
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d4a30e-b4e3-3118-9b49-eded2f8e6994.roa
File: 40d4a30e-b4e3-3118-9b49-eded2f8e6994.roa (raw, json)
Hash identifier: b5+lKfLQon43CxJ8kwTnipsDR+ET2+/xgQhbzOKPysk=
Subject key identifier: 60:6D:34:84:76:6E:AE:AB:C3:D7:08:C0:11:7B:1A:B3:F9:85:FC:7F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D47C4F4598229BE1DA7F43680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d4a30e-b4e3-3118-9b49-eded2f8e6994.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.232.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c4:f4:59:82:29:be:1d:a7:f4:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=be34b9e5-5e21-4f52-8a10-5a29297340b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:ef:19:fc:16:28:13:09:d6:45:a3:85:9d:
79:71:b2:80:36:91:04:74:67:cc:9c:1d:51:f3:05:
c6:84:fb:48:08:61:51:6f:f9:d5:89:20:35:fe:37:
1b:02:d1:ce:c3:6a:45:8b:14:e0:bc:e0:4e:c3:4e:
cb:92:e2:12:38:14:68:19:ce:51:92:59:60:f4:5a:
d0:2b:e8:32:b1:5d:5f:f5:f7:bf:14:59:ea:3d:aa:
98:b9:ba:ea:9f:87:41:f4:e6:09:31:e6:a7:92:34:
e2:e1:93:8b:e7:88:66:56:60:a6:ef:10:8f:cd:3e:
4a:63:38:ef:e2:60:62:90:8e:34:8c:40:8d:83:66:
13:2a:cd:4f:be:6f:42:7f:8a:34:28:27:2c:a7:7e:
9f:62:1b:7b:3f:db:4d:9b:7a:ec:ac:83:df:ce:ff:
21:56:72:b5:c7:06:a6:aa:e0:65:99:48:ae:1a:b3:
e6:0b:68:f8:1d:79:2d:21:89:73:25:6b:af:d7:c1:
39:89:e4:ac:4f:12:63:76:1b:f1:8e:7a:9c:0e:f5:
a4:3e:ad:35:89:3f:56:5b:8e:b1:bb:c1:16:6f:7f:
fe:39:00:af:d5:18:a9:4b:f1:6f:40:a1:a5:23:77:
01:35:1c:14:db:cf:10:4e:f4:8f:4d:3b:60:65:46:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6D:34:84:76:6E:AE:AB:C3:D7:08:C0:11:7B:1A:B3:F9:85:FC:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d4a30e-b4e3-3118-9b49-eded2f8e6994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.232.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:6f:3d:b3:29:40:ff:46:a2:73:6a:95:a6:46:a6:1f:58:ad:
56:db:45:35:38:fe:3b:a0:c6:c6:ca:05:e4:03:ab:e8:f1:06:
22:46:bc:79:2f:7a:a3:28:aa:55:fb:27:52:ae:45:70:55:8b:
28:ff:0f:74:18:54:45:0d:5c:4d:c0:24:dd:6a:72:60:1b:5a:
c0:f9:66:7a:1f:f4:bd:e9:0d:11:04:f8:70:41:f0:78:6c:10:
45:80:f6:20:37:47:41:b0:2e:a8:42:d9:20:50:c8:09:4f:0e:
70:0c:d1:84:1b:fb:a1:93:1a:62:d7:84:1e:29:de:0a:7f:61:
66:17:82:23:21:54:da:05:85:f7:9c:9a:86:61:c7:1b:41:33:
95:a7:13:26:72:0e:97:80:14:77:60:7d:46:dc:23:da:62:3f:
bb:72:a4:b4:5e:aa:91:87:a5:0a:eb:16:7c:f9:2b:73:12:e1:
04:97:95:f1:ec:c9:f0:49:05:94:fa:d0:d9:e4:bd:83:53:0c:
a0:9a:36:6e:3c:12:46:06:60:a4:1a:7d:7d:8a:fe:48:17:47:
4c:87:7f:be:62:11:6e:4b:8e:a7:b6:b7:fb:38:31:51:a3:c5:
25:87:3f:b2:02:d4:4b:ac:b8:0b:06:23:ef:c4:6a:d4:46:75:
48:7d:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:26 2026 by rpki-client