
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bead47d5-e40f-3d60-8fa8-3c32841bb8f2.roa
File: bead47d5-e40f-3d60-8fa8-3c32841bb8f2.roa (raw, json)
Hash identifier: GDiqykKRuz8OEjFNLCWvKWwjEJ/WKwSWe28DqSpMTmM=
Subject key identifier: 34:68:89:62:3B:84:47:2D:02:8C:A3:33:29:B8:CB:B0:0D:80:CF:0C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F331D20C2C35A0788051CA640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bead47d5-e40f-3d60-8fa8-3c32841bb8f2.roa
Signing time: Thu 17 Sep 2026 01:00:11 +0000
ROA not before: Thu 17 Sep 2026 01:00:11 +0000
ROA not after: Wed 16 Dec 2026 02:00:11 +0000
asID: 6167
IP address blocks: 174.252.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:33:1d:20:c2:c3:5a:07:88:05:1c:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 17 01:00:11 2026 GMT
Not After : Dec 16 02:00:11 2026 GMT
Subject: CN=39a45bce-6475-4c06-a9dd-31d12aa767b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:e7:f9:3d:47:ba:d8:8b:a6:26:75:27:f0:
d0:25:e0:6e:6f:95:7f:09:37:4d:cc:cb:23:2e:ed:
c3:c2:ab:af:ff:d5:17:85:8b:f9:f4:e9:0e:2c:19:
08:7f:05:09:94:39:74:1b:f8:65:07:e3:15:2e:b4:
1f:64:47:a1:dd:15:f4:f2:f6:27:93:ee:f1:53:68:
cb:8f:03:2e:68:bb:20:de:4e:c0:80:85:62:a1:13:
6f:4a:a5:54:ab:23:fe:b2:54:99:df:44:19:2f:de:
0d:4f:85:aa:cf:cd:a9:fe:f1:ab:32:06:97:a6:34:
aa:75:12:22:e6:41:8e:97:c2:b6:05:aa:f8:75:b8:
a3:7b:ea:7c:47:5c:5d:06:61:1d:dd:19:1f:dd:3d:
4a:14:5a:9d:0b:f5:54:e1:3c:d8:23:6e:aa:1c:4b:
d8:b9:3d:39:3a:be:e6:31:a0:15:cc:3f:e6:70:f5:
5e:f2:50:83:ab:7e:96:1f:74:ea:94:7b:30:de:19:
c6:80:26:40:1f:45:58:1d:94:61:ef:0d:a2:a2:19:
ea:1c:a9:d4:56:97:ba:19:be:e9:c3:bb:24:e2:0b:
45:32:64:83:21:b7:a3:ea:1c:af:d3:f3:2a:a9:57:
71:19:df:12:88:2e:14:95:ff:9a:79:f3:11:92:a6:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:89:62:3B:84:47:2D:02:8C:A3:33:29:B8:CB:B0:0D:80:CF:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bead47d5-e40f-3d60-8fa8-3c32841bb8f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.252.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:28:f5:a0:96:e4:85:99:5b:99:95:d7:1c:01:b0:29:7d:c3:
73:7e:57:64:a2:58:5b:1e:54:b1:7b:88:a1:51:b1:9f:58:cb:
c2:e8:55:89:fd:f9:98:fd:7b:0e:53:80:c6:9d:34:d2:15:94:
d8:24:e3:ea:03:a5:c7:ee:a5:94:2c:07:8c:54:06:20:5c:f4:
ea:80:da:03:df:80:3f:d0:5f:d4:2b:43:f4:9e:30:5a:cc:75:
88:94:3a:7f:7a:82:6a:da:12:13:32:0f:35:d9:66:b7:0a:b1:
0e:d3:c6:bc:af:4c:95:20:3c:ec:c0:ed:c5:9b:e9:f2:32:ad:
f6:d2:59:72:1e:01:3c:3a:df:4d:6a:3e:bd:29:65:ef:10:a6:
10:90:64:e1:27:1c:41:86:f5:23:65:75:11:38:96:ab:ea:d8:
dc:66:8a:82:69:2c:0e:ec:f8:1b:9b:4c:ba:89:af:1e:e1:d5:
d7:eb:01:51:35:7f:fb:1b:b3:81:36:a6:64:ac:70:41:00:a9:
06:9b:63:c1:66:73:8c:14:28:a8:bc:2c:92:b5:a3:ef:01:70:
50:e5:e3:14:af:c5:96:f5:86:43:16:92:d1:1d:c6:bd:b0:b3:
f3:78:d1:60:49:a3:02:3c:a2:37:1e:d4:4b:57:a6:20:d0:1c:
e5:4a:85:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:16:33 2026 by rpki-client