7:10:d5:33:e1:e2:c2:b9:e7:56:
49:9d:4d:8e:c3:f5:0a:5b:f4:1a:fa:fd:4d:9f:26:
db:cd:9a:4a:33:d6:09:f6:70:7e:ed:05:17:52:73:
c8:64:b0:c2:c1:13:19:6d:02:48:1f:8c:30:38:d4:
81:fb:05:3f:8a:69:5f:bc:d2:e8:c8:75:28:f2:6c:
c5:2f:78:44:b4:d2:f2:3a:95:5e:2c:7c:00:42:fd:
7c:05:f6:b4:6f:c5:85:6f:f9:9d:7e:f4:55:f1:64:
04:3f:dc:8d:4e:0c:c5:92:57:27:9f:bb:6c:1f:e6:
69:5b:91:60:2a:05:11:83:04:ec:50:21:1a:13:08:
62:fd:c6:c3:5c:0c:ed:85:b3:00:91:12:f4:3d:b8:
76:bf:a6:c1:21:64:67:dd:4c:9d:2d:a6:70:6b:13:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:CC:28:DF:70:9A:EA:9E:D9:A5:70:7B:69:BD:5C:33:F0:6E:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:0f:05:4d:fe:4c:0c:0a:3c:b0:9d:81:b7:f3:1e:65:cc:d0:
cf:68:8b:b0:93:77:52:51:72:13:a6:bf:3b:bb:6a:a4:5f:2f:
d9:44:61:17:5a:02:33:82:25:71:a9:1c:c2:b1:dc:1b:9b:0d:
fd:90:e3:13:91:59:0f:7c:7e:79:aa:d3:30:66:4c:c9:97:5d:
67:4e:f3:1c:b2:9b:7b:2d:c6:2d:63:d2:16:ec:f2:fc:65:dd:
fe:ba:1a:e0:61:fd:fb:4b:6f:9a:04:ce:d3:e1:ec:5d:5b:66:
8b:88:6b:3b:f2:cf:80:f8:a5:50:1e:94:b1:66:11:65:d8:50:
1b:2d:03:c0:28:63:68:8a:c0:7e:0a:a9:70:5e:cf:17:28:16:
e9:e3:9a:93:0e:ba:5b:f6:04:c8:2f:32:b4:ed:13:41:19:f5:
71:fb:85:8e:09:f6:7b:fb:ec:fd:76:a3:99:f9:7b:d3:66:6b:
a0:74:a0:f0:36:71:f1:de:f9:3e:50:9e:16:d3:00:6f:fb:f5:
78:62:73:56:69:52:02:3d:e8:78:ab:b6:42:2f:a0:67:d3:bf:
ab:8d:98:43:4e:08:41:9e:6e:00:27:dd:2a:ab:de:e4:8a:3d:
97:b8:1c:57:8a:34:dd:9d:6d:34:3c:b1:d5:6d:d2:f7:98:e3:
0f:dd:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:24 2026 by rpki-client