
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd631421-2a10-3f63-8070-00e7c1116983.roa
File: dd631421-2a10-3f63-8070-00e7c1116983.roa (raw, json)
Hash identifier: UYx72txJOsU3D0xQlPaG4bUoTBtHVqPHgGMPw1CFQOA=
Subject key identifier: 3B:E3:4A:68:65:0B:13:E9:FF:C6:6B:B2:4B:29:90:00:A3:B1:E5:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D386A379483574D0D4BFC2B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd631421-2a10-3f63-8070-00e7c1116983.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 36549
IP address blocks: 199.172.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:37:94:83:57:4d:0d:4b:fc:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=171ec1d4-6422-4600-b6c8-4301288c6278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:06:0e:3f:86:3e:c5:49:57:de:0f:4f:2a:
4c:f4:35:22:5b:58:9c:a6:ee:5f:35:6a:59:d7:ce:
f0:1a:50:91:6a:0e:dd:cb:b6:4a:94:d2:cf:dd:98:
17:55:1c:c2:99:43:4d:cb:d9:de:3a:e7:78:45:21:
d1:45:b6:94:81:bf:4d:ea:7c:a7:90:01:43:a1:e2:
29:8f:c5:21:90:99:cd:8c:34:a1:af:a0:8f:f8:1c:
d4:8e:44:3b:a7:fc:af:37:91:b7:6c:ce:e8:3d:ff:
7f:84:50:a7:84:d3:2c:f7:f8:54:04:b0:0b:c7:6b:
0f:9d:66:9e:57:f2:d7:c6:f2:e5:48:0d:6a:7b:5a:
91:24:35:f5:10:2c:b8:c5:0a:0b:7d:92:c8:b1:e2:
86:d4:6b:28:a6:53:8b:2b:a5:62:50:36:a4:ab:bb:
15:74:1f:66:24:66:0f:91:a6:c8:59:4b:70:9d:d8:
06:43:04:fd:39:b2:0d:da:6a:e8:94:39:be:1e:69:
cc:3b:7a:8c:2c:20:1a:9b:24:c9:b5:5f:48:92:93:
9f:27:b1:e0:20:ab:91:93:84:34:1e:00:3c:87:31:
6a:a9:75:6a:37:58:40:63:94:34:16:8a:3b:0e:b8:
a5:c1:a0:31:f6:55:fc:e0:c5:96:78:f1:a6:67:e0:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:4A:68:65:0B:13:E9:FF:C6:6B:B2:4B:29:90:00:A3:B1:E5:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd631421-2a10-3f63-8070-00e7c1116983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:15:b4:a6:10:f7:ba:9c:24:32:9c:81:10:cc:88:bb:60:7e:
45:eb:ef:5d:b1:6b:d5:b4:cc:17:37:fb:32:36:64:37:56:b4:
3e:18:6c:f6:b9:aa:93:6d:4f:5f:9d:2c:17:51:8e:50:01:38:
d9:cd:82:72:99:ef:f0:7b:50:34:4d:f3:73:4e:57:66:f4:34:
9b:04:8d:1a:70:5d:5c:ec:d0:61:89:9f:75:8e:4e:ed:7f:55:
66:a1:fa:32:50:c6:bd:98:96:17:93:0b:81:37:75:32:1f:91:
9b:d8:7a:66:53:7b:0a:b9:ef:94:59:4d:bd:b2:cd:7d:9d:9d:
82:e6:91:70:16:bc:6b:a0:49:f4:c5:05:df:a0:66:fc:b2:64:
9b:c9:ff:00:a2:dd:5f:fa:a1:d3:72:a3:6f:27:5f:e3:57:1b:
51:f7:49:af:4c:37:86:df:cc:bc:9a:e8:40:5f:aa:5f:57:64:
61:79:3a:8c:62:dd:02:f7:d1:29:ff:e7:69:f4:f1:86:5d:4e:
e5:a8:4e:33:9e:17:5a:83:47:9e:31:4b:0a:5b:3a:7d:c2:25:
00:d8:48:5c:16:38:c5:84:a4:6b:8d:1f:8c:04:5b:bb:b7:3b:
b9:ae:e8:63:f7:c7:5a:98:26:04:41:13:83:ad:b1:20:f4:03:
65:74:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:18 2026 by rpki-client