
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b761a739-fa82-3612-8854-8213cf2b3d24.roa
File: b761a739-fa82-3612-8854-8213cf2b3d24.roa (raw, json)
Hash identifier: CyFH9QWhHA4Sdxm8IZHDin3N5tEE4fhiTBs+KQONbFM=
Subject key identifier: 68:37:8B:50:5F:D6:15:E5:B0:14:6B:45:09:E6:8C:77:47:AA:21:D2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D20AF6F8D0223006B00BFC680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b761a739-fa82-3612-8854-8213cf2b3d24.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.196.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:6f:8d:02:23:00:6b:00:bf:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=4970e629-9ef8-4291-8a16-92eeab9a50ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:d8:1c:21:02:73:b2:97:f0:7d:b1:71:83:
a4:63:ad:03:20:4a:99:1a:01:72:bf:50:ef:8c:6c:
eb:2d:da:46:e9:b7:f9:ee:96:40:63:5e:d2:9d:4f:
31:bc:1f:ae:18:d4:59:6e:f4:c4:e4:98:f5:c1:64:
94:47:f7:55:e4:af:a6:22:ed:7a:90:5a:9d:b9:29:
26:26:9b:ec:ff:b2:fd:22:15:f9:0c:5e:88:42:3d:
a8:11:1a:77:dc:73:42:ab:d4:6a:16:d1:be:2d:79:
c5:9f:95:28:72:61:53:47:ec:0c:e3:85:e4:39:6e:
72:9c:09:df:ca:20:bf:de:ca:9e:c5:65:65:63:86:
3d:79:20:bd:f3:ab:36:40:99:b4:dc:84:6f:85:80:
60:a2:4c:03:99:a6:fd:c3:7c:13:ad:e4:52:df:f3:
6e:65:f6:cc:f4:35:d6:43:f9:e8:61:34:1b:04:19:
11:10:04:ee:52:15:ed:18:75:ba:14:c9:f1:03:32:
4d:aa:f0:3f:7d:76:26:1c:25:a2:61:4a:48:f5:03:
a1:34:4a:04:64:8c:37:26:d8:1c:f5:41:3b:9b:65:
e9:e5:93:46:f2:25:2d:e9:75:67:9c:9d:64:37:bd:
12:8f:85:6a:69:3b:18:cb:8d:64:35:60:99:3c:f2:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:8B:50:5F:D6:15:E5:B0:14:6B:45:09:E6:8C:77:47:AA:21:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b761a739-fa82-3612-8854-8213cf2b3d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.196.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:5b:fa:52:d5:60:21:49:55:c8:32:4e:69:50:b5:6d:39:a9:
57:12:98:e2:fc:3d:ef:a8:44:c6:66:72:15:7d:80:14:19:6b:
1a:e0:d6:51:3d:77:e6:6a:f7:18:dd:f5:ff:da:ac:c7:2d:00:
60:02:dc:35:47:b1:f2:7a:00:57:66:60:d1:99:34:07:40:e5:
07:29:5f:75:2a:6b:fb:ee:94:83:3d:b8:79:92:1a:aa:93:20:
53:81:1f:ee:92:50:77:61:a1:ce:13:90:73:7a:8e:05:ee:4c:
65:65:28:d2:3e:c8:5d:de:30:68:77:ba:89:56:bd:08:ae:3c:
6a:8e:17:1a:15:2f:3a:68:4f:dd:64:33:20:7c:af:48:83:ee:
0d:53:b4:69:85:08:39:9f:ba:42:6d:23:5c:71:ee:26:fa:52:
da:5e:2f:c6:1c:37:24:e7:a7:76:ff:4f:3a:d3:9d:07:42:f9:
8e:2d:be:4d:85:35:42:47:08:de:90:94:bd:df:a5:91:30:54:
77:75:26:e4:ab:ec:14:88:42:13:5e:f3:c8:35:ff:bc:ac:9a:
97:37:2b:2a:cd:30:65:5c:2e:ec:27:17:2f:26:3d:bd:ea:2e:
1b:91:56:d7:69:47:df:d3:86:6d:f5:5a:16:35:58:7d:11:77:
be:26:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:53 2026 by rpki-client