
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa
File: 28347c3e-bfce-3db1-967c-22fbb4496455.roa (raw, json)
Hash identifier: tYy3OkWlrcjPo8Y3/IkLj5HQ90RCKb/dpnrJK+x8+0o=
Subject key identifier: 0B:1F:00:52:BC:82:19:1C:CE:D3:79:0F:F2:D0:DA:02:CF:20:83:24
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584CDC6789509C10282A94D8C700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 14717
IP address blocks: 63.89.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:89:50:9c:10:28:2a:94:d8:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=969a83f2-fbfb-4714-b24f-a522ad7ba96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:7b:5d:98:50:f3:ea:f2:79:b5:0f:bd:c7:
58:d2:72:52:3f:7f:e7:f9:bf:43:3a:e1:99:6a:9a:
f6:4a:38:21:1f:1e:85:b8:11:17:2f:a2:91:8c:fe:
e8:2a:5d:20:c9:12:20:38:24:ea:b1:b9:e9:61:3c:
c7:1d:db:18:48:97:53:f5:0a:86:6f:6d:42:de:83:
fd:fe:3e:66:f9:43:d9:9f:bb:00:4a:cb:d7:77:a9:
88:e2:5e:29:0a:12:27:ea:60:0b:d4:ce:55:48:d5:
c4:ec:85:d9:83:0e:23:55:fe:2c:fb:f8:47:56:14:
8e:4e:32:e7:00:f7:db:31:95:38:be:bc:b4:37:67:
63:dd:40:40:50:11:39:8e:cf:14:2a:1c:27:e5:b6:
6c:3f:24:4c:48:63:3c:33:a4:0d:20:41:61:11:27:
fe:ee:57:b0:dd:0e:9f:47:44:14:5e:03:0d:11:30:
94:1d:cc:2b:c9:0a:40:23:a7:c6:88:90:71:1d:72:
33:57:c0:28:0f:ca:ea:2b:cf:28:82:74:96:4c:b7:
63:6a:2d:0b:7f:75:70:29:3a:bb:e7:af:a8:c9:24:
b3:a9:06:02:cc:59:48:48:60:76:1b:57:d0:00:ed:
e3:25:ab:cb:dc:38:3a:fe:f1:c1:e9:b6:cd:da:96:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:00:52:BC:82:19:1C:CE:D3:79:0F:F2:D0:DA:02:CF:20:83:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
63.89.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:53:06:4b:45:19:c9:01:40:61:a7:c7:58:51:35:27:5c:9f:
47:de:5c:69:4d:42:56:70:4e:2c:ad:80:63:a4:18:48:94:5e:
7e:b3:14:28:84:3b:46:1d:de:65:9b:cf:34:13:d7:81:5e:a1:
1c:cd:03:ae:b1:a3:72:52:ec:68:55:76:71:f2:b0:90:28:d1:
f5:c9:21:73:e8:31:95:8c:d0:5f:f6:09:ca:78:3d:37:10:94:
36:29:c7:b0:31:46:4c:27:11:b4:d7:b5:4d:9d:82:bd:0b:f5:
f0:77:d1:e4:d8:ea:02:ef:a4:81:97:d8:cc:cf:c3:7f:d3:d9:
a7:b4:30:b3:92:ee:87:25:63:73:90:ff:cc:1a:9c:04:ca:8b:
81:dc:e6:c6:4a:a3:78:b4:aa:89:81:f1:c1:0a:83:41:da:af:
ea:97:62:03:10:d8:04:9b:d5:93:1b:da:9f:50:67:b4:08:60:
a5:02:8a:b6:d0:6e:0a:fd:d6:f6:85:9b:26:8c:b3:82:fe:04:
7d:44:eb:0d:09:8e:22:77:9f:71:19:e5:6a:56:01:bc:56:68:
9b:9e:7c:35:09:8f:6d:3c:ff:be:06:78:fc:68:3b:71:bc:41:
a3:39:9b:a3:02:22:44:ab:c2:7c:c0:94:7d:4f:ef:41:96:2b:
3b:54:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:20:41 2026 by rpki-client