
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
File: be735685-067e-32e1-980d-0d33feb69b8b.roa (raw, json)
Hash identifier: y+22GCmlvVme2o5KARfwyf2BQFGOYtCkLH7iMSLjNYo=
Subject key identifier: A6:64:E0:55:38:70:68:E5:4A:98:F8:46:E3:D7:06:99:BA:34:91:D2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584F90A3105D15567BFEBC751380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
Signing time: Tue 20 Oct 2026 13:00:13 +0000
ROA not before: Tue 20 Oct 2026 13:00:13 +0000
ROA not after: Mon 18 Jan 2027 14:00:13 +0000
asID: 701
IP address blocks: 96.233.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:a3:10:5d:15:56:7b:fe:bc:75:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 20 13:00:13 2026 GMT
Not After : Jan 18 14:00:13 2027 GMT
Subject: CN=bc164588-721c-45c8-b6a1-b3610e9aba60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:e3:7d:a8:50:9c:aa:b8:3f:4c:f6:bf:d6:
12:56:e4:7c:88:a8:ff:d5:bc:85:99:00:98:12:d6:
79:d0:85:77:a9:c0:f8:3c:ac:1a:63:32:1c:09:83:
91:30:11:d9:43:cd:58:2a:35:ac:34:24:13:6a:66:
2d:f4:c4:c7:7b:1d:97:d2:37:71:a6:b0:07:cc:a1:
1c:b1:d4:02:4a:91:28:d9:a8:c4:2e:37:02:c4:22:
62:99:fa:81:b8:5b:d1:67:26:ef:0a:16:28:36:85:
a9:18:1c:13:14:ce:7f:c6:f3:de:12:37:c1:ad:a8:
9f:75:29:b3:3b:0f:da:86:48:1f:47:32:ee:3a:1a:
0d:5f:68:cf:ba:53:56:4c:6f:0f:8a:c0:4e:27:bd:
3e:6b:9a:62:60:a5:58:68:72:e6:e9:99:cd:8c:95:
30:74:c8:a2:ad:61:63:1b:a1:48:9b:29:ac:d4:04:
bb:8f:33:74:60:9b:86:98:5b:be:09:c0:97:f3:f5:
0f:c9:ba:e4:ff:d7:39:72:ed:10:cb:46:e7:d2:56:
9d:e9:14:52:49:a0:94:6d:25:e9:82:bd:02:b9:84:
9c:21:71:b4:5d:d0:f0:bc:a9:a3:fc:c6:4d:f4:71:
79:f0:cb:f8:4b:b9:77:33:4f:76:68:6a:d0:3a:ca:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:E0:55:38:70:68:E5:4A:98:F8:46:E3:D7:06:99:BA:34:91:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.233.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:12:31:1c:e6:cd:b8:26:d2:51:28:06:1d:b9:23:6e:c1:99:
66:02:4a:08:6f:67:2b:bb:08:d8:5d:65:fc:17:2f:98:bb:6f:
d0:8c:ec:32:44:57:b5:a1:65:18:23:25:00:bd:2a:71:ea:5b:
cb:da:d7:5b:9d:a1:96:0d:1b:2e:02:07:b1:b4:09:43:ed:b0:
99:f0:ae:c9:5e:b3:c3:63:c4:e6:25:28:6f:2d:e8:c1:0e:03:
0b:93:da:52:94:1b:14:2e:6e:66:59:4d:63:60:84:44:99:9a:
92:dc:96:be:f3:b2:2d:66:d7:e0:68:34:02:14:ef:b2:2a:89:
66:cf:c8:92:4f:bb:47:8b:28:cf:8d:20:10:25:fd:e5:85:ab:
4c:b2:01:5b:8d:27:83:89:55:61:a5:01:69:18:5e:94:8a:e5:
32:6b:57:06:ba:5d:fa:09:ba:a3:31:8d:10:fa:8a:98:2f:b0:
dc:e8:13:96:83:dc:f8:a5:53:56:2f:00:a0:6d:88:f0:7b:6f:
99:26:c7:ae:71:59:e0:f1:52:39:5f:79:ad:40:0e:68:ac:95:
b5:db:c0:bf:57:c1:a2:56:07:14:c2:61:83:f1:17:7f:a9:0d:
ff:ae:df:4e:b3:dd:82:17:cd:3b:39:cf:9b:1d:d3:18:c0:ef:
8a:00:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:41 2026 by rpki-client