
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
File: 708d4650-7568-32d1-982e-33a33edcf9b1.roa (raw, json)
Hash identifier: 586RnREfKqw+HalR9j4J4hi3f2JZ1hQKd6BYia+9EAI=
Subject key identifier: 92:A7:0C:64:FC:C0:37:2A:51:55:8C:0D:9F:CA:BB:A7:1B:DC:B1:BF
Certificate issuer: /CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
Certificate serial: 010D0C9F4328584BC10BCEEF8449F4BFB1C27900
Authority key identifier: D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 27552
IP address blocks: 69.72.24.0/22 maxlen: 22
198.203.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:ce:ef:84:49:f4:bf:b1:c2:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=903b3e62-ff5d-43d6-8bd4-b32f34130984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:4b:36:02:b5:9e:6b:97:db:ef:81:24:cd:
f6:11:48:73:1a:1d:f9:43:e0:fb:84:70:3a:19:85:
39:e9:0d:cf:9b:74:18:db:a4:33:cc:d9:28:aa:df:
f8:39:07:b8:94:6a:49:1e:22:ce:6a:d5:81:09:98:
ce:42:ab:3d:1f:2c:7e:f6:82:e2:f4:7f:59:44:a0:
72:1b:ea:4f:ba:64:0c:11:38:97:41:b6:55:ed:c1:
38:d8:23:f5:6e:bc:3f:d9:75:b8:be:7f:ba:ed:cf:
c7:56:93:29:6d:c3:21:76:33:e5:39:20:07:19:7a:
94:7e:c8:2a:49:b5:81:3f:c1:8a:eb:e7:b0:e4:1f:
c4:09:83:cc:2a:57:c6:63:3a:73:94:5b:9d:e0:3f:
f2:48:b1:1f:f4:38:47:75:19:7a:8b:7f:b7:f9:6e:
c9:9c:14:d4:6d:62:65:7c:74:95:4d:74:1b:e5:ea:
70:6b:39:21:6a:11:88:c0:31:5d:35:b0:1d:db:60:
bb:c3:d8:2a:d5:21:8e:33:71:2a:76:98:d1:8a:9d:
50:1f:95:0a:37:7b:dd:1e:10:f1:a0:ca:b6:93:4d:
65:ab:e9:57:2b:60:16:30:c9:a4:91:dd:c0:ee:96:
90:d9:66:aa:00:12:54:f5:52:7b:f5:09:14:48:dd:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:0C:64:FC:C0:37:2A:51:55:8C:0D:9F:CA:BB:A7:1B:DC:B1:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl
X509v3 Authority Key Identifier:
keyid:D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.72.24.0/22
198.203.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:2d:9a:4f:d9:c2:3a:eb:34:f2:67:26:42:a3:20:86:38:e5:
98:3c:e8:f2:66:ca:4f:bf:ea:b4:8d:5c:da:fe:c5:ef:3f:e0:
65:75:7e:33:c7:e9:aa:8e:99:59:8c:a4:4e:d4:ab:f2:e0:23:
80:28:87:02:79:73:42:a5:79:2e:dd:29:04:b4:06:57:a8:15:
b9:26:7a:e6:cb:53:2b:62:78:ba:12:fe:a9:57:1b:10:88:e6:
b9:58:85:bf:76:5a:bd:c8:09:c7:7d:15:15:37:70:45:88:62:
f3:93:51:10:bf:83:ce:09:a3:c5:2a:61:24:c6:90:ce:db:6c:
18:83:73:29:ad:d2:db:93:84:dc:48:a3:6f:c7:4a:5d:34:75:
09:2f:49:ff:65:65:26:a3:57:44:e7:ea:f3:62:f3:95:9e:13:
55:af:cb:7a:61:19:d6:1e:1d:c3:8e:d5:1f:27:5d:cb:af:6f:
5b:b8:d3:c9:99:00:93:9f:cd:a5:e9:7a:09:1c:fc:20:8d:0b:
a0:c0:95:2d:76:a3:cb:d7:e8:3a:ba:73:61:8d:0a:9e:5a:4c:
f3:f9:e6:64:ee:78:a8:77:e2:fb:73:66:a9:1d:55:e0:7c:56:
83:45:33:ad:d6:34:2f:f4:da:e7:3c:3c:fd:46:fb:43:92:d7:
8e:df:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:27 2025 by rpki-client