
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa
File: 7405a99a-393f-3196-80ba-b4ad1406ad44.roa (raw, json)
Hash identifier: GAI4A29AerY9n6GHlgELRdUikozpOg0gXz47ZPM4jMw=
Subject key identifier: 77:18:DE:57:A0:3F:10:ED:3C:37:0E:00:B1:C7:72:72:9D:61:FA:61
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584DBD05CC09B4F8D9ABD017D680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa
Signing time: Wed 06 May 2026 01:00:24 +0000
ROA not before: Wed 06 May 2026 01:00:24 +0000
ROA not after: Tue 04 Aug 2026 01:00:24 +0000
asID: 701
IP address blocks: 138.89.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:05:cc:09:b4:f8:d9:ab:d0:17:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 6 01:00:24 2026 GMT
Not After : Aug 4 01:00:24 2026 GMT
Subject: CN=564e4638-b7bf-4295-9e78-d3a08d373151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:49:ca:06:de:68:a0:89:89:85:6d:e2:68:
bc:94:a9:8a:2e:1c:13:39:8b:d3:85:21:67:61:11:
88:a3:d7:a7:bf:57:2a:38:a6:2f:57:9a:23:ed:f1:
35:91:a5:41:f2:20:1c:ba:f0:3b:3e:ed:56:07:b5:
80:2d:77:6d:b4:46:50:fa:a6:7b:d6:eb:a1:60:75:
6d:1e:cd:4f:a0:24:8e:57:a3:69:b6:fc:4d:3f:36:
1e:48:f3:b7:43:76:b9:97:cc:d7:7d:d7:3a:28:39:
c7:bf:bc:a3:a4:5d:d6:34:6c:48:d6:72:38:a6:83:
f3:db:12:0b:30:1b:e0:e1:cd:e7:f2:fc:1c:91:9e:
cb:75:ad:f5:ee:a2:48:ba:5e:42:e6:50:31:35:11:
af:13:6b:a9:0e:99:7b:e1:bb:de:45:43:1c:99:73:
75:80:9f:dc:bb:50:71:06:2f:22:ad:49:0f:cd:0d:
5f:f3:92:9a:d0:5a:a5:d5:59:58:dc:d3:25:a0:6e:
a5:f1:d5:32:a2:4a:1a:4c:b7:83:18:7b:75:09:a8:
f6:22:52:4e:7a:55:72:62:75:f4:da:3b:3a:42:2f:
90:a6:0a:c0:69:a5:f4:e4:cb:d6:c4:78:7b:d3:bf:
9c:75:1f:4c:da:38:94:a8:6e:65:94:11:77:5c:f1:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:DE:57:A0:3F:10:ED:3C:37:0E:00:B1:C7:72:72:9D:61:FA:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
138.89.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:61:c3:33:d9:91:7c:58:15:05:33:82:57:f0:25:c7:12:a9:
4e:f5:c3:b4:a7:7e:0e:76:b1:d4:2d:05:e9:42:40:76:86:f8:
dc:a0:02:f5:5b:36:97:07:e2:aa:33:0a:ff:a7:e0:1c:a0:06:
74:b1:f9:c6:e0:cd:51:54:41:1c:9e:e2:ab:3c:cd:62:0d:20:
9c:fe:67:4b:5d:85:a1:c6:86:46:14:6e:a5:93:af:32:03:67:
2a:f0:08:04:40:9b:39:1c:c8:ff:73:4d:a6:03:ca:40:a1:89:
49:77:a9:84:88:f5:2d:bf:18:62:2d:e1:ff:eb:b8:72:6d:d0:
31:23:a6:e0:17:b1:97:81:0d:91:4e:8e:fa:51:aa:76:41:61:
9b:7f:07:74:83:1d:1d:4a:ae:ba:e5:fd:c5:16:77:42:68:6a:
e8:40:cd:bf:d4:79:d8:69:83:02:d5:57:05:b8:03:2d:a4:9c:
62:c5:06:29:db:31:33:c9:f0:61:50:1d:fd:8c:20:99:b0:ca:
79:e3:9d:0c:24:ed:45:1b:fd:48:6f:16:9b:d4:84:7f:17:47:
d8:78:80:43:dc:54:c5:b5:9a:78:b9:ca:fb:b3:a4:12:3e:6d:
45:7c:6a:08:77:c1:2c:9a:f5:24:72:c8:5d:b6:5a:52:c8:70:
49:7b:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:09 2026 by rpki-client