
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac720c7-073a-3d21-ae4f-368982a86b7f.roa
File: eac720c7-073a-3d21-ae4f-368982a86b7f.roa (raw, json)
Hash identifier: t9/xFzKOAQZjAqe9El9rLvi8wjjqtXA6gnTk0mOBlyQ=
Subject key identifier: 26:7F:36:30:93:07:A7:43:38:64:C2:C7:9E:C9:EB:48:8A:B6:16:9E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D20AF718755ABABFD92749900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac720c7-073a-3d21-ae4f-368982a86b7f.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 6167
IP address blocks: 174.211.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:71:87:55:ab:ab:fd:92:74:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=b191baa4-2594-4f39-b0c6-a6b1d8ab0ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:b2:6d:9c:2d:e5:b5:84:6d:45:a5:c3:16:
d3:01:64:3a:8c:a2:16:91:44:d5:d1:b3:b1:0b:12:
f9:b9:d2:df:ea:20:7b:0a:c6:83:45:06:ee:dd:50:
e1:4a:d2:2a:0a:89:16:17:c9:0a:75:3e:de:64:02:
e3:be:3d:c9:af:c3:35:bc:43:89:05:0f:ee:ca:62:
87:f5:e5:a3:fa:d7:ed:8b:34:74:6a:36:47:74:05:
ed:7d:5c:68:c0:4e:4f:e1:d3:c9:48:a0:1c:c8:2b:
0f:3f:17:83:3d:42:5f:c0:94:6d:aa:48:fa:d3:74:
ae:00:09:a2:00:67:96:18:a3:9b:cf:9d:e8:ad:94:
a7:e6:0b:5f:9f:c8:85:94:f1:8c:93:d1:e5:16:5a:
15:5d:7a:a8:cb:3a:b5:9e:3d:e8:b5:af:aa:79:f4:
d7:7e:20:ca:63:b8:cc:e1:2c:f3:f9:bf:55:32:cf:
cd:ad:04:84:0e:82:c4:6a:22:e2:a5:a5:e8:d6:e3:
c1:c6:80:25:cb:03:30:8c:45:b0:b7:67:b2:f7:30:
91:4c:c2:1f:b3:b4:49:98:fa:ac:ad:60:4e:a9:71:
de:01:60:80:57:a4:22:13:c5:0e:d2:fe:1e:99:3d:
e2:59:29:5f:71:16:5b:a0:c4:2b:26:80:a8:98:82:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:36:30:93:07:A7:43:38:64:C2:C7:9E:C9:EB:48:8A:B6:16:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eac720c7-073a-3d21-ae4f-368982a86b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.211.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:95:88:93:4c:d1:78:44:b6:9e:ab:de:3c:de:a8:8c:c0:e0:
51:74:ff:a9:41:56:c0:2e:50:da:40:3e:df:e2:00:fe:35:77:
4a:dd:28:59:a8:bb:3e:8c:d7:6f:09:31:77:be:85:38:9e:51:
51:88:23:62:ab:6b:72:19:7a:09:eb:2d:04:70:20:0b:c3:7b:
e1:37:35:30:fd:82:47:0a:65:85:11:58:a9:17:9c:fd:10:d5:
b9:40:5a:0c:59:86:48:df:de:ab:11:ed:c0:30:12:10:6b:3b:
d7:8d:98:68:b2:45:12:2a:1d:c5:17:f4:3f:f3:3f:00:ea:ca:
91:55:bb:e7:54:cd:58:36:06:cc:cd:59:63:ee:a3:7e:cc:d8:
44:44:16:43:2f:de:26:05:8a:75:da:70:3d:41:0d:48:f0:32:
c7:14:16:dd:b5:bb:01:ee:4a:2b:37:5a:b4:48:82:93:e7:47:
3c:dc:36:62:9c:94:5f:4b:6b:fb:df:8d:b2:3c:7b:0e:91:66:
0e:ca:98:53:37:49:45:cd:96:4d:db:85:39:df:8b:5b:be:5d:
4a:4a:dc:86:c8:37:1c:1b:21:4a:08:b3:d4:65:92:ce:62:af:
8a:46:f6:11:93:f0:33:b5:3c:28:b3:55:98:ff:92:48:c7:0c:
0a:4a:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:38 2026 by rpki-client