
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c5302c-2184-3178-aba6-e484f415100b.roa
File: 40c5302c-2184-3178-aba6-e484f415100b.roa (raw, json)
Hash identifier: UWY+GaFQjjvJOcjY31mWewIetRaclHBH82njqaKutGY=
Subject key identifier: 23:B4:DE:4B:42:48:3A:74:08:21:CA:DB:2D:64:5F:C5:53:69:62:40
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F6C584402F25A53F2381A26C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c5302c-2184-3178-aba6-e484f415100b.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 6167
IP address blocks: 174.232.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:44:02:f2:5a:53:f2:38:1a:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=ec9c9054-edd2-4461-8b95-dfece98b50a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:a0:a6:ee:1c:0a:e5:b3:5e:61:3e:d3:1f:
95:9c:3a:1b:93:74:9c:64:6e:7a:07:b8:a4:14:46:
38:94:55:f4:da:d8:20:21:67:09:c1:c3:4b:61:e1:
3d:07:05:c8:65:61:0b:3f:74:52:b0:b9:8c:4f:48:
57:f3:0c:54:02:05:9c:19:53:24:d6:2d:75:a7:1f:
42:b1:f1:54:c9:c9:af:37:92:d7:c0:2f:c3:b7:7c:
40:2b:8e:37:38:f1:86:68:85:cd:43:32:94:ce:7c:
db:95:d0:bf:3d:5d:4b:68:23:01:76:db:0f:06:c2:
e1:2c:ec:f3:5a:05:aa:a2:94:5f:97:59:ad:3d:bd:
40:3a:1d:48:c9:65:16:23:20:58:6f:5d:91:30:7a:
45:45:6a:4e:4f:ec:47:e5:61:af:ad:f1:ba:c5:a3:
4d:cb:78:b9:4a:09:53:c7:78:87:a0:f6:1b:83:42:
2d:23:f0:f0:ee:a8:aa:20:cb:a3:a1:1c:97:27:39:
c3:d0:1a:c0:49:0c:7a:bc:3e:bb:ad:93:d8:94:9b:
26:42:16:f5:ee:4a:ca:19:ef:2d:c1:22:1a:e9:d5:
70:f6:4a:a0:77:9b:d2:2f:72:11:39:8c:84:8e:43:
1b:a8:03:14:be:fa:64:9b:db:0b:4e:0a:37:86:24:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:DE:4B:42:48:3A:74:08:21:CA:DB:2D:64:5F:C5:53:69:62:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c5302c-2184-3178-aba6-e484f415100b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.232.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c4:e0:4b:d2:3f:fe:0e:ba:fa:30:3b:36:b1:33:45:40:af:
28:19:6a:84:4e:d7:8f:d9:25:fd:26:d1:8c:fe:9f:31:97:65:
43:90:6b:ac:cf:56:21:d5:bd:a0:32:10:52:07:51:73:15:2e:
19:69:aa:04:f8:ff:9c:94:db:67:cc:58:f4:d1:d2:88:0e:cc:
bb:93:ef:c3:d6:fe:bc:ce:84:ec:f6:0a:1d:67:e6:eb:15:52:
70:de:b2:ab:e6:6d:08:57:21:f9:e4:58:95:04:4f:76:16:7f:
96:0c:11:78:34:9b:7c:a1:6c:00:c3:ac:9b:45:82:db:2c:36:
4a:2a:e6:54:25:ae:ff:a4:2c:76:d2:df:30:e5:94:ec:a4:51:
0c:91:8f:e4:1e:b9:d8:ea:e6:c0:37:9b:43:3a:2b:d2:5e:95:
9f:80:4c:c1:90:1b:b7:c1:23:d8:c3:76:ac:70:cd:11:12:12:
db:3b:c0:10:f2:b5:b7:af:46:f9:ef:37:9f:f9:13:b1:0f:77:
d7:a0:90:1a:8d:a7:8c:48:e9:a3:36:f3:31:b7:a7:75:4f:67:
b9:c8:47:d0:43:8e:0a:7c:d1:d7:5d:4f:b4:2d:17:44:e4:23:
2f:d2:63:40:bd:58:75:53:80:17:e8:ec:9d:59:de:c9:91:26:
c7:2a:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:50:52 2026 by rpki-client