
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d65f21f3-3522-3289-bb8f-42da32183101.roa
File: d65f21f3-3522-3289-bb8f-42da32183101.roa (raw, json)
Hash identifier: cpDDGvPIGJ9C7ItNxBod1tRo+cuXGosgmEdk9TaOQ2k=
Subject key identifier: DD:D8:D9:61:E3:D0:83:46:9E:64:2D:4D:4A:CC:36:37:4C:6B:B0:37
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D9FB57926C2D6B4A73FD1D980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d65f21f3-3522-3289-bb8f-42da32183101.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 72.108.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:79:26:c2:d6:b4:a7:3f:d1:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=58e9d400-bdac-4caa-ba1e-49e3efbb3fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:69:4c:c2:66:07:0e:76:1a:38:f1:33:f3:
5a:a0:77:60:04:df:d2:4e:70:9d:33:f3:17:27:a5:
49:b4:a1:c2:23:a6:a1:c8:73:44:87:4d:21:a9:c6:
f5:c0:40:9c:c0:eb:ad:8a:06:3a:1c:fd:00:67:81:
b7:51:1a:3f:76:d4:35:90:cb:f4:c4:8b:14:ee:ed:
65:22:7c:c4:8c:c2:52:e1:4e:e0:fa:d6:eb:57:33:
8b:5f:ee:57:77:c4:3c:0f:36:36:f4:ed:9e:b8:0c:
be:67:1f:79:8f:0a:f4:1d:5a:e8:92:fe:d0:56:9b:
30:50:dd:7a:86:b5:f7:85:25:d9:3c:47:2d:62:d3:
e4:a8:19:12:93:74:50:03:0f:7c:e0:a9:04:8e:30:
c8:6e:f8:f4:3e:4b:91:cb:c4:01:0e:8a:13:eb:4d:
57:ed:e3:b7:8a:e7:29:2e:5b:87:5d:87:7f:06:aa:
03:fd:61:a6:87:01:69:e0:28:b4:02:1a:9e:ad:92:
c0:ff:57:c3:a4:e8:6a:16:a4:b9:43:1c:53:49:1d:
00:85:ca:f8:42:ca:60:40:33:ae:23:d8:d7:f1:70:
2b:89:99:11:80:2f:9a:90:95:bb:d8:49:9d:40:ff:
ad:00:87:35:e8:fe:b1:5c:4e:39:89:ec:21:ca:ed:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:D9:61:E3:D0:83:46:9E:64:2D:4D:4A:CC:36:37:4C:6B:B0:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d65f21f3-3522-3289-bb8f-42da32183101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:cb:3a:c5:70:70:51:37:a5:f6:ec:aa:fc:34:8f:91:7c:ff:
43:7f:75:83:a4:6d:2c:ab:3d:80:2d:e0:75:e9:a7:bc:71:cb:
cc:25:d4:77:34:34:0a:cc:1e:de:f8:f5:c0:65:a3:c4:9c:c1:
19:63:5b:32:52:11:aa:96:7b:dc:c8:26:7b:de:4c:42:7b:ab:
98:5d:a3:f4:d3:03:9e:55:61:a7:8a:93:de:7f:1e:5d:f9:f3:
8e:3d:4b:b3:2a:9e:dc:36:54:51:7e:72:9d:56:0f:a2:be:5f:
ff:09:5c:54:7f:df:1d:52:06:45:89:59:4d:b7:30:1a:36:5b:
9e:44:c5:76:06:66:9f:34:77:83:54:cd:aa:87:75:3f:16:13:
24:f7:ec:4b:39:8d:5f:ef:ec:02:31:0e:1b:aa:82:fa:2d:90:
77:65:52:81:94:df:8d:5d:30:c0:d8:bd:e9:31:95:28:a5:b7:
4a:9c:1c:d5:5f:b3:f0:78:34:06:dc:63:99:28:58:d9:3d:dc:
a1:d5:7e:89:ca:7b:ca:60:67:32:19:f2:0c:b0:6b:68:6d:63:
e4:32:7d:e5:0c:04:1a:13:de:8d:a8:6e:c3:b1:c5:d3:e4:ef:
06:97:74:95:23:dd:91:16:14:7d:cc:3a:7d:c0:d2:a9:bf:d1:
a6:04:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:52 2026 by rpki-client