
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5800e76b-9916-3a51-9376-5d9f33d0a980.roa
File: 5800e76b-9916-3a51-9376-5d9f33d0a980.roa (raw, json)
Hash identifier: u3+eQkD4sQZdjostJO0KFpGZQiKFv3oV0OfqOsfB9qg=
Subject key identifier: 8E:03:07:B3:E6:0F:5A:F8:65:AD:25:BC:19:EB:9D:24:B4:2C:79:C4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F32379165935617FA1800CE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5800e76b-9916-3a51-9376-5d9f33d0a980.roa
Signing time: Wed 16 Sep 2026 17:17:50 +0000
ROA not before: Wed 16 Sep 2026 17:17:50 +0000
ROA not after: Tue 15 Dec 2026 18:17:50 +0000
asID: 6167
IP address blocks: 72.96.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:32:37:91:65:93:56:17:fa:18:00:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 16 17:17:50 2026 GMT
Not After : Dec 15 18:17:50 2026 GMT
Subject: CN=3bc6caa1-d9cb-4382-a192-270bdd5bba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:bf:67:49:18:2d:82:d3:80:fc:e8:81:43:
80:4f:36:bf:51:51:cc:5d:28:5f:47:73:4c:98:b1:
94:6b:ab:43:f0:39:ad:a5:d4:50:22:bb:db:cf:1a:
db:fb:ae:67:b0:fb:a7:e8:65:2f:7d:58:4a:58:a9:
d4:5d:7f:57:f7:50:7b:dc:b5:2f:34:9c:ba:03:c7:
ab:cd:be:e4:dd:df:89:e5:e1:5d:66:b4:3b:f1:9f:
aa:73:6e:ae:e4:e2:b9:e6:4d:f7:2d:f7:3d:6b:15:
b5:34:d2:17:94:4a:3e:90:48:84:bf:9f:c6:96:54:
e4:59:11:18:4c:42:69:1c:3a:00:ac:30:eb:d0:5b:
db:a2:c4:e2:5c:77:68:0a:69:fd:f8:81:97:a7:fd:
7c:ba:d0:9c:7b:2d:98:e6:22:2c:07:7a:b5:6b:f5:
e5:b9:c2:af:0f:85:a0:51:2e:d8:9d:f5:c3:73:82:
3c:b3:9a:07:24:26:78:dd:ce:81:cd:9a:8e:d7:5d:
31:13:04:21:fe:bc:be:55:5b:25:95:a9:9b:97:15:
2f:86:2b:f2:07:49:e1:72:42:b7:8f:13:79:1d:a1:
63:06:54:67:8c:ac:b6:30:ef:be:18:bf:0e:0d:29:
a7:da:7c:34:31:7f:b8:eb:d3:ac:37:95:6e:4a:59:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:07:B3:E6:0F:5A:F8:65:AD:25:BC:19:EB:9D:24:B4:2C:79:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5800e76b-9916-3a51-9376-5d9f33d0a980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:80:4e:2b:82:88:a0:05:d5:14:96:24:30:c9:1a:0a:66:e2:
4e:2b:7c:58:db:e3:a4:07:51:10:67:ca:05:f4:a5:35:0a:11:
60:66:42:75:51:c6:0d:82:4e:ac:8d:c5:dd:64:e2:ca:fb:fc:
e0:d6:47:34:f0:55:56:08:a3:85:03:05:f8:8e:e2:82:f5:10:
35:3c:be:1a:63:da:e4:79:06:8f:c9:95:be:2d:d9:b3:65:c0:
bc:ab:73:ec:4d:17:6a:c8:b5:77:eb:b8:be:f8:a8:92:ac:ac:
86:c7:81:fb:97:1a:1a:f7:dd:29:24:20:9d:6c:4f:23:5d:3b:
39:08:a4:c4:95:6f:2d:fa:30:57:04:2e:cb:4a:0d:e7:57:75:
75:c7:b3:42:7b:1f:1a:cc:95:95:07:80:f0:c4:f1:3d:92:3d:
55:69:73:d5:9b:f9:24:e9:44:e4:25:82:31:6f:11:ae:c0:36:
55:11:0c:03:a6:da:6c:ff:62:23:da:0e:2e:7a:e2:2d:59:fd:
fc:fe:5c:c5:02:5b:41:be:ba:50:f5:d6:f5:ee:48:cd:94:6a:
a3:1b:67:e3:94:6a:79:98:7d:f9:5b:03:f5:04:5b:09:7b:da:
12:f2:ff:7d:41:5a:a4:44:73:c2:74:63:00:25:a7:08:ab:13:
0e:0d:d2:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8yN5Flk1YX+hgAzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkxNjE3MTc1MFoXDTI2MTIxNTE4MTc1MFowLzEtMCsGA1UEAxMk
M2JjNmNhYTEtZDljYi00MzgyLWExOTItMjcwYmRkNWJiYTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2G/Z0kYLYLTgPzogUOATza/UVHMXShfR3NM
mLGUa6tD8DmtpdRQIrvbzxrb+65nsPun6GUvfVhKWKnUXX9X91B73LUvNJy6A8er
zb7k3d+J5eFdZrQ78Z+qc26u5OK55k33Lfc9axW1NNIXlEo+kEiEv5/GllTkWREY
TEJpHDoArDDr0FvbosTiXHdoCmn9+IGXp/18utCcey2Y5iIsB3q1a/XlucKvD4Wg
US7YnfXDc4I8s5oHJCZ43c6BzZqO110xEwQh/ry+VVsllamblxUvhivyB0nhckK3
jxN5HaFjBlRnjKy2MO++GL8ODSmn2nw0MX+469OsN5VuSlkXmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4DB7PmD1r4Za0lvBnrnSS0LHnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTgwMGU3NmItOTkxNi0z
YTUxLTkzNzYtNWQ5ZjMzZDBhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqATiuCiKAF1RSWJDDJGgpm4k4rfFjb46QHURBnygX0pTUKEWBmQnVR
xg2CTqyNxd1k4sr7/ODWRzTwVVYIo4UDBfiO4oL1EDU8vhpj2uR5Bo/Jlb4t2bNl
wLyrc+xNF2rItXfruL74qJKsrIbHgfuXGhr33SkkIJ1sTyNdOzkIpMSVby36MFcE
LstKDedXdXXHs0J7HxrMlZUHgPDE8T2SPVVpc9Wb+STpROQlgjFvEa7ANlURDAOm
2mz/YiPaDi564i1Z/fz+XMUCW0G+ulD11vXuSM2UaqMbZ+OUanmYfflbA/UEWwl7
2hLy/31BWqREc8J0YwAlpwirEw4N0hE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:05 2026 by rpki-client