
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953ce00-5708-3380-95dd-20a6bd144e36.roa
File: c953ce00-5708-3380-95dd-20a6bd144e36.roa (raw, json)
Hash identifier: BUxNQhOx0SxWtl0eTL9X/dOu+pC4PHGUJCvI7USwXpQ=
Subject key identifier: 93:C4:D9:AC:81:46:D7:34:56:FC:C0:B0:4F:A6:74:D8:8F:11:F0:6B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D9FB5796408334E658B412E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953ce00-5708-3380-95dd-20a6bd144e36.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 72.111.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:79:64:08:33:4e:65:8b:41:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=58268596-0f88-4b58-a650-c968ee7498ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:1c:5b:34:98:54:57:a3:1c:91:70:4b:8d:
26:c7:de:cf:55:8e:48:76:d0:82:73:b0:ee:e8:c9:
7e:0a:31:f0:be:ce:78:04:a9:0a:08:84:ea:99:38:
74:9a:72:b8:4e:98:ef:09:0a:63:96:ec:21:23:18:
58:72:9f:3e:3f:e8:6c:7f:b3:e9:4e:7b:56:fa:8a:
f9:c2:91:9a:b0:04:d4:e9:ef:6a:de:13:57:53:5b:
e7:20:c5:ea:93:b6:36:ed:3a:76:4a:6d:b4:07:90:
66:ae:d9:43:09:51:c8:2b:51:a4:1f:d2:35:e6:22:
ca:1b:1c:b6:81:8e:8d:8a:a9:e9:73:4c:2e:ad:00:
34:5a:d8:08:94:79:cf:4c:d8:65:fe:28:14:1d:2a:
a7:57:af:8f:87:70:08:95:4b:79:a2:c8:bd:86:ca:
19:d4:f1:40:ec:0d:e8:43:b5:ba:42:33:b6:a2:48:
f0:2a:3e:87:31:c5:d2:48:40:82:b9:05:01:a7:82:
5c:69:07:da:1a:ee:4b:c1:d4:86:0e:d6:f3:42:a6:
39:c3:8d:3b:06:2a:63:a3:78:62:6d:e1:3c:cf:48:
dc:d8:9c:97:b8:71:d4:73:2b:82:4f:8b:59:af:3d:
26:82:80:7d:94:f5:3b:00:cd:47:be:bb:c2:07:00:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:D9:AC:81:46:D7:34:56:FC:C0:B0:4F:A6:74:D8:8F:11:F0:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953ce00-5708-3380-95dd-20a6bd144e36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.111.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b6:5b:8c:5b:21:ee:13:98:1f:c2:55:5e:0f:ce:19:a1:4e:
20:8f:25:fe:96:b9:5f:4a:c0:fe:c6:8c:b4:07:a8:d1:5b:4c:
35:01:7c:af:81:8f:23:c7:f1:20:8b:ee:4e:06:1a:94:47:3e:
32:83:08:c4:b8:86:8d:0e:9d:2b:de:fb:0d:51:02:e3:17:ca:
73:3b:06:02:4c:2d:c9:1b:e4:10:db:fe:c5:b2:21:88:b5:8c:
cc:48:95:be:5a:9d:14:a6:8d:3e:0c:dc:ba:ca:6a:eb:48:09:
e5:f3:72:96:cc:8e:ba:68:7c:f4:0c:b4:d0:5d:f6:93:57:8d:
62:06:68:63:ba:c2:75:fe:2b:70:af:67:3d:2e:ea:4b:a4:22:
09:38:5f:12:a4:ab:dc:bc:1c:db:5c:05:c0:4b:93:90:ae:80:
ac:3e:18:7c:a3:3b:51:92:7f:24:eb:1a:e9:0c:36:16:f1:8e:
d4:b7:8a:6c:fd:04:24:24:86:7b:13:db:ea:85:e9:b7:0e:dd:
89:e3:54:5b:70:75:9e:c5:a0:bb:de:4c:01:cf:b8:8d:5d:30:
ae:48:eb:c3:4f:86:20:8e:14:a1:cd:76:fc:0b:fe:79:be:c6:
fe:77:c5:62:46:24:27:a4:27:62:a0:3a:9e:01:c5:af:ba:55:
58:e6:26:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXlkCDNOZYtBLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NTgyNjg1OTYtMGY4OC00YjU4LWE2NTAtYzk2OGVlNzQ5OGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZMcWzSYVFejHJFwS40mx97PVY5IdtCCc7Du
6Ml+CjHwvs54BKkKCITqmTh0mnK4TpjvCQpjluwhIxhYcp8+P+hsf7PpTntW+or5
wpGasATU6e9q3hNXU1vnIMXqk7Y27Tp2Sm20B5BmrtlDCVHIK1GkH9I15iLKGxy2
gY6Niqnpc0wurQA0WtgIlHnPTNhl/igUHSqnV6+Ph3AIlUt5osi9hsoZ1PFA7A3o
Q7W6QjO2okjwKj6HMcXSSECCuQUBp4JcaQfaGu5LwdSGDtbzQqY5w407Bipjo3hi
beE8z0jc2JyXuHHUcyuCT4tZrz0mgoB9lPU7AM1HvrvCBwCtnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPE2ayBRtc0VvzAsE+mdNiPEfBrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzk1M2NlMDAtNTcwOC0z
MzgwLTk1ZGQtMjBhNmJkMTQ0ZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSG+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACO2W4xbIe4TmB/CVV4PzhmhTiCPJf6WuV9KwP7GjLQHqNFbTDUBfK+B
jyPH8SCL7k4GGpRHPjKDCMS4ho0OnSve+w1RAuMXynM7BgJMLckb5BDb/sWyIYi1
jMxIlb5anRSmjT4M3LrKautICeXzcpbMjrpofPQMtNBd9pNXjWIGaGO6wnX+K3Cv
Zz0u6kukIgk4XxKkq9y8HNtcBcBLk5CugKw+GHyjO1GSfyTrGukMNhbxjtS3imz9
BCQkhnsT2+qF6bcO3YnjVFtwdZ7FoLveTAHPuI1dMK5I68NPhiCOFKHNdvwL/nm+
xv53xWJGJCekJ2KgOp4Bxa+6VVjmJgs=
-----END CERTIFICATE-----
Generated at Wed May 13 14:26:59 2026 by rpki-client