
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9339e4-fd81-326b-8511-fab9b0c40539.roa
File: fb9339e4-fd81-326b-8511-fab9b0c40539.roa (raw, json)
Hash identifier: YdKgxxsj+Q1ilOf/ToFkZZK974iFhWNKG0eqh0NQ0OA=
Subject key identifier: E7:B2:A8:AC:B7:57:F4:82:41:99:77:AC:1E:48:0F:69:EC:C7:30:4A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D9FB578912644D4C859988480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9339e4-fd81-326b-8511-fab9b0c40539.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 6167
IP address blocks: 72.107.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:78:91:26:44:d4:c8:59:98:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=88ce6ac2-764e-4be6-ab8f-47a16f12e660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:1b:d4:82:21:e8:67:53:d9:92:a2:ef:bc:
e2:f1:f4:37:f2:b9:38:89:81:61:cf:b0:3b:05:09:
13:ab:e1:8f:7f:e6:72:14:5f:92:cc:96:76:ec:24:
84:73:01:46:be:0c:91:32:5b:34:bc:f1:3f:23:b8:
1e:be:fe:fd:e4:36:92:7d:82:13:c5:aa:9e:54:3e:
54:85:84:73:9a:f1:41:56:de:d0:db:5f:c8:0f:d1:
69:56:2e:d4:d0:24:61:eb:7c:8e:76:fe:ef:42:cc:
31:a1:3e:1f:0e:57:74:02:0e:d6:1f:c0:4c:f5:6f:
76:63:ad:4f:99:2b:10:73:be:86:d5:54:98:c3:0c:
90:5e:d0:ea:fa:4e:d0:22:6f:f4:06:03:5f:8c:14:
02:3d:a7:38:74:b9:07:fd:65:66:ff:91:94:6f:18:
b7:be:53:07:16:45:ea:1d:fd:24:38:77:bd:aa:e6:
6d:ed:8f:90:32:c5:ae:f2:83:8f:42:6f:75:68:2d:
9c:a5:cd:1d:2c:a4:11:81:ad:60:92:95:e8:e9:5d:
31:af:1b:84:15:9c:87:24:4f:36:f1:ca:04:89:bd:
49:f4:87:ad:61:2d:62:76:70:64:1c:7b:7e:bc:01:
dc:a3:ca:6e:f9:61:ff:78:83:e3:1e:2d:84:aa:46:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:A8:AC:B7:57:F4:82:41:99:77:AC:1E:48:0F:69:EC:C7:30:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9339e4-fd81-326b-8511-fab9b0c40539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.107.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b0:36:3d:33:42:9f:b2:8e:f9:b7:06:a7:11:00:a1:c8:11:
a6:0e:a9:f6:9e:67:d6:81:b7:8c:66:a5:d0:aa:1e:d4:e9:a0:
27:fa:c2:b7:30:33:ed:dc:07:e0:79:8d:41:2d:70:b0:22:57:
26:84:6e:a9:fe:79:ab:37:00:85:a4:07:37:0c:df:cc:ba:03:
eb:d1:8d:36:d9:46:41:7c:18:98:ff:1c:ef:87:54:3c:c2:8a:
74:7e:e4:d8:b0:e9:1b:62:be:ec:23:66:17:3c:5f:b4:44:6d:
ff:8e:4a:25:9c:45:de:4e:51:aa:8a:8f:2d:68:28:82:38:61:
89:9e:fe:e0:3d:59:bd:c7:43:c9:07:74:91:9b:ea:da:e7:40:
bb:7d:8c:23:5d:43:68:e3:3d:79:a4:cf:fb:4f:01:f8:0e:9a:
a4:ba:5a:5c:c1:85:f5:85:9a:d5:3a:76:c4:8b:a3:c8:c5:5d:
cc:1b:41:7b:56:2d:c4:fb:e7:6e:c8:15:0f:5e:1e:1b:6d:e6:
4a:9c:68:5d:fa:fa:e6:7b:23:d0:ad:04:9c:ec:e5:29:05:b2:
44:3e:86:30:74:c2:ea:d5:5c:13:08:97:23:c2:d8:6b:07:73:
ae:45:7f:bd:7c:25:99:0f:54:aa:8e:96:e4:56:4f:4a:0b:0f:
23:cf:6f:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXiRJkTUyFmYhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
ODhjZTZhYzItNzY0ZS00YmU2LWFiOGYtNDdhMTZmMTJlNjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH4b1IIh6GdT2ZKi77zi8fQ38rk4iYFhz7A7
BQkTq+GPf+ZyFF+SzJZ27CSEcwFGvgyRMls0vPE/I7gevv795DaSfYITxaqeVD5U
hYRzmvFBVt7Q21/ID9FpVi7U0CRh63yOdv7vQswxoT4fDld0Ag7WH8BM9W92Y61P
mSsQc76G1VSYwwyQXtDq+k7QIm/0BgNfjBQCPac4dLkH/WVm/5GUbxi3vlMHFkXq
Hf0kOHe9quZt7Y+QMsWu8oOPQm91aC2cpc0dLKQRga1gkpXo6V0xrxuEFZyHJE82
8coEib1J9IetYS1idnBkHHt+vAHco8pu+WH/eIPjHi2EqkYogQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeyqKy3V/SCQZl3rB5ID2nsxzBKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmI5MzM5ZTQtZmQ4MS0z
MjZiLTg1MTEtZmFiOWIwYzQwNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGuoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuwNj0zQp+yjvm3BqcRAKHIEaYOqfaeZ9aBt4xmpdCqHtTpoCf6wrcw
M+3cB+B5jUEtcLAiVyaEbqn+eas3AIWkBzcM38y6A+vRjTbZRkF8GJj/HO+HVDzC
inR+5Niw6RtivuwjZhc8X7REbf+OSiWcRd5OUaqKjy1oKII4YYme/uA9Wb3HQ8kH
dJGb6trnQLt9jCNdQ2jjPXmkz/tPAfgOmqS6WlzBhfWFmtU6dsSLo8jFXcwbQXtW
LcT7527IFQ9eHhtt5kqcaF36+uZ7I9CtBJzs5SkFskQ+hjB0wurVXBMIlyPC2GsH
c65Ff718JZkPVKqOluRWT0oLDyPPbx0=
-----END CERTIFICATE-----
Generated at Wed May 13 12:34:52 2026 by rpki-client