
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa
File: 3c271c2f-5fb4-307b-8972-821df3f14259.roa (raw, json)
Hash identifier: wbPKwujeLkEMhHVdO89FTkLnjfW223SZ7stUvbf5hJk=
Subject key identifier: 3C:0E:2B:E1:D4:4B:B5:DF:CE:2C:41:FB:6B:4B:3A:7A:F8:83:65:14
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E54B4D74D9C326488D2205C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa
Signing time: Mon 29 Jun 2026 09:00:12 +0000
ROA not before: Mon 29 Jun 2026 09:00:12 +0000
ROA not after: Sun 27 Sep 2026 09:00:12 +0000
asID: 701
IP address blocks: 108.34.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:b4:d7:4d:9c:32:64:88:d2:20:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jun 29 09:00:12 2026 GMT
Not After : Sep 27 09:00:12 2026 GMT
Subject: CN=64dd1b58-bf43-407f-b6fa-ffbee5768660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:e1:ac:9b:16:da:c6:e7:2f:31:da:66:f5:
bf:97:37:59:84:ec:2e:d5:60:de:12:d4:de:07:61:
a6:d3:7a:d4:cc:93:e8:07:b3:75:b6:ae:cd:6d:28:
b0:c9:38:6c:40:a8:50:94:8c:99:89:af:f3:ac:d8:
8c:ab:63:82:f2:0e:3a:6d:92:be:fd:74:79:97:3b:
9f:b5:bc:54:ef:23:a6:df:15:9f:04:59:eb:b0:97:
5b:83:c6:d1:bc:f4:27:43:9b:0a:33:a4:a4:6e:5f:
c0:82:15:41:18:4f:c6:09:94:e0:e0:7f:c4:a8:2e:
87:5b:8d:08:e1:44:35:fd:c6:00:7b:7a:46:f1:7d:
7d:92:09:fc:92:2d:bf:b1:33:82:b8:76:68:1a:68:
bd:41:ec:97:4c:81:3a:f9:c6:b8:10:a6:b2:64:8b:
91:5a:be:5a:99:5e:61:ef:ea:c4:45:5b:7b:69:e2:
8c:95:bf:f9:c2:5f:da:47:aa:31:44:14:da:6d:bf:
5a:ae:6f:2c:1d:a7:cb:3e:41:ca:e5:69:17:26:10:
c0:67:aa:87:a7:17:ee:0e:b9:a4:b1:f2:1b:d0:95:
aa:ff:aa:67:96:fe:41:da:18:b2:99:2d:35:71:5b:
0f:40:86:87:2c:28:28:1b:9e:76:da:5f:bb:ba:b2:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:2B:E1:D4:4B:B5:DF:CE:2C:41:FB:6B:4B:3A:7A:F8:83:65:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.34.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:b9:68:ef:26:dc:64:f5:c8:1c:d0:90:18:d9:df:9a:b2:81:
42:ba:37:e7:6e:e2:92:ac:88:0c:de:a4:0b:1f:1b:8b:cc:e7:
62:7a:23:91:b7:fe:f4:f6:ad:4f:44:43:58:dc:7d:39:4e:ac:
ba:1f:01:25:66:12:7e:70:18:c6:91:97:1a:d1:68:66:a5:ba:
55:fd:78:da:00:62:3a:93:1d:88:ca:1d:88:f5:ae:42:4c:5d:
23:c7:47:99:67:70:98:d1:8a:ba:81:36:5a:f7:cd:7c:fe:8d:
ea:63:d6:ca:01:e4:3c:c5:d5:55:a5:47:40:58:75:36:00:fd:
10:d6:1d:6b:56:9c:8f:b4:37:de:cf:f6:bc:f4:2f:6a:72:79:
5f:dd:a4:a3:c5:27:93:4a:f5:b5:46:3a:59:5c:36:d0:1f:bb:
76:bb:66:9c:08:87:b5:56:fa:b7:5b:a9:c1:d1:25:8e:91:4e:
d8:bc:98:b1:75:03:41:66:c9:57:e7:37:5a:90:41:ef:cd:f2:
9e:d9:ea:7d:6b:a9:46:85:f3:ea:84:a2:cb:d6:81:05:92:62:
49:4c:5b:5d:be:59:af:8d:fa:6c:d2:a5:f8:dd:d9:ee:4f:90:
bd:58:d8:9c:63:4c:3e:a7:89:74:97:88:f8:70:d7:01:a2:33:
46:d3:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:39 2026 by rpki-client