
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85d2b320-42a7-3180-901a-9854a016a4cd.roa
File: 85d2b320-42a7-3180-901a-9854a016a4cd.roa (raw, json)
Hash identifier: ZxguQ7glrhj1fku5vB8wfkIhpDlmEOaUlcJijJntRfQ=
Subject key identifier: BC:CA:95:AC:36:98:C2:E9:10:96:E8:D6:8D:1B:DF:DA:A5:90:E1:03
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E4C5493A211D503D5CACC3280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85d2b320-42a7-3180-901a-9854a016a4cd.roa
Signing time: Fri 26 Jun 2026 09:00:12 +0000
ROA not before: Fri 26 Jun 2026 09:00:12 +0000
ROA not after: Thu 24 Sep 2026 09:00:12 +0000
asID: 701
IP address blocks: 71.246.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4c:54:93:a2:11:d5:03:d5:ca:cc:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jun 26 09:00:12 2026 GMT
Not After : Sep 24 09:00:12 2026 GMT
Subject: CN=146ffff6-33c8-46df-9b5d-73babdcb0025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:ac:5a:ac:8f:d7:47:ec:d4:d8:8d:39:a7:
8d:bd:52:53:28:26:67:85:a3:4e:2b:63:46:1a:58:
db:ff:5e:59:a9:31:07:27:6f:ee:e5:75:bc:e9:1c:
20:f1:9e:48:b5:a0:6e:2b:b2:a4:05:bb:62:08:3a:
c5:ea:85:54:a2:24:2d:e0:9f:fb:70:71:d3:5c:d1:
ca:2d:39:f8:fd:02:fc:7c:af:eb:3a:cc:bd:d7:d1:
cd:d1:b6:00:35:09:92:78:c9:d0:14:ba:47:19:56:
bc:ac:21:b2:26:4a:16:2a:d1:48:24:8c:88:13:cd:
e7:14:63:5e:86:ef:26:1c:aa:0e:c9:9c:3d:42:d1:
60:25:b1:f9:cd:93:6a:e2:9c:55:7b:15:ae:a3:0b:
b9:11:f0:bc:5b:86:3f:62:51:5d:86:3e:18:4b:1b:
6a:b4:0f:b2:31:5c:4c:a1:cf:a3:97:73:fa:7b:c7:
9d:f5:33:d0:f8:a8:55:7f:da:e0:aa:1e:0b:ce:db:
c9:90:f6:27:e9:e8:68:cc:db:ef:a8:e9:d9:67:cf:
4a:0a:a2:9c:4d:19:41:56:56:e5:8f:1a:41:48:fe:
fc:3d:d9:04:ec:8d:c6:ec:f8:ad:8a:6f:ac:1c:9e:
ef:1d:c3:81:62:f3:93:9e:d4:27:8d:5f:96:46:c9:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:95:AC:36:98:C2:E9:10:96:E8:D6:8D:1B:DF:DA:A5:90:E1:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85d2b320-42a7-3180-901a-9854a016a4cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.246.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:37:06:55:19:96:29:c5:af:06:7b:10:7b:00:c5:0f:64:4f:
a7:ca:61:77:c7:08:3d:d9:fb:4b:dd:5d:a0:77:d9:a0:95:1e:
03:5c:a0:ac:f5:4b:ea:2d:41:b4:6a:2e:b4:41:04:16:4f:b1:
c0:e3:90:58:86:c8:68:b6:61:3f:2b:bb:c6:a4:74:35:83:fd:
68:b7:62:3b:b0:1b:24:ce:85:eb:35:9b:6f:6e:3e:8b:ce:80:
28:1c:5a:ef:83:4a:de:63:14:8b:68:d6:ec:41:8f:74:11:e2:
79:cb:66:dd:8d:ff:77:71:04:d0:22:92:2f:74:d4:ce:c8:f6:
a3:8b:a9:ff:62:60:ce:dd:a9:14:a1:22:aa:d7:15:ac:79:1f:
47:af:20:e1:53:54:3d:be:10:63:46:52:6e:3e:d9:52:69:70:
78:2a:ce:fa:4f:eb:21:83:12:22:1d:f3:49:d1:0a:e4:b3:5e:
38:cf:82:0d:98:6f:a0:bb:51:39:96:c4:f2:29:cc:bb:d1:46:
b0:b8:08:2b:61:5f:71:0b:b6:ba:82:4c:5e:1f:f2:47:f5:f2:
b0:99:e5:68:3d:2d:03:f7:87:df:52:9a:21:60:da:75:0a:be:
fe:53:f8:bd:f3:b4:d2:1d:84:4c:d8:29:d9:c1:39:65:e7:b1:
84:8c:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:27 2026 by rpki-client