
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31963dfc-786c-3b24-978c-c8aceec644d9.roa
File: 31963dfc-786c-3b24-978c-c8aceec644d9.roa (raw, json)
Hash identifier: HaPTQRiOshgNBOruKnERwbwYNy/Cg1llkyNZ8faSpos=
Subject key identifier: A3:03:6B:9A:2C:E8:CA:A6:B8:F1:A1:BB:05:EF:8D:E0:4A:32:6B:F0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D7A0540A87D8CAC7674577B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31963dfc-786c-3b24-978c-c8aceec644d9.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 6167
IP address blocks: 72.104.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:40:a8:7d:8c:ac:76:74:57:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=0f2b4b14-0a7c-48d9-b447-ca7437717e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:bb:05:59:1b:24:b3:a5:92:d6:15:ad:52:
75:34:10:9e:c5:f8:b1:5e:3a:a7:c4:d8:64:74:ad:
77:2a:d8:b9:26:02:1d:3c:42:0c:87:62:25:f7:19:
09:fe:53:a8:ff:c8:b8:a7:13:f3:54:78:2d:03:47:
b1:4e:b4:4b:f0:a9:cc:62:3c:f9:98:4f:e6:8b:29:
c5:e1:14:98:37:03:0f:db:04:73:4d:89:f6:a0:5c:
6e:77:79:0c:6f:34:16:f8:bc:2f:b3:b3:1f:b6:65:
ab:13:63:85:22:de:bc:b1:f0:55:c1:5c:1e:30:ae:
aa:d6:1c:26:f3:0f:e6:3d:bc:97:bf:cf:b4:e8:96:
5f:be:bd:0e:19:ac:c4:04:e4:0c:88:45:ca:78:a7:
0e:0e:b8:14:1d:92:53:75:2a:50:fb:65:1d:86:59:
1c:28:d7:4f:2a:f8:83:27:de:8a:a0:74:6c:9b:ad:
58:84:a7:15:d9:06:48:5e:c8:95:92:c9:d7:7c:a9:
58:2b:60:2d:28:94:00:98:0b:b3:a1:c4:16:2c:31:
d5:5f:a9:92:48:7d:fc:3c:43:7b:83:d6:60:99:7a:
2e:ee:2a:81:f4:c1:27:63:e8:da:0c:ed:e9:28:82:
07:5d:e9:99:a7:ad:3f:4a:99:21:53:6d:65:8e:57:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:03:6B:9A:2C:E8:CA:A6:B8:F1:A1:BB:05:EF:8D:E0:4A:32:6B:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31963dfc-786c-3b24-978c-c8aceec644d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.104.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:30:51:8f:a5:e0:35:a6:b6:fd:87:d4:89:54:b0:48:e1:8c:
3e:d1:18:d9:63:2b:29:ba:9f:f6:68:20:cc:03:f8:3f:62:27:
db:3e:97:bc:22:1a:d2:9c:17:68:21:0f:cc:46:14:5b:d7:2b:
6d:76:e3:01:c1:c4:fa:44:9d:ba:74:8b:2c:2a:7a:41:ed:cb:
a1:e2:07:b3:4f:24:2c:a8:dd:17:e3:16:e9:25:1d:4d:6b:dd:
31:08:a6:2e:98:0b:2a:23:ba:8a:65:ae:a6:73:57:71:1b:a1:
56:d1:3e:41:a3:5b:2c:e3:06:a5:2f:aa:f0:84:72:21:31:54:
01:07:34:ae:98:ad:db:01:49:33:a8:44:45:da:2c:33:3e:99:
f7:d2:66:df:55:dd:39:5a:61:98:2e:fd:29:f3:ad:09:41:02:
82:3d:82:07:c9:db:e5:24:a3:bf:3e:66:44:00:57:66:ad:97:
df:08:fb:f6:a7:df:47:7b:3c:36:f7:22:44:f8:96:fe:b1:b3:
ce:17:2a:ed:b2:17:78:49:07:d4:88:5b:d3:b3:47:77:6f:51:
54:db:ae:91:93:f3:75:d8:d2:76:41:c2:f5:4d:25:4e:3e:bf:
48:de:8c:fd:fc:23:c3:64:b5:e3:e6:21:06:5f:a6:35:67:b7:
4b:53:5b:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BUCofYysdnRXe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
MGYyYjRiMTQtMGE3Yy00OGQ5LWI0NDctY2E3NDM3NzE3ZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8e7BVkbJLOlktYVrVJ1NBCexfixXjqnxNhk
dK13Kti5JgIdPEIMh2Il9xkJ/lOo/8i4pxPzVHgtA0exTrRL8KnMYjz5mE/miynF
4RSYNwMP2wRzTYn2oFxud3kMbzQW+Lwvs7MftmWrE2OFIt68sfBVwVweMK6q1hwm
8w/mPbyXv8+06JZfvr0OGazEBOQMiEXKeKcODrgUHZJTdSpQ+2UdhlkcKNdPKviD
J96KoHRsm61YhKcV2QZIXsiVksnXfKlYK2AtKJQAmAuzocQWLDHVX6mSSH38PEN7
g9ZgmXou7iqB9MEnY+jaDO3pKIIHXemZp60/SpkhU21ljleZjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMDa5os6MqmuPGhuwXvjeBKMmvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzE5NjNkZmMtNzg2Yy0z
YjI0LTk3OGMtYzhhY2VlYzY0NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGioMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0wUY+l4DWmtv2H1IlUsEjhjD7RGNljKym6n/ZoIMwD+D9iJ9s+l7wi
GtKcF2ghD8xGFFvXK2124wHBxPpEnbp0iywqekHty6HiB7NPJCyo3RfjFuklHU1r
3TEIpi6YCyojuoplrqZzV3EboVbRPkGjWyzjBqUvqvCEciExVAEHNK6YrdsBSTOo
REXaLDM+mffSZt9V3TlaYZgu/SnzrQlBAoI9ggfJ2+Uko78+ZkQAV2atl98I+/an
30d7PDb3IkT4lv6xs84XKu2yF3hJB9SIW9OzR3dvUVTbrpGT83XY0nZBwvVNJU4+
v0jejP38I8NktePmIQZfpjVnt0tTW+k=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:20:01 2026 by rpki-client