
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957efa63-8fd9-38df-a1a7-ae426a411cd4.roa
File: 957efa63-8fd9-38df-a1a7-ae426a411cd4.roa (raw, json)
Hash identifier: Qe8d+/az6ba0GzjsuSIGFr/CxQwm7BNs8t8XZHYyqMw=
Subject key identifier: B6:D9:25:DC:14:7D:72:CF:5F:FA:69:86:CD:EC:5F:71:AA:37:CE:D6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584DBD05D3553AF76456343A5A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957efa63-8fd9-38df-a1a7-ae426a411cd4.roa
Signing time: Wed 06 May 2026 01:00:24 +0000
ROA not before: Wed 06 May 2026 01:00:24 +0000
ROA not after: Tue 04 Aug 2026 01:00:24 +0000
asID: 0
IP address blocks: 198.133.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:05:d3:55:3a:f7:64:56:34:3a:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 6 01:00:24 2026 GMT
Not After : Aug 4 01:00:24 2026 GMT
Subject: CN=a373f4e8-1558-461a-9872-ada5b274dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:6d:b1:a2:66:81:0d:9f:77:a1:f1:e6:41:
60:a5:d4:78:60:4e:6e:05:03:df:22:be:5e:bf:01:
e8:d5:2e:35:97:91:16:12:79:6d:0c:69:5e:c1:d7:
12:e3:1c:64:69:8f:28:c7:72:24:6c:2d:46:10:d9:
5e:ad:d5:36:43:e1:49:a3:69:91:76:63:d2:af:b2:
a1:a3:87:4f:6b:85:df:4c:f0:74:54:2f:34:59:29:
74:b0:a0:ae:5a:28:fb:27:7e:41:ea:95:d3:f0:12:
93:75:be:23:ae:31:19:b1:8b:c4:9f:b2:71:82:a1:
cf:52:fb:eb:e3:c8:fe:c5:87:ec:85:5a:3f:c0:4c:
e7:e4:88:35:74:ac:da:b5:e2:c4:92:d7:57:78:53:
70:f3:90:5a:81:41:ba:21:fd:1d:83:c6:15:26:02:
37:71:db:10:34:ef:e3:87:cc:37:a5:c3:9f:86:55:
49:03:fb:d0:c2:ad:fa:e3:55:29:e7:31:45:2f:69:
9c:42:5a:88:75:a1:de:5c:f8:6e:ba:df:35:93:a3:
76:bb:49:f6:b6:9f:4f:fd:7e:b8:f2:d8:a1:8d:23:
13:ab:c8:8e:9c:06:f2:f7:0f:6b:2e:a9:00:79:15:
d7:70:02:93:2d:82:8b:85:86:ca:b9:06:d5:84:54:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:25:DC:14:7D:72:CF:5F:FA:69:86:CD:EC:5F:71:AA:37:CE:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957efa63-8fd9-38df-a1a7-ae426a411cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c4:cd:aa:da:24:dd:cd:59:18:7b:3b:e1:fc:40:e7:28:6f:
c2:85:ab:ff:8c:7d:e5:71:68:f5:9d:6b:bd:00:4f:67:44:00:
79:26:f2:54:6c:b9:1b:c4:1b:21:00:78:7d:35:57:21:14:b4:
6b:8c:21:34:29:77:da:e4:27:74:44:a8:c5:ef:ed:64:fd:6e:
3a:5e:a7:3f:5f:cf:0a:6b:0d:a6:4b:ba:97:19:63:f7:9d:2c:
ee:53:f0:8c:7c:2e:96:52:85:0a:75:90:1b:62:58:fe:39:8f:
61:13:8d:69:5a:9d:9e:d6:5a:bf:c3:17:47:b7:26:6e:02:e9:
b3:fa:d5:d2:0c:6e:dc:f3:3a:ff:84:05:67:44:c0:ef:c9:81:
9a:92:09:6e:95:1a:0f:cc:4b:a9:2f:f2:b4:60:8b:e1:35:70:
c6:5f:f2:20:a6:6e:63:18:c3:19:a5:01:03:0b:9d:94:ca:28:
35:2f:5d:1c:a4:7d:cb:63:fc:e7:ae:bd:95:d5:bc:31:6d:22:
8a:92:5c:9f:47:29:7b:53:79:94:00:1b:67:68:a6:bb:0d:37:
3d:fb:5d:72:07:36:19:ad:7d:de:c8:d4:cd:7a:cc:74:de:40:
af:81:5b:30:60:8a:97:44:f7:43:c0:40:d2:14:03:94:a1:8f:
01:11:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:32 2026 by rpki-client