
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa
File: aa02fca3-26d8-3669-8782-539da2332fb0.roa (raw, json)
Hash identifier: jHpHPPpACtV2lgXz+c4xlr36raXH79c2qXaRWDTjs+c=
Subject key identifier: 58:30:D7:FE:04:BD:7D:21:08:92:4F:DF:77:C7:17:05:C8:A1:AB:51
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D9FB5811F438D04CEFB48C180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 72.107.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:81:1f:43:8d:04:ce:fb:48:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=3dc4d538-eb60-413b-8e1f-d3d61d003b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:1b:96:84:3f:e1:2c:7c:88:3a:46:62:15:
cb:bc:39:a2:78:1f:e6:1c:74:1d:7d:07:8e:dc:59:
32:42:97:e4:ff:33:82:da:1c:b7:ba:af:25:2a:af:
9c:3a:5a:c1:c4:30:a7:29:26:da:5d:41:92:b9:92:
56:4f:32:d2:ff:22:5f:83:a7:19:a6:26:b0:80:d0:
2a:a1:1f:c8:22:42:6c:24:7f:4a:29:9d:d0:5d:fc:
58:23:5a:32:3d:58:12:f4:fd:5c:74:a9:6f:2f:e6:
7c:a3:2d:4f:b0:28:73:86:91:fb:e7:1b:27:0d:19:
ab:72:02:04:a2:31:5c:3d:f9:74:f6:8a:88:42:72:
70:21:ec:d3:f8:c5:a8:f0:78:f6:c8:f1:a3:1f:0f:
68:4b:19:37:60:90:3a:9a:af:08:94:fb:47:73:90:
39:a1:33:1a:c2:c6:20:85:9b:35:79:6e:13:9f:2a:
94:ee:c9:d1:2d:68:15:97:ee:14:19:0b:17:aa:05:
38:29:58:0e:74:5e:c3:7f:cd:e1:d2:d9:4e:ec:57:
e9:b9:c0:ba:07:80:c2:8b:d0:54:7c:dd:93:a6:07:
76:5d:55:bf:e1:b1:c8:11:98:d7:05:50:b5:fd:c4:
26:bd:ce:df:08:3d:91:f1:06:f6:3f:fb:9d:ea:6c:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:D7:FE:04:BD:7D:21:08:92:4F:DF:77:C7:17:05:C8:A1:AB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:14:55:d8:54:d2:93:7d:60:5f:4b:31:dc:7f:16:46:ee:35:
38:ae:96:53:96:dc:f9:23:86:c2:ec:7b:a1:6e:a0:c3:7e:48:
4a:a3:4c:f5:74:ff:46:fb:ce:2c:e9:86:4b:8a:0c:ea:9d:45:
ba:fa:97:09:88:ed:59:88:b4:fc:40:04:91:34:2b:69:49:db:
43:8c:85:76:90:c0:0e:0c:28:f3:16:0a:4a:49:da:62:16:6d:
04:00:2e:ad:14:c9:d6:f0:89:c8:8e:d1:65:87:af:85:1a:f2:
b2:94:ee:39:5d:4c:69:19:d6:ef:97:05:61:05:c9:93:a7:48:
7d:88:29:83:35:7e:18:85:e0:c4:cb:39:9b:41:a9:2a:ce:7c:
92:51:d3:98:61:83:5d:af:b4:72:86:de:02:7c:fa:9a:14:30:
1a:46:33:db:36:9e:86:23:79:3e:21:f8:a3:e0:93:0f:16:99:
f7:d7:ca:a6:4c:cc:37:0c:8e:a6:d0:8b:5e:e2:46:da:31:2c:
3f:1b:15:1b:05:2c:c0:a8:a8:5b:dc:55:21:6e:01:6f:2d:28:
a1:df:97:65:a4:76:39:23:3d:70:53:a6:1c:1f:cb:af:19:1e:
a6:9d:a3:a8:c4:71:10:47:d2:48:a1:ae:e4:33:ac:1b:4a:26:
e1:b6:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:41 2026 by rpki-client