
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa
File: c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa (raw, json)
Hash identifier: ARXrEapkT2s+IHj1u3/gZ40rJUfx7TdMpbE5K+LoJNw=
Subject key identifier: 7C:70:3C:1B:89:FA:68:28:D8:09:23:F7:59:5C:93:B5:57:BE:68:EE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D386A5B68E5A74AD97E3A0680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 3855
IP address blocks: 199.172.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:5b:68:e5:a7:4a:d9:7e:3a:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=704e9f19-05fc-4666-8594-0eb4f5f070b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:21:44:06:48:4d:af:8e:c7:a0:fd:4b:2f:
e0:99:6e:da:81:2b:8a:68:e5:79:95:2a:ce:f1:71:
5b:76:dc:74:92:b3:cc:02:13:89:32:2e:ac:82:2f:
f6:72:78:cd:10:c0:7b:64:a4:bf:90:cf:a6:cb:be:
62:7f:91:bd:b6:5d:6b:ab:34:bb:d4:65:85:04:ae:
8e:0b:5d:cf:b9:f5:6a:9b:5d:62:37:2f:b5:19:72:
23:0f:46:9e:d9:8c:97:60:b2:34:f9:99:d8:07:59:
56:3d:2a:c0:98:0f:e8:6a:85:12:de:ee:9f:86:8d:
0d:4a:82:97:e9:30:22:1c:a0:54:43:3b:1d:27:99:
f6:55:11:bf:d5:dd:e3:72:f9:2e:42:7b:db:5c:fa:
6f:8c:f3:4e:1d:5a:d0:fd:ff:3c:26:a9:14:b5:0a:
96:c4:42:23:3f:57:63:db:0d:69:6e:88:97:e5:8e:
80:fc:e0:a0:79:94:a6:f9:30:73:c7:83:ad:b8:e1:
ee:d4:3e:1b:de:a0:08:85:4a:e1:ca:67:48:4e:aa:
fa:49:1c:6a:8a:3f:48:63:79:80:ed:bf:0e:e1:2e:
32:19:bb:8b:a8:8b:43:02:ac:93:f3:f2:6a:dc:25:
3b:34:36:c1:1c:79:a2:39:f9:9e:2f:0b:88:8e:39:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:3C:1B:89:FA:68:28:D8:09:23:F7:59:5C:93:B5:57:BE:68:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b4:4e:31:ef:36:da:a9:c0:3c:59:c3:96:2c:3c:b4:39:d4:
86:a6:ea:e0:5c:fd:2a:79:d9:75:3a:87:8b:1e:76:69:c5:55:
ab:20:b4:1e:c1:01:d2:89:e9:65:18:43:56:9f:d2:33:6c:93:
13:39:52:f7:61:ad:9b:1d:bb:6d:47:a6:6c:d5:03:6b:08:87:
04:28:08:7d:d0:f8:7e:37:83:35:f4:9e:89:a4:28:fe:b4:ce:
6b:b9:0a:c1:89:cb:b6:dd:94:e2:6b:56:c2:46:19:dd:62:f7:
57:8a:ce:73:00:cf:6c:81:f0:fb:29:07:9a:ca:e2:1a:0a:69:
e3:b9:71:22:fc:ce:03:3a:aa:bb:c3:d1:83:e2:0e:36:b0:20:
28:bd:47:77:70:55:b0:89:0b:ad:b4:f4:7e:87:e4:35:4a:49:
36:29:ab:39:7e:0e:18:1c:fc:fc:01:e7:98:12:dd:a9:a7:f4:
e4:af:c2:d6:70:fc:6a:14:04:67:60:d4:dc:d5:42:22:83:4b:
f3:26:2a:7c:9d:02:ae:f7:ab:52:79:f1:99:11:e5:8c:1d:86:
48:09:19:46:5e:f0:32:9b:ee:e6:7e:d8:3f:10:d0:a7:30:d6:
3e:be:cc:67:f2:b7:04:49:10:3b:31:91:bf:45:c5:32:41:4b:
bf:35:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:59 2026 by rpki-client