
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db50924-4043-3989-93d2-eb96895089f8.roa
File: 5db50924-4043-3989-93d2-eb96895089f8.roa (raw, json)
Hash identifier: kKVAgKKXzN+kp9AjLowNDEuem4/h9ZZrEpevhIZOJNk=
Subject key identifier: 2D:81:18:6E:40:FB:9D:EF:3F:72:F2:42:95:78:41:DD:E1:39:0E:40
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F497F0BDFB1C288FC9BB7E400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db50924-4043-3989-93d2-eb96895089f8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 6167
IP address blocks: 174.224.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:0b:df:b1:c2:88:fc:9b:b7:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=661f24ba-a73f-4b3e-8696-7c0d51464c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:ce:67:43:a5:19:48:50:3d:bc:a3:f9:07:
c7:a3:20:d7:5a:0f:c6:d8:b1:d0:1d:21:eb:7d:60:
c7:e1:20:a9:8a:03:7b:34:a8:a5:68:5f:f1:c9:8b:
83:e1:69:82:cd:3b:9a:31:ab:90:6c:c4:c0:98:bb:
16:2b:60:bc:c8:66:8b:22:cc:16:ba:9a:74:b7:a9:
2a:1a:71:90:bd:66:f7:a3:b1:90:45:73:1d:be:c7:
6f:ee:4e:e8:48:60:6d:46:3a:f9:cf:76:0a:78:b2:
97:65:88:ef:ef:1d:c5:fe:16:61:c9:e7:dc:8e:74:
39:40:23:e8:04:75:f2:7c:88:db:2f:c1:3b:09:fe:
ec:01:28:c1:64:91:7e:fe:89:00:c3:f2:38:cb:01:
09:de:32:17:71:4d:e5:55:01:6c:9f:c5:21:00:29:
db:5e:c3:d0:af:40:7a:af:8d:9f:78:78:cb:74:03:
29:cb:06:cb:34:86:e7:f5:bf:14:e1:f2:53:b4:ea:
cb:09:23:67:a5:10:cd:d1:06:5a:6f:5c:0d:b7:91:
a6:c8:15:68:eb:c8:fc:18:77:13:be:72:6e:92:e2:
53:43:94:a2:5e:cb:ff:c1:ae:52:b5:b4:a1:4d:99:
b0:ea:ba:75:f7:a0:6a:7b:4a:8c:04:75:0e:fb:a2:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:81:18:6E:40:FB:9D:EF:3F:72:F2:42:95:78:41:DD:E1:39:0E:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db50924-4043-3989-93d2-eb96895089f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.224.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d7:89:ee:52:d2:0a:ea:51:c8:36:33:79:02:d3:09:26:0a:
e1:d2:6a:02:ac:e8:4a:0d:ed:c6:f6:94:5e:f4:e2:25:86:0a:
4f:ee:68:06:dc:52:1f:91:2d:e5:3b:4c:18:e3:80:2b:44:29:
12:ca:81:7d:c9:b9:38:be:58:14:c5:55:97:4a:f5:0d:ab:fe:
c4:1b:94:6e:fe:56:da:69:3a:e0:58:af:17:7b:68:77:15:a8:
da:67:7d:9c:6d:ce:67:73:ab:1e:08:c9:36:50:79:b5:f6:1b:
78:56:1e:9f:02:11:39:f7:9c:4e:eb:f1:89:e6:04:bd:1c:11:
fa:30:0e:c6:70:b2:5a:7f:ad:82:53:5c:ba:ce:65:89:bc:42:
d3:c8:77:6c:e9:83:7d:5a:1c:61:ea:09:b7:ab:b4:de:b7:ed:
f1:80:a8:c2:ca:c6:cd:10:44:72:92:0b:e9:73:b1:de:8d:38:
b9:3b:04:96:14:5a:f7:c1:75:9a:e4:f5:93:3f:5e:95:1a:dd:
c4:21:f6:57:8a:b0:18:ae:e8:0c:ef:8a:75:31:ac:54:50:57:
cc:29:4f:03:f7:b3:82:31:48:49:20:38:af:78:9f:0b:51:64:
19:e4:a6:69:12:5c:1f:51:3f:c7:75:d9:98:96:11:10:df:cf:
12:95:a5:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfwvfscKI/Ju35AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjYxZjI0YmEtYTczZi00YjNlLTg2OTYtN2MwZDUxNDY0YzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCDOZ0OlGUhQPbyj+QfHoyDXWg/G2LHQHSHr
fWDH4SCpigN7NKilaF/xyYuD4WmCzTuaMauQbMTAmLsWK2C8yGaLIswWupp0t6kq
GnGQvWb3o7GQRXMdvsdv7k7oSGBtRjr5z3YKeLKXZYjv7x3F/hZhyefcjnQ5QCPo
BHXyfIjbL8E7Cf7sASjBZJF+/okAw/I4ywEJ3jIXcU3lVQFsn8UhACnbXsPQr0B6
r42feHjLdAMpywbLNIbn9b8U4fJTtOrLCSNnpRDN0QZab1wNt5GmyBVo68j8GHcT
vnJukuJTQ5SiXsv/wa5StbShTZmw6rp196Bqe0qMBHUO+6K/bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2BGG5A+53vP3LyQpV4Qd3hOQ5AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRiNTA5MjQtNDA0My0z
OTg5LTkzZDItZWI5Njg5NTA4OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHXie5S0grqUcg2M3kC0wkmCuHSagKs6EoN7cb2lF704iWGCk/uaAbc
Uh+RLeU7TBjjgCtEKRLKgX3JuTi+WBTFVZdK9Q2r/sQblG7+VtppOuBYrxd7aHcV
qNpnfZxtzmdzqx4IyTZQebX2G3hWHp8CETn3nE7r8YnmBL0cEfowDsZwslp/rYJT
XLrOZYm8QtPId2zpg31aHGHqCbertN637fGAqMLKxs0QRHKSC+lzsd6NOLk7BJYU
WvfBdZrk9ZM/XpUa3cQh9leKsBiu6AzvinUxrFRQV8wpTwP3s4IxSEkgOK94nwtR
ZBnkpmkSXB9RP8d12ZiWERDfzxKVpYU=
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:41:30 2026 by rpki-client