
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90081a89-e843-331c-9cf8-0fd9094c066e.roa
File: 90081a89-e843-331c-9cf8-0fd9094c066e.roa (raw, json)
Hash identifier: YS5S+Wl72qbobEWLCxa2SIG8/OMlULE048slTmPCk8k=
Subject key identifier: 67:73:7B:5F:F2:43:F6:A7:DC:71:C4:41:75:20:23:36:80:35:6A:44
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D20AF6974559B0889F6AB3800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90081a89-e843-331c-9cf8-0fd9094c066e.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.219.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:69:74:55:9b:08:89:f6:ab:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=8dcdc059-0ced-4a67-823a-264cb610cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:62:ad:4f:b3:7e:a8:60:34:32:27:ce:eb:
ca:28:31:36:9e:ea:de:dc:79:9a:cf:6b:50:0d:f5:
60:0b:58:7f:41:85:57:4e:99:a9:46:94:e1:02:a4:
fc:99:2e:b2:b5:d8:60:50:60:50:ef:56:f3:ec:a0:
4b:a6:0c:26:7c:1b:b5:6a:ff:94:fc:4d:08:77:f3:
c2:b8:74:a6:c3:f4:db:a7:43:30:5f:f2:8e:2b:84:
17:50:e1:b7:c8:2f:11:c4:46:ab:c2:b4:d2:6a:b9:
5e:d4:25:ca:0d:16:b1:50:86:1d:35:3e:64:9b:65:
69:bd:78:ab:81:5c:38:5e:2e:b2:33:cc:f1:08:64:
eb:62:38:b1:92:fa:a6:bc:8b:84:3a:9d:89:4d:e5:
c7:e8:df:c2:17:b6:35:7b:d7:82:f7:ea:5f:72:62:
61:95:b5:e0:71:a4:8c:3a:ca:77:5f:63:e6:c3:dd:
1a:d0:29:5a:cc:b8:69:31:06:1e:eb:c5:e0:bd:cd:
4d:30:c3:b1:0e:a6:9b:0a:61:c2:24:73:62:41:8b:
69:72:d6:17:b1:8b:f9:f5:c2:cb:4d:5b:c2:e9:8c:
af:e0:ca:1c:8e:2c:aa:3c:05:7e:85:3c:c5:cf:ea:
75:e5:42:5e:91:40:d2:00:ed:10:ef:83:bf:7d:b1:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:7B:5F:F2:43:F6:A7:DC:71:C4:41:75:20:23:36:80:35:6A:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90081a89-e843-331c-9cf8-0fd9094c066e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.219.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f7:02:1a:5f:8e:1e:d6:5f:6d:f5:fe:b6:94:2f:81:13:b5:
7d:db:b8:be:c8:a6:d4:dd:0c:8c:ea:dc:6e:dc:7e:b4:7d:35:
7d:a6:7b:6c:e7:7c:ba:46:53:37:ce:b1:1d:60:af:a7:71:d4:
95:16:12:82:0c:28:a9:d3:f5:dd:80:bb:fd:c7:7b:3f:da:a7:
66:a6:5a:e7:de:f0:d1:b0:45:7d:15:84:15:a2:05:7e:68:2a:
f5:22:3c:db:03:75:8a:18:17:1f:a6:28:a9:21:5c:19:b4:30:
e1:d8:e8:a5:70:4a:43:3d:47:2b:d5:3c:e8:21:2b:db:9e:92:
0c:53:30:6d:23:b6:97:14:8d:02:47:f4:04:78:0d:49:9c:07:
d5:c0:66:54:f2:d0:cd:0d:ac:4b:04:6e:fd:d7:a4:69:ee:37:
2d:06:71:63:e5:72:d3:56:68:c3:99:e2:4c:a1:85:d1:a9:3a:
2e:75:d8:47:01:3a:d9:d4:38:fd:20:c2:7b:b7:4f:5b:e2:d1:
aa:e9:22:2d:ec:99:cf:83:7c:25:51:78:cd:2f:85:e6:6d:e7:
19:00:a7:1d:79:49:a1:21:b7:2b:35:12:0f:6b:3c:97:3b:e9:
96:e5:dd:df:44:3c:f2:ba:83:f1:c7:84:84:93:23:44:7a:f0:
53:a0:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:04 2026 by rpki-client