
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/742b64da-7450-3181-ad0b-72aa7a34b35f.roa
File: 742b64da-7450-3181-ad0b-72aa7a34b35f.roa (raw, json)
Hash identifier: Yfw1GpjgY7Wn+Kw0zuSd8A2bqP1H7FQcq9PrrJRzm7c=
Subject key identifier: 2D:F2:B6:04:75:B9:9D:19:17:40:67:54:AF:5D:0A:85:4C:61:63:EA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F90A31D26D45231ED2537FD08
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/742b64da-7450-3181-ad0b-72aa7a34b35f.roa
Signing time: Tue 20 Oct 2026 13:00:13 +0000
ROA not before: Tue 20 Oct 2026 13:00:13 +0000
ROA not after: Mon 18 Jan 2027 14:00:13 +0000
asID: 701
IP address blocks: 72.71.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:a3:1d:26:d4:52:31:ed:25:37:fd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 20 13:00:13 2026 GMT
Not After : Jan 18 14:00:13 2027 GMT
Subject: CN=c32e45dd-c7b5-475b-a66c-ad7d542e03ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:ec:b7:f5:64:8e:69:55:f8:cd:3e:4c:db:
8f:74:80:d6:0e:4b:b2:58:d9:d9:0b:2c:2b:a1:b0:
ef:4c:97:9c:3e:96:14:41:d1:43:9b:28:32:8d:50:
2c:7f:48:e5:49:d1:b5:9b:11:34:79:bf:11:f8:86:
3a:b6:e2:df:6d:f1:ad:8a:80:c3:ce:fb:db:25:03:
23:93:a0:b4:84:13:16:a1:60:17:13:52:62:67:9e:
a6:b1:08:ec:6f:af:58:99:b3:97:5e:b2:b2:10:fd:
f2:14:77:d2:88:fe:67:ce:81:98:da:39:8c:36:0a:
c6:e4:bb:71:0b:4c:45:8e:29:c6:f8:9e:8a:48:0a:
2b:42:ae:82:a9:65:13:a0:b3:40:34:70:45:8b:c9:
f1:6a:1c:2d:73:08:66:c8:e6:f1:48:56:07:5a:88:
6b:18:09:6e:27:a5:90:e7:bc:78:d0:1e:3a:9d:99:
cb:ec:69:d2:ee:57:a2:7a:0b:79:7c:26:d0:00:8f:
40:44:6e:f7:8b:0a:fb:8a:9f:d1:14:0e:1b:16:14:
1a:28:59:88:93:fc:03:a2:5e:72:75:f1:dc:6e:8c:
3f:88:e7:22:9a:bc:5e:12:b9:c1:0f:f1:28:d7:c8:
1b:95:f6:8f:68:a3:d7:89:b5:cd:8d:32:c7:50:55:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:B6:04:75:B9:9D:19:17:40:67:54:AF:5D:0A:85:4C:61:63:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/742b64da-7450-3181-ad0b-72aa7a34b35f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.71.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:b8:19:d9:79:ea:12:8c:83:4e:83:49:0f:03:e2:62:19:07:
23:36:19:7e:83:71:22:1a:0d:bd:a1:98:b3:81:fe:19:f7:2a:
c6:05:72:2c:57:ab:27:ae:74:ce:22:2b:9b:98:36:20:02:1e:
cd:a1:8a:04:be:15:2b:d2:69:a2:02:da:5a:3c:82:2c:d6:34:
01:b9:9e:d9:37:65:5c:36:2b:b1:ed:f0:e1:24:c7:1e:93:c5:
42:1f:d6:84:b9:58:aa:d8:81:0f:f5:43:b3:af:fe:5b:16:b5:
4a:57:44:2f:09:f6:1c:4e:46:a9:be:fe:1a:56:00:20:ee:60:
bb:21:83:a7:da:4c:de:5d:8b:39:e5:20:fe:4c:5b:51:3a:ac:
04:e5:ef:17:33:2b:4b:ce:6f:e9:b7:51:b4:d1:b0:cd:31:32:
e9:39:ec:ba:1f:8c:7b:76:b8:85:c6:43:ee:f3:27:19:bb:e1:
e2:c3:1b:14:a4:23:8c:ab:62:d1:25:51:1f:21:e4:4c:e6:4c:
b5:3c:c7:ad:74:67:ed:7f:54:21:ab:35:37:7f:20:25:68:d9:
fd:ba:7a:82:57:62:ce:d9:0e:16:d2:f8:f0:78:66:74:b8:9b:
37:d4:19:0f:36:95:f5:1b:b6:a1:fa:d6:0a:2e:b1:fc:54:b8:
04:81:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:59 2026 by rpki-client