
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
File: 96d8da12-f8f5-3746-a362-c6834b9b3d69.roa (raw, json)
Hash identifier: wMu5rcNE+FQRdcR/xrQ1XI4VLz3Ppljv5vZqXsf5ceM=
Subject key identifier: F2:A4:17:BF:C3:3A:96:5C:3E:C5:76:16:90:E6:E7:55:54:58:80:93
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F90A30DE8CB7C125F43B45360
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
Signing time: Tue 20 Oct 2026 13:00:13 +0000
ROA not before: Tue 20 Oct 2026 13:00:13 +0000
ROA not after: Mon 18 Jan 2027 14:00:13 +0000
asID: 701
IP address blocks: 71.168.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:a3:0d:e8:cb:7c:12:5f:43:b4:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 20 13:00:13 2026 GMT
Not After : Jan 18 14:00:13 2027 GMT
Subject: CN=89ebcd19-3302-458f-9a2c-44cfaa8f0f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:37:c9:f1:82:6a:7e:d7:4a:81:aa:52:25:
39:9c:33:a5:c5:5e:f6:58:b4:a0:62:cf:e0:41:c7:
f8:1b:91:08:c7:0e:11:f4:78:a9:4a:81:26:53:15:
fb:cd:5a:a4:71:30:92:82:56:8e:da:78:c5:52:7b:
22:44:eb:8a:a6:0c:2f:69:77:ed:dd:23:4f:cd:33:
18:b6:5e:fb:6a:26:6b:ad:ee:cf:d5:0d:fd:2f:0e:
0c:76:9c:d7:a7:71:57:05:5e:41:04:c7:a2:39:29:
7b:d7:0e:c9:75:ce:b7:3c:36:63:89:a1:04:cb:7e:
fe:96:3a:7a:ee:80:ab:8d:74:94:50:14:8d:c7:c7:
9c:eb:7c:19:2a:c0:cc:ab:87:35:a9:35:58:7a:2e:
3e:10:14:65:ae:b6:d6:5d:e4:69:8c:78:20:e2:fd:
12:0f:42:df:54:a5:37:53:05:b0:a7:1a:b1:02:d6:
65:01:b4:e2:8e:79:08:05:c4:3f:8c:62:ca:5f:f6:
2f:5e:3d:98:df:07:4b:00:da:65:07:34:c5:f0:01:
04:b5:93:ab:06:59:6f:d5:01:8f:f0:0e:f2:28:17:
a0:98:4f:c6:c2:18:d7:00:b1:17:04:0e:71:31:8c:
61:cd:00:eb:f7:3f:30:52:f1:9e:59:5b:dd:4a:56:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:17:BF:C3:3A:96:5C:3E:C5:76:16:90:E6:E7:55:54:58:80:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.168.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:ab:72:8c:11:e3:cc:87:ca:e7:49:09:af:af:7e:7e:06:61:
76:52:25:d0:c7:06:17:b8:45:e1:d2:7b:40:59:7f:d2:3b:c9:
b4:93:ae:2c:03:67:0f:f8:32:1f:86:a3:ff:ea:c3:17:ec:31:
30:7b:e7:99:69:16:34:e6:35:5a:1e:bd:0c:17:20:e8:67:6c:
24:8b:29:48:e1:13:54:2f:ae:fe:ac:d8:c1:c4:58:22:2b:d7:
bc:36:c5:4d:01:2e:a0:c5:f7:d4:05:6b:65:ee:96:8f:bd:b4:
84:0f:dc:e5:19:23:68:8a:38:5f:fb:1e:d0:f3:6c:c6:3a:b0:
4f:41:35:92:dc:af:19:43:6f:3e:8e:3c:ae:7a:32:b7:e7:80:
18:10:a0:c6:bd:c6:92:17:79:ba:3d:3e:84:e3:e2:e6:97:20:
c5:b4:17:86:64:43:50:71:cf:26:41:5a:b0:a2:20:44:1e:0c:
68:3f:f1:c9:dc:21:c8:84:61:86:c7:cf:23:b6:2b:df:6d:75:
92:d5:10:75:75:0d:98:9c:2c:f2:45:1f:5d:4a:c0:1d:79:ef:
e2:42:ba:f2:f8:11:87:8a:48:ee:dd:4c:5d:5e:be:6a:4f:64:
55:6e:e7:f0:18:56:45:3b:f2:92:54:2b:5b:17:9f:cc:0e:f2:
60:9b:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:04:58 2026 by rpki-client