
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa
File: 228fabbc-0b44-3b16-9877-0d67187805d1.roa (raw, json)
Hash identifier: v97hclDqJ/WB9wbub1Vxyjh0CDHeHl3vv9lfFQEIFDM=
Subject key identifier: 3B:C7:53:EB:D4:05:86:05:1E:32:CF:6A:41:AD:B9:DE:3A:79:96:16
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584EEEB76BB0939C2A0FD1885680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa
Signing time: Sun 23 Aug 2026 13:00:12 +0000
ROA not before: Sun 23 Aug 2026 13:00:12 +0000
ROA not after: Sat 21 Nov 2026 14:00:12 +0000
asID: 701
IP address blocks: 71.254.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ee:b7:6b:b0:93:9c:2a:0f:d1:88:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 23 13:00:12 2026 GMT
Not After : Nov 21 14:00:12 2026 GMT
Subject: CN=35bec9a9-2c21-4bbb-9aac-2464eeec887c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:ca:65:d1:ee:ea:a7:de:09:90:fb:53:a9:
20:7f:d4:a9:d1:48:94:af:6b:84:1e:c9:49:43:23:
1a:da:0e:2e:ee:c9:c0:28:ed:3a:a6:ed:a8:83:a5:
b6:36:d9:df:9c:aa:0d:b1:6b:6f:4f:a1:76:0b:08:
73:86:0b:70:54:08:df:e4:9f:69:6b:2c:43:ca:92:
67:b5:14:7b:a1:f9:a0:8b:73:93:a8:bd:c5:09:bf:
1d:8a:3f:48:cb:4e:6e:d2:bb:56:9d:ed:02:47:96:
9f:27:16:7c:bb:7d:07:c3:38:83:b0:15:51:93:8a:
03:72:08:d3:d7:96:5f:84:80:d3:fa:d7:97:0e:72:
9f:c3:09:f1:29:1f:7f:f6:ff:f9:d1:ff:74:eb:78:
22:27:b6:91:df:61:77:3e:de:fd:a7:db:36:c0:cb:
ad:4c:0c:26:51:37:6a:cf:6d:78:d0:75:7d:2b:a1:
8f:c2:86:2c:97:86:5a:f8:b6:34:12:1c:ae:83:44:
76:b2:f6:cd:d6:44:ee:f2:1e:3f:81:0e:fc:53:76:
73:55:46:81:48:39:27:cc:93:2d:16:9c:77:bb:c3:
4f:55:05:ff:6d:c6:58:b3:72:3b:a7:11:88:bf:b2:
43:59:f0:64:45:de:3b:94:44:ac:93:5b:61:a4:50:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:53:EB:D4:05:86:05:1E:32:CF:6A:41:AD:B9:DE:3A:79:96:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.254.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:3c:ea:6b:dc:89:03:df:3e:12:8d:6a:7b:5e:9d:6f:3a:cd:
c4:2e:6f:ec:3f:9d:6f:4d:e8:3e:50:77:ef:53:5e:8b:e2:26:
f1:2d:78:76:3b:b4:82:c3:4c:e1:5d:8d:b0:57:24:ca:48:df:
fb:82:05:8c:e9:17:cd:c5:78:4f:ed:56:f3:66:af:11:87:7b:
85:ac:1b:aa:d9:68:38:30:b9:f8:0a:fb:7c:ca:e3:20:c1:70:
f1:f4:3f:c5:ea:ba:c3:33:49:11:93:96:41:a7:d9:44:2c:46:
e6:5f:d3:f6:4a:5a:78:f1:0d:13:16:70:e3:55:8a:23:a9:cb:
64:22:3b:cb:a3:f2:79:54:a8:f1:6c:2b:8b:fd:7d:af:17:86:
46:e1:74:a1:25:13:17:69:59:bc:e7:6f:9c:53:53:05:cf:77:
5d:7c:d7:21:26:c9:83:5e:16:c7:d3:53:e1:d9:08:6e:94:50:
34:b1:e9:bd:a4:11:20:88:41:b5:96:21:86:46:57:d5:35:dd:
4d:96:d8:4c:07:48:e0:6e:e0:37:e7:41:d1:47:87:24:b8:11:
fd:78:85:4b:45:53:52:14:6f:ee:71:d8:3a:76:4b:59:41:bc:
ad:1e:37:f0:de:20:59:e5:ea:e3:10:38:82:a7:06:88:96:58:
ca:24:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:52:10 2026 by rpki-client