
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa
File: be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa (raw, json)
Hash identifier: qre76nLG80CmPajcCGxdRDLgW7Mr/tqW0ORG7Fl6Wzs=
Subject key identifier: 5A:FC:E6:D2:3A:0A:84:C5:8B:92:BA:53:22:52:0C:1D:7A:6F:55:1C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F71EDBB3EB848409E6BB2A200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa
Signing time: Fri 09 Oct 2026 13:00:13 +0000
ROA not before: Fri 09 Oct 2026 13:00:13 +0000
ROA not after: Thu 07 Jan 2027 14:00:13 +0000
asID: 16509
IP address blocks: 208.215.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:71:ed:bb:3e:b8:48:40:9e:6b:b2:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 9 13:00:13 2026 GMT
Not After : Jan 7 14:00:13 2027 GMT
Subject: CN=9ed6b457-1b4f-4258-b634-aea6106faed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:df:df:0e:cf:78:fc:3d:14:f5:ed:4d:a2:
c2:78:80:86:1a:58:b5:07:08:77:7d:eb:13:3e:23:
aa:ec:e5:bb:27:41:a0:84:02:e3:c9:37:e1:70:a9:
b3:69:d5:1a:f5:6d:17:f5:7a:bf:9e:a6:18:a1:6c:
7b:df:01:40:86:a2:9c:bb:c9:21:33:de:3d:d3:49:
3f:c3:e7:d8:52:26:b9:70:49:f4:90:9b:a3:39:45:
31:4d:c7:20:51:56:05:72:4d:e0:a5:b8:e9:34:60:
be:71:95:60:09:00:c6:0d:3f:e0:e4:1e:38:e6:08:
51:13:db:28:0c:ed:d3:13:f2:7f:fd:5d:b5:5f:e9:
64:5f:af:1e:06:a3:d1:8a:14:95:7f:06:cf:0b:ca:
ae:aa:7c:7f:a5:45:e1:ad:19:c9:5c:c8:50:b7:06:
4f:31:92:e7:81:20:1e:36:4f:f6:53:13:0b:3e:4a:
cc:6a:1e:56:4b:cd:ce:da:f4:9c:a4:f2:30:d5:b4:
0a:aa:9c:86:70:a2:0c:6e:ab:3f:64:c1:8e:8b:b7:
71:ba:bb:27:5c:c8:ba:ed:6a:80:1b:79:25:21:dd:
30:c1:45:1b:3b:4a:38:d1:7c:97:00:d2:cf:1f:7c:
28:cf:9a:73:6e:54:c7:d4:8b:5f:5e:55:46:05:f0:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:E6:D2:3A:0A:84:C5:8B:92:BA:53:22:52:0C:1D:7A:6F:55:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.215.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:2c:54:98:c2:57:29:a7:a4:1c:91:74:f5:77:e1:60:3d:a4:
c8:34:4b:23:87:20:5d:a6:2b:8d:37:2f:59:f3:2d:49:0b:c3:
01:81:de:3e:f1:63:28:f1:c5:1e:c9:e7:3e:4a:40:3f:a1:f8:
02:74:ae:13:c5:52:77:bd:7e:5b:90:e6:55:2e:33:2a:29:1c:
ce:df:61:53:e5:da:b7:d3:e2:3f:25:60:2e:47:25:e2:90:3c:
24:31:52:63:33:14:b4:13:fb:12:95:fc:62:ae:4d:f3:b3:94:
43:2e:3c:19:b5:13:15:b1:f2:82:b9:78:fc:15:6b:d2:e3:5a:
b8:6e:45:73:06:5f:c9:29:ca:fb:d1:1a:25:e6:4d:15:d8:c3:
21:9f:25:4a:1a:0a:d3:fb:c3:6f:cf:32:d4:33:90:e1:4c:c7:
14:66:52:92:fb:86:6d:28:04:67:f6:0b:05:e6:f6:4c:9a:fb:
14:d7:2d:df:c7:0e:8a:a1:25:f2:97:7b:ec:0e:10:b5:60:24:
95:51:30:8b:b9:23:0b:b0:ff:b8:53:ea:ae:14:d7:f1:ce:5e:
26:a4:9a:9a:e1:72:56:8b:70:10:07:f4:d0:46:2e:0a:4b:b1:
13:ee:64:46:d7:1a:1f:a5:e5:ca:ea:be:9e:65:da:54:32:6f:
da:0d:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:53:26 2026 by rpki-client