
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bae32b99-7133-377f-b0fa-238b6ddaa808.roa
File: bae32b99-7133-377f-b0fa-238b6ddaa808.roa (raw, json)
Hash identifier: jxigF6SRWvxUqZrgaXnc60l6tMI4gtpbBO6uw1BPkEQ=
Subject key identifier: 3A:F9:65:FC:E2:9C:B3:13:08:E4:9A:5D:24:B2:9E:79:4D:E5:D7:A7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E4559F647CBE786AE57F17E20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bae32b99-7133-377f-b0fa-238b6ddaa808.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 701
IP address blocks: 216.112.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:f6:47:cb:e7:86:ae:57:f1:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=372cafaa-c75d-47dd-9d0e-755944a0ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:a6:b3:39:5c:9d:3e:6a:47:51:3b:25:9e:
62:aa:e0:1a:5f:54:2a:f7:b2:6f:7a:c5:6e:26:ad:
a3:f3:ad:aa:9e:91:b6:a8:57:e6:f9:3b:52:b8:0e:
7e:c2:1b:fc:9f:e8:17:dc:22:f7:5e:e3:81:e3:37:
d1:a8:23:95:bd:cc:29:bd:d3:9a:c8:ad:17:0e:55:
8e:a8:6d:9f:57:48:ac:22:7b:1d:56:c5:a3:36:81:
83:d7:c7:fd:a9:59:5c:ac:a0:65:8e:17:0e:cb:4c:
53:65:94:30:c8:35:df:b8:3a:8e:09:e4:17:a5:b5:
17:d0:64:ab:2b:8f:19:67:b4:00:98:c9:a4:c1:67:
6c:db:d4:b9:06:18:4e:f1:a1:25:0f:9a:b5:22:3b:
9f:93:c5:06:e1:33:72:48:2a:55:67:62:ef:d3:b2:
2c:08:dd:07:33:76:ae:20:3e:62:39:a6:85:41:97:
a2:46:7e:4a:91:e7:d4:43:6f:9f:47:f0:45:43:00:
9f:da:11:fa:a0:0e:81:0b:c4:ee:25:e5:b7:af:58:
17:7d:27:7c:ec:b4:00:d9:e7:b9:0c:9b:cc:51:72:
cd:0c:d1:a7:fa:5d:6c:f1:9f:74:13:87:04:61:73:
60:89:4d:00:4e:56:e6:ed:7e:5f:df:e9:7e:c1:b4:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:65:FC:E2:9C:B3:13:08:E4:9A:5D:24:B2:9E:79:4D:E5:D7:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bae32b99-7133-377f-b0fa-238b6ddaa808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
216.112.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d7:58:be:73:11:7b:8d:b4:ad:a6:99:3d:65:be:7c:8b:e7:
8f:0e:8d:d0:17:5a:ad:01:fc:81:94:05:01:84:25:3e:2e:02:
5a:4f:a0:c4:02:b7:12:67:82:10:cf:42:73:74:98:cb:a4:6a:
ce:9a:a6:4c:b7:57:f0:cc:a2:1d:0a:67:c1:2a:47:04:79:81:
6d:68:19:1b:61:00:04:bd:84:80:cb:30:ed:97:89:d0:16:72:
87:6f:1b:bd:92:64:9a:d8:78:c6:3a:08:0e:85:c1:6b:c7:21:
8a:27:92:05:6a:e1:0c:b2:84:35:6c:b3:57:cb:0b:56:fb:dc:
f4:10:0c:48:c1:7d:c7:d0:62:6d:6d:d1:3f:61:a5:4b:37:bd:
be:ab:bf:c4:ff:95:10:8f:63:ac:5f:3a:6a:90:8a:1f:b2:4d:
26:51:6d:0e:b1:46:4b:49:73:4b:a2:17:1f:18:77:a8:00:d2:
95:23:21:be:c1:6a:d2:32:e4:f6:6f:7a:f4:6e:ee:05:1f:33:
17:a8:6d:0d:49:0e:0c:7b:0d:fa:70:73:a5:dd:8a:d4:b9:2a:
f4:d0:05:3b:83:6f:b2:ae:8c:50:ec:73:94:6a:81:b3:9e:be:
e3:8a:53:14:f1:71:d2:f2:62:36:f9:d2:24:f9:b2:f9:f5:67:
e4:62:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:37 2026 by rpki-client