
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
File: a880d51c-6851-39e3-bdb9-911f86ebabaa.roa (raw, json)
Hash identifier: fzoLVrZz7kavDtyO0K203tNZkDTQPcYYnv9jMWdTNAw=
Subject key identifier: DA:F7:64:FE:45:8F:36:C0:3E:A7:7C:3E:79:8F:44:5B:9E:45:9B:A1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584DBD05CD0A9DA84B4EB05B8C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
Signing time: Wed 06 May 2026 01:00:24 +0000
ROA not before: Wed 06 May 2026 01:00:24 +0000
ROA not after: Tue 04 Aug 2026 01:00:24 +0000
asID: 701
IP address blocks: 209.158.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:05:cd:0a:9d:a8:4b:4e:b0:5b:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 6 01:00:24 2026 GMT
Not After : Aug 4 01:00:24 2026 GMT
Subject: CN=63ecafaa-fb1a-453f-bdbc-9ff3a5148b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:7d:33:25:91:15:fc:72:73:98:5b:56:4e:
ca:51:93:e8:be:48:7d:c4:10:35:ce:e7:cb:42:96:
42:68:fa:87:c7:f6:73:1b:33:c2:da:78:0d:c1:a7:
ee:63:32:68:70:56:81:04:be:26:99:84:e8:1f:2d:
91:1b:97:9c:71:cc:7c:2d:db:ab:b5:93:54:c3:9d:
50:6e:ec:30:6b:41:a9:ad:29:ec:3b:3d:32:73:e2:
09:bc:c5:e9:d0:6c:81:e5:08:f6:ae:50:7f:7f:9e:
c3:3f:c6:16:e3:41:58:de:a7:ea:63:23:92:81:c9:
61:d2:d2:59:aa:26:8a:bb:2c:c4:41:0c:01:35:60:
0a:f0:65:ce:42:78:c4:34:78:6a:1d:49:3e:6e:9a:
ab:0a:90:2f:8e:cb:51:23:c7:20:17:bb:3e:33:ea:
90:7c:18:dd:07:ce:93:b3:8c:87:16:4f:57:c2:cf:
1d:53:6b:fd:47:67:14:de:8b:91:23:cf:09:88:3f:
6f:06:a2:48:3a:a6:90:d6:ce:24:46:2f:98:89:05:
78:bc:27:ab:0e:f8:da:91:ab:6e:93:a3:51:bd:9d:
8d:85:64:af:3a:c9:be:83:f9:19:70:1c:27:29:07:
b2:d6:d1:b5:e9:c0:14:97:6b:0b:2c:10:46:ac:44:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:64:FE:45:8F:36:C0:3E:A7:7C:3E:79:8F:44:5B:9E:45:9B:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.158.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:2e:be:df:e9:66:42:db:77:fa:da:b5:3e:45:38:ff:3e:c6:
cc:81:3a:a4:fd:87:57:7d:24:0f:81:96:c2:c8:66:5f:8f:62:
47:42:fc:07:1f:5c:89:bd:20:37:5c:e2:97:8a:08:13:3a:19:
05:a5:14:e2:14:f5:d7:de:92:f9:1f:71:d9:59:56:99:df:96:
87:1f:40:77:31:41:c5:7a:e2:27:dd:4c:25:53:0a:c6:f5:20:
8f:6e:1c:31:bb:f1:98:11:26:f2:f5:ec:7a:79:eb:14:60:f9:
52:34:1a:1c:34:56:d9:fa:f2:63:29:79:9e:73:3c:c4:e4:3f:
0e:9e:ac:3b:1d:94:4e:d1:20:f0:5f:b5:30:eb:21:df:f4:bb:
54:11:2d:43:d3:fd:26:91:78:95:98:ed:87:75:69:6b:cd:87:
ed:97:f1:d6:ff:cb:a3:1a:38:d1:d6:1f:f0:71:d6:ff:70:76:
7c:47:e2:16:ac:66:4f:84:2a:e0:24:12:a8:09:ee:d0:f7:90:
d6:03:26:02:52:3e:9c:35:29:52:f1:0b:56:c6:2f:ac:60:5e:
31:70:86:bc:d6:23:48:a8:cc:f4:78:f4:eb:64:54:20:be:91:
2a:a3:f4:66:be:06:7e:67:a4:ec:0b:0a:85:ea:32:50:ee:a2:
e3:a5:16:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29Bc0KnahLTrBbjCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
NjNlY2FmYWEtZmIxYS00NTNmLWJkYmMtOWZmM2E1MTQ4YjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEB9MyWRFfxyc5hbVk7KUZPovkh9xBA1zufL
QpZCaPqHx/ZzGzPC2ngNwafuYzJocFaBBL4mmYToHy2RG5ecccx8LdurtZNUw51Q
buwwa0GprSnsOz0yc+IJvMXp0GyB5Qj2rlB/f57DP8YW40FY3qfqYyOSgclh0tJZ
qiaKuyzEQQwBNWAK8GXOQnjENHhqHUk+bpqrCpAvjstRI8cgF7s+M+qQfBjdB86T
s4yHFk9Xws8dU2v9R2cU3ouRI88JiD9vBqJIOqaQ1s4kRi+YiQV4vCerDvjakatu
k6NRvZ2NhWSvOsm+g/kZcBwnKQey1tG16cAUl2sLLBBGrERNXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNr3ZP5FjzbAPqd8PnmPRFueRZuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTg4MGQ1MWMtNjg1MS0z
OWUzLWJkYjktOTExZjg2ZWJhYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Z6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4uvt/pZkLbd/ratT5FOP8+xsyBOqT9h1d9JA+BlsLIZl+PYkdC/Acf
XIm9IDdc4peKCBM6GQWlFOIU9dfekvkfcdlZVpnflocfQHcxQcV64ifdTCVTCsb1
II9uHDG78ZgRJvL17Hp56xRg+VI0Ghw0Vtn68mMpeZ5zPMTkPw6erDsdlE7RIPBf
tTDrId/0u1QRLUPT/SaReJWY7Yd1aWvNh+2X8db/y6MaONHWH/Bx1v9wdnxH4has
Zk+EKuAkEqgJ7tD3kNYDJgJSPpw1KVLxC1bGL6xgXjFwhrzWI0iozPR49OtkVCC+
kSqj9Ga+Bn5npOwLCoXqMlDuouOlFqI=
-----END CERTIFICATE-----
Generated at Wed May 13 13:29:00 2026 by rpki-client