
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc87df81-022f-354b-82eb-41198dd0e49a.roa
File: dc87df81-022f-354b-82eb-41198dd0e49a.roa (raw, json)
Hash identifier: yu2PvNnJwcpKuUhpBqQngFMRWQadLAgOvRM41s30yfE=
Subject key identifier: 0E:B8:71:70:9B:06:D2:FC:4A:72:3A:E7:56:65:50:17:09:7F:E1:E5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584EEEB760DDDE7F1D98E19D19C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc87df81-022f-354b-82eb-41198dd0e49a.roa
Signing time: Sun 23 Aug 2026 13:00:12 +0000
ROA not before: Sun 23 Aug 2026 13:00:12 +0000
ROA not after: Sat 21 Nov 2026 14:00:12 +0000
asID: 701
IP address blocks: 72.78.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ee:b7:60:dd:de:7f:1d:98:e1:9d:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 23 13:00:12 2026 GMT
Not After : Nov 21 14:00:12 2026 GMT
Subject: CN=bd8d0a17-51dd-46cf-b654-54e463754018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:a1:6b:98:e5:d3:b0:2b:13:e8:fa:51:55:
c7:4e:23:6b:f7:91:cd:89:b5:45:e0:12:b7:40:5c:
d6:18:54:b3:98:d5:2d:29:a9:cc:ee:81:bd:c1:31:
4e:ba:df:b1:e2:97:92:7b:23:fd:61:33:3e:b2:1e:
3f:b4:a1:93:46:37:a4:a7:76:8f:98:e4:bb:17:b1:
85:17:59:8f:b6:6d:bb:4f:08:16:04:e9:28:05:73:
28:97:f0:53:0e:03:a7:1e:13:a3:5b:90:f7:ff:f5:
90:75:f6:67:c9:98:59:11:88:ca:aa:ff:35:f7:ee:
00:3c:9d:b7:99:dd:10:15:a9:1b:a5:9b:43:05:66:
35:31:de:bc:fa:ec:c5:f4:0b:47:df:5a:2a:2e:0a:
66:05:e1:07:46:14:b6:60:c0:48:dd:49:e4:b3:aa:
8c:94:d6:f3:8e:ab:5e:7f:3d:1a:e0:d2:28:a1:99:
2b:49:57:ac:d3:61:3a:69:30:90:b1:85:10:44:b9:
cf:27:22:f6:d0:f6:ce:35:98:79:e9:ba:a6:67:4e:
9d:e1:3d:49:ee:40:9c:28:99:b1:91:d3:00:72:ba:
a9:e5:ea:6e:e6:93:7a:84:c9:86:ca:0b:15:d2:b1:
62:54:b8:b7:91:c5:d6:fd:6d:20:70:97:b6:80:76:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:71:70:9B:06:D2:FC:4A:72:3A:E7:56:65:50:17:09:7F:E1:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc87df81-022f-354b-82eb-41198dd0e49a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f9:40:a6:18:a6:d9:47:57:89:b9:ef:b1:09:49:03:e5:bb:
20:95:23:3f:8e:97:4f:90:61:26:de:43:b1:65:a1:4c:f8:b3:
ff:43:ea:85:7f:50:bc:45:b2:74:d2:e2:d9:69:44:d9:66:c9:
b4:ab:a5:42:b5:e6:c4:6a:d9:55:bc:3e:80:c7:85:eb:e4:6b:
01:9a:c2:b6:e2:3f:16:d0:ec:04:e8:ef:0c:03:fe:55:2d:e9:
d5:40:cf:05:f5:ee:0a:86:82:3b:85:c0:d6:48:c5:8b:b0:7b:
c2:ca:f5:3b:87:78:4f:0e:1e:2a:db:f9:d4:11:76:fe:57:a8:
b8:44:3a:59:60:25:c8:90:fc:d1:90:81:97:17:4f:d7:d0:2f:
8b:1b:75:ff:32:ed:fc:da:d4:a1:7d:f2:99:d9:51:89:53:84:
b2:14:ac:ee:95:8a:b0:03:a7:1b:70:4b:cb:b8:d1:70:55:26:
40:94:03:26:44:2f:b7:23:32:9f:25:7e:a7:e9:ec:fe:94:94:
18:67:bc:bf:9b:a2:2d:9b:3b:50:d6:80:5e:dc:95:0b:f7:7e:
e3:4d:8a:b9:90:af:61:57:37:99:29:5d:61:6f:5c:eb:bf:48:
17:07:c1:ea:10:af:2f:f8:13:36:a9:e1:5e:17:ac:ca:fd:61:
00:66:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:44:14 2026 by rpki-client