
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa
File: c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa (raw, json)
Hash identifier: Uy1tA5HeUvY/I77av9xMcsEFyMeGZ/z3FK/YBCTTlsQ=
Subject key identifier: 85:05:88:1A:A2:1E:A1:90:83:AB:2A:E6:97:D3:4F:C9:A9:92:E2:96
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D9FB5751E9CAA6F7216C4E720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 72.108.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:75:1e:9c:aa:6f:72:16:c4:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=8efc0bc2-60e9-44b1-b635-02f1725d8a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:1b:11:99:43:ef:a0:a1:d2:e4:ac:e5:b7:
04:0f:31:b1:36:a0:86:1c:b6:a1:42:1b:db:e8:da:
39:be:d5:c6:6f:df:35:a4:fe:90:ba:1e:85:ae:a3:
b8:6f:fd:dd:98:b3:04:1a:d0:89:33:ba:10:ce:aa:
50:b7:11:bd:02:f3:6b:d8:ea:d7:4d:bf:20:6d:64:
18:26:7e:fb:24:94:a6:4c:e8:64:20:4d:8a:c9:40:
03:89:23:5a:34:f1:af:a2:70:64:fe:df:42:cc:db:
de:c0:66:3a:95:f0:b8:33:40:71:57:3a:bc:53:c5:
c4:f1:32:fa:b6:49:18:81:7f:88:c5:30:5a:be:70:
7d:41:72:63:02:62:1d:e0:e3:ef:88:36:8f:83:75:
2c:94:48:61:3e:03:21:ed:0e:d5:32:b0:ce:a0:06:
86:a8:f9:68:e9:91:5a:10:45:94:8b:49:0d:55:94:
69:52:48:ac:76:02:02:cf:0a:54:3b:a0:a3:22:be:
21:31:41:75:8e:16:f9:10:28:e1:8a:35:3c:f0:7c:
64:a8:98:e4:c4:fe:fe:62:25:7a:81:6a:ee:32:e1:
a3:d6:a6:78:af:58:c8:3c:41:28:4f:40:a3:b2:03:
a5:dd:9d:26:1c:3c:33:ac:2c:fd:fc:64:fe:8b:d0:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:88:1A:A2:1E:A1:90:83:AB:2A:E6:97:D3:4F:C9:A9:92:E2:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:4d:45:04:91:1f:a6:d9:c3:d0:94:fc:b0:49:9c:30:9c:e1:
18:55:1f:7f:20:30:3b:75:91:21:76:c6:42:9c:1a:a0:c3:56:
46:b5:6a:f7:2d:b9:25:fd:80:cb:21:e4:26:03:b1:82:b3:7c:
7a:15:d7:b5:c3:68:a6:b8:2d:ef:87:a2:76:7e:66:fd:57:95:
5d:5c:0e:68:c6:71:7f:88:c2:a6:c7:0c:7d:df:79:fd:56:c2:
ad:3c:f2:59:88:35:49:4a:a9:0c:57:c5:e2:f0:3f:e6:59:fc:
a8:cd:08:fe:12:6d:b6:50:e5:09:94:c3:59:71:88:e2:8e:dd:
be:39:a4:c0:54:eb:0f:7c:9c:b6:a2:b4:2f:4e:ad:03:d0:8e:
9f:c0:7e:99:66:07:b2:8d:70:3c:5a:bc:de:d6:8c:99:ce:f9:
a5:83:6f:f2:ca:73:a4:17:7b:60:c1:99:06:31:a3:39:dc:45:
dc:fb:ea:54:ab:d4:35:39:1d:d5:30:89:f0:ed:6f:06:b9:e2:
2a:73:2a:4e:1f:7c:89:f9:9b:5d:73:51:a3:68:f9:c9:7e:64:
1f:59:ca:9e:a1:07:e8:9d:a3:8e:4b:1a:8d:83:b3:fc:5f:96:
01:8d:01:14:54:05:cf:fb:44:16:04:fe:b9:48:d6:6d:c3:8a:
66:4a:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:49 2026 by rpki-client