
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
File: 5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa (raw, json)
Hash identifier: RSv8wAqnSDh3N1Bd/RjsJEZXcMM3HgMXX5kxjEg7704=
Subject key identifier: E0:3D:44:02:1F:2E:8E:CD:A6:F7:A8:BB:DC:2F:5E:27:BE:66:89:6A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D47C4F93CB5BE7373D6084080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.238.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c4:f9:3c:b5:be:73:73:d6:08:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=0a7118d1-178c-4948-8c88-2f7d64953a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:48:e8:09:7e:41:c0:d9:d9:7c:08:8f:ab:
0b:ea:59:a1:30:23:db:dd:02:a4:2b:e4:c8:28:a1:
9e:d3:08:25:20:bf:07:7b:4d:15:47:24:ec:69:38:
d9:7d:07:35:26:9e:8a:87:6e:05:88:c2:f2:ba:52:
82:25:15:7e:8c:bf:e3:27:68:ec:c6:ba:b7:7f:43:
53:03:de:87:98:21:d0:2d:91:dc:2e:5f:14:15:10:
0f:d8:a4:b6:9d:b0:49:d6:c7:b1:62:24:47:ff:08:
71:4c:87:0b:d5:2e:8c:3b:82:dd:8e:f4:e3:bc:23:
74:36:f3:de:1a:44:dc:96:ca:cf:96:e8:2c:9d:ff:
9e:b8:62:31:ad:6c:5d:db:69:4e:a0:dd:41:b6:64:
7c:1e:35:c2:ce:f0:d0:08:45:e7:f2:55:db:7c:a3:
eb:ca:f9:64:09:2b:1e:6e:c3:00:36:47:ad:57:6b:
8a:29:1a:1a:d6:58:c9:4e:0a:b9:3f:84:4a:dc:61:
ff:51:f5:b5:0c:c0:39:ea:87:c6:74:8b:00:48:6a:
1d:30:c8:bc:59:10:5d:23:bb:8f:b1:9d:54:0c:10:
ad:e6:23:a7:7f:71:00:8c:08:b9:57:eb:d6:e1:c2:
b1:0c:c3:94:be:40:5e:7b:1b:5d:ac:db:8c:a2:f9:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:44:02:1F:2E:8E:CD:A6:F7:A8:BB:DC:2F:5E:27:BE:66:89:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.238.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f1:6b:db:ce:b3:e8:5c:f3:36:34:55:02:1e:ad:b4:52:cd:
9b:e7:46:8d:3e:1a:db:f1:a7:f6:b7:89:33:d4:90:16:f8:f7:
ab:3f:fd:ea:60:e6:4f:c3:b4:90:bf:a6:86:5c:fb:2f:2f:f3:
ed:c0:71:07:a2:f5:40:09:b0:9d:5e:82:a1:c4:9f:6f:20:22:
81:d0:38:44:c4:2b:cc:10:7f:93:9c:15:0e:4e:4b:20:c6:e2:
61:cf:be:7b:ba:11:36:49:e3:5d:d3:69:a9:b1:02:ca:4b:9a:
32:50:81:87:9a:62:93:a9:99:8a:82:4f:d6:df:73:51:2e:d0:
34:ed:7d:68:65:db:ab:7d:c3:c4:68:98:7f:5d:52:cd:b4:a5:
08:18:d4:10:63:62:2d:c4:04:58:67:12:21:9c:a4:5e:a3:5a:
4e:ae:8e:c5:11:2f:c2:77:c1:d9:ad:5b:cb:65:81:04:9f:34:
9a:a4:2b:1f:d6:f6:8f:1a:f2:d1:50:5b:46:03:0d:dd:35:32:
fc:cb:2d:6c:4e:c5:30:02:a5:c7:cb:45:da:b1:67:2f:e5:03:
d6:aa:c8:8c:d2:71:ba:32:e4:2f:76:57:80:b5:01:24:86:8c:
83:45:1e:e7:4e:10:6c:6b:11:e6:42:6a:b8:7a:3b:ba:97:be:
c9:e2:19:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPk8tb5zc9YIQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
MGE3MTE4ZDEtMTc4Yy00OTQ4LThjODgtMmY3ZDY0OTUzYThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRI6Al+QcDZ2XwIj6sL6lmhMCPb3QKkK+TI
KKGe0wglIL8He00VRyTsaTjZfQc1Jp6Kh24FiMLyulKCJRV+jL/jJ2jsxrq3f0NT
A96HmCHQLZHcLl8UFRAP2KS2nbBJ1sexYiRH/whxTIcL1S6MO4LdjvTjvCN0NvPe
GkTclsrPlugsnf+euGIxrWxd22lOoN1BtmR8HjXCzvDQCEXn8lXbfKPryvlkCSse
bsMANketV2uKKRoa1ljJTgq5P4RK3GH/UfW1DMA56ofGdIsASGodMMi8WRBdI7uP
sZ1UDBCt5iOnf3EAjAi5V+vW4cKxDMOUvkBeextdrNuMovmiQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOA9RAIfLo7Npveou9wvXie+ZolqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRkOGI1MWItOTEzZC0z
MzQ3LWE3ZTgtNGUwZTdlMjM5ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFru5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfxa9vOs+hc8zY0VQIerbRSzZvnRo0+Gtvxp/a3iTPUkBb496s//epg
5k/DtJC/poZc+y8v8+3AcQei9UAJsJ1egqHEn28gIoHQOETEK8wQf5OcFQ5OSyDG
4mHPvnu6ETZJ413TaamxAspLmjJQgYeaYpOpmYqCT9bfc1Eu0DTtfWhl26t9w8Ro
mH9dUs20pQgY1BBjYi3EBFhnEiGcpF6jWk6ujsURL8J3wdmtW8tlgQSfNJqkKx/W
9o8a8tFQW0YDDd01MvzLLWxOxTACpcfLRdqxZy/lA9aqyIzScboy5C92V4C1ASSG
jINFHudOEGxrEeZCarh6O7qXvsniGbY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:13 2026 by rpki-client