
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
File: d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa (raw, json)
Hash identifier: vA+nlEGdiAg8msEq44r0fKSlDhDxaoPZM1NJi+Tf6jQ=
Subject key identifier: 5F:7C:B0:61:05:1C:C2:DC:D6:00:1C:10:87:66:63:FF:FE:F4:01:F9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E3E5F5084E7D1A11C47DE3F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 22394
IP address blocks: 166.159.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:50:84:e7:d1:a1:1c:47:de:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=7f8ed077-d195-47a5-a344-31c51b3f2a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:84:9c:52:89:67:54:fa:e2:91:ec:d4:0b:
ba:42:57:71:d2:02:86:d2:24:c7:45:a2:24:27:85:
e7:65:f3:5b:b9:43:69:ed:4a:86:f3:9e:ca:6e:92:
f3:05:c9:87:92:06:48:6b:dd:0b:15:88:2d:20:b9:
87:a2:5d:44:d6:80:d2:78:02:48:f9:b5:a6:be:22:
16:f3:e2:2b:4d:c9:c7:a0:7e:5e:00:8a:ad:19:2f:
74:ac:6d:95:5c:de:96:b0:e3:04:77:ec:35:e5:c7:
81:4f:fa:b4:7d:eb:59:55:e0:3b:16:58:0e:48:e5:
66:95:cb:c1:38:0a:7c:e6:42:4e:b3:9d:07:47:22:
2a:47:57:0c:ef:c6:1f:c0:3f:8a:e1:0e:05:f3:2b:
97:36:de:f6:5b:91:90:9a:0d:fa:b2:09:b3:49:b8:
1a:5b:5c:7c:77:ab:dc:31:a6:c7:a6:5f:02:84:60:
5d:d7:fd:93:dd:40:20:29:e8:04:f4:3c:71:d9:47:
38:b8:18:e9:35:ef:54:32:81:ca:c5:02:90:88:3a:
18:18:ae:e0:ca:47:e8:9b:ec:9c:b4:92:22:09:e2:
34:ee:75:7b:8d:f5:76:7b:9e:58:34:7b:cf:c4:0f:
74:da:0a:70:d1:63:4f:a7:67:9d:70:c2:4c:e8:7c:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:B0:61:05:1C:C2:DC:D6:00:1C:10:87:66:63:FF:FE:F4:01:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6472c78-39e0-3ae0-b818-80c9f832f9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
166.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:5d:0f:e4:94:d7:14:04:ca:5b:36:2e:ec:7a:6f:3a:a7:f9:
0c:73:89:2d:8b:60:97:13:ee:6d:9b:a1:f4:f5:f6:0f:bd:43:
43:24:94:6e:1b:33:7c:37:7b:80:9c:bd:76:d7:1b:6e:fe:86:
86:b0:e9:79:c2:be:5a:de:23:e9:e9:c5:f0:67:9b:36:3f:15:
ac:bd:84:f6:1f:5f:f4:a3:77:af:54:34:4d:f9:56:07:ee:97:
c2:26:ea:d7:09:f1:62:1c:91:22:c3:95:8b:2f:e0:11:93:e6:
92:03:f5:2e:b3:79:bb:93:1f:e8:c1:14:22:33:b2:7e:f8:ab:
66:8d:e2:dc:6d:a3:1b:13:7e:4b:ac:d7:ef:d5:63:54:9a:fc:
22:f3:9d:a8:ee:08:f6:b2:48:47:6a:2f:f3:41:14:60:f6:4b:
ad:10:94:d1:f4:cc:83:1b:f3:22:6a:8d:06:b4:c2:5c:92:b8:
fb:9b:16:e7:d0:06:0c:28:6e:36:6e:05:0c:d3:e2:42:63:d4:
d4:66:f1:2b:94:84:57:9a:b9:19:ec:2e:20:36:48:38:8f:2a:
0b:0c:e2:cc:7b:bd:eb:a5:7c:a4:e6:46:e9:3e:3d:20:a7:a5:
7b:4d:e1:9c:dc:26:47:38:91:f3:07:91:05:9f:49:42:c3:f2:
b5:64:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:23 2026 by rpki-client