
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7005542b-0e38-3318-b9d1-8ee1406bdc46.roa
File: 7005542b-0e38-3318-b9d1-8ee1406bdc46.roa (raw, json)
Hash identifier: cqZxNro3upn28hIEdMo6oCb8zxaahEyHGDQHFjeN/II=
Subject key identifier: 42:0F:07:76:96:35:57:AB:06:E1:A2:42:8A:41:A2:1B:64:7A:52:4D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584E5A4A0A3789F5F75BD7E17480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7005542b-0e38-3318-b9d1-8ee1406bdc46.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 6167
IP address blocks: 72.105.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:4a:0a:37:89:f5:f7:5b:d7:e1:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=9fc9f4d1-483e-4853-ab51-7bebdb05e946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:53:fb:4f:61:76:9c:8c:68:09:cc:fb:7c:
5c:80:5a:1f:d6:9c:70:fe:7e:e7:29:20:f2:f9:f4:
6e:50:6d:02:5e:50:3a:38:22:88:22:5b:dc:3a:39:
99:7d:7d:68:40:93:46:12:11:47:96:36:f1:da:ae:
69:aa:dc:4a:81:5f:cd:25:cc:e4:1e:60:aa:12:62:
45:04:7e:37:dd:84:c0:29:25:c9:92:21:81:05:11:
4f:5e:ba:ab:07:85:b8:01:34:f3:7c:eb:17:78:2c:
01:f0:7a:df:61:a2:d0:79:8e:1d:31:54:c7:ce:15:
f0:6e:05:2d:78:2b:01:f4:d4:a4:e8:c7:de:a2:ad:
94:3a:0f:6c:20:f1:fd:bb:93:7a:e1:6b:c5:d4:f9:
81:51:89:aa:27:21:39:10:d9:01:e7:58:75:fb:58:
fc:96:b7:39:3a:22:8a:70:5d:ba:49:eb:40:8b:15:
0d:6a:21:7a:9f:28:79:2e:36:89:2a:9b:6a:13:f8:
61:97:dc:47:19:a9:47:ce:d6:c5:6f:41:db:91:9a:
16:41:db:12:d2:21:9b:d7:a2:ae:87:4e:65:c5:ab:
4f:ba:d1:8c:71:e8:42:93:7c:b1:80:63:35:e6:11:
fc:26:2d:08:c6:4c:e9:77:3b:2f:79:af:35:31:5d:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:07:76:96:35:57:AB:06:E1:A2:42:8A:41:A2:1B:64:7A:52:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7005542b-0e38-3318-b9d1-8ee1406bdc46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.105.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:62:f0:cf:22:e7:7d:87:5e:d5:21:77:69:ab:18:47:cf:b9:
59:c1:82:5f:98:34:5f:ed:ab:2b:a5:fd:4f:20:de:20:33:d6:
0f:a3:fe:d9:56:c1:73:2f:6b:02:21:20:02:59:13:2c:88:56:
cb:56:53:88:5b:e6:5d:12:fe:16:14:4c:7e:65:b6:dc:ae:a5:
51:ca:91:18:fa:91:1b:ac:0f:59:7f:63:6e:1e:55:03:9c:19:
74:be:db:85:72:9c:0f:0a:f9:34:8c:64:e9:06:56:de:8e:49:
35:c7:17:88:63:2c:23:8a:31:c3:21:d9:bd:51:90:c5:19:e1:
8d:cb:be:79:15:86:db:ac:20:01:fb:ed:e2:8a:db:eb:4b:2a:
38:60:b8:c8:57:71:06:cc:fa:f2:cb:32:06:fc:25:63:ca:02:
61:21:16:62:db:cf:d4:37:96:e3:3f:ab:1f:76:eb:04:ea:73:
1d:c2:b9:01:90:34:07:f1:12:c7:e2:8a:a2:e4:d3:1d:98:72:
a1:1e:c3:fd:09:e0:36:9a:97:1b:25:b7:fe:eb:71:5b:7d:b8:
85:9f:44:d5:59:68:17:7b:2f:55:1f:11:d1:23:83:07:6c:a1:
60:83:42:2d:2d:e4:e0:3e:83:42:2f:d3:5c:ee:4f:4f:0c:d4:
91:a4:64:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgo3ifX3W9fhdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
OWZjOWY0ZDEtNDgzZS00ODUzLWFiNTEtN2JlYmRiMDVlOTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4dT+09hdpyMaAnM+3xcgFof1pxw/n7nKSDy
+fRuUG0CXlA6OCKIIlvcOjmZfX1oQJNGEhFHljbx2q5pqtxKgV/NJczkHmCqEmJF
BH433YTAKSXJkiGBBRFPXrqrB4W4ATTzfOsXeCwB8HrfYaLQeY4dMVTHzhXwbgUt
eCsB9NSk6Mfeoq2UOg9sIPH9u5N64WvF1PmBUYmqJyE5ENkB51h1+1j8lrc5OiKK
cF26SetAixUNaiF6nyh5LjaJKptqE/hhl9xHGalHztbFb0HbkZoWQdsS0iGb16Ku
h05lxatPutGMcehCk3yxgGM15hH8Ji0Ixkzpdzsvea81MV3GsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIPB3aWNVerBuGiQopBohtkelJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzAwNTU0MmItMGUzOC0z
MzE4LWI5ZDEtOGVlMTQwNmJkYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1i8M8i532HXtUhd2mrGEfPuVnBgl+YNF/tqyul/U8g3iAz1g+j/tlW
wXMvawIhIAJZEyyIVstWU4hb5l0S/hYUTH5lttyupVHKkRj6kRusD1l/Y24eVQOc
GXS+24VynA8K+TSMZOkGVt6OSTXHF4hjLCOKMcMh2b1RkMUZ4Y3LvnkVhtusIAH7
7eKK2+tLKjhguMhXcQbM+vLLMgb8JWPKAmEhFmLbz9Q3luM/qx926wTqcx3CuQGQ
NAfxEsfiiqLk0x2YcqEew/0J4Daalxslt/7rcVt9uIWfRNVZaBd7L1UfEdEjgwds
oWCDQi0t5OA+g0Iv01zuT08M1JGkZBA=
-----END CERTIFICATE-----
Generated at Mon Jul 13 11:45:48 2026 by rpki-client