
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa
File: 0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa (raw, json)
Hash identifier: +pmqx7/E7f12TFKyLhZWscQQdJihq3Dc5C+w11yh3IM=
Subject key identifier: 2A:D1:56:90:A8:3B:6E:98:C4:BA:9D:69:DA:45:04:AD:FC:9A:43:E8
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584AE8912728EF788B959F38DC80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa
Signing time: Tue 19 Aug 2025 13:00:40 +0000
ROA not before: Tue 19 Aug 2025 13:00:40 +0000
ROA not after: Mon 17 Nov 2025 14:00:40 +0000
asID: 62610
IP address blocks: 128.1.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e8:91:27:28:ef:78:8b:95:9f:38:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Aug 19 13:00:40 2025 GMT
Not After : Nov 17 14:00:40 2025 GMT
Subject: CN=bf61cbb8-9a12-4cb7-a1b5-aafe590c4f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:55:10:d2:ae:f9:f8:11:fc:1c:a4:2b:a6:
55:e6:38:02:30:aa:07:36:c4:09:3e:66:97:e5:57:
51:d6:ce:1f:cb:e2:f8:6d:79:0a:1d:40:1c:bc:66:
4a:18:4c:63:91:01:03:18:e8:f3:8a:43:a9:7a:ed:
07:41:94:25:34:44:e6:1b:13:03:27:2b:1b:fb:b6:
0e:6e:db:5a:0c:88:b2:57:8e:27:c9:19:e6:34:df:
15:fc:30:36:b7:8c:cb:7b:cc:c3:0e:51:b5:55:dd:
48:b3:30:91:83:d5:58:10:02:cf:e9:3e:c4:16:12:
31:1f:cd:72:21:95:0a:69:a7:61:3d:93:0e:ea:1b:
81:c0:6d:f0:e4:0a:db:e6:b0:df:19:50:98:81:9b:
fb:e6:87:05:94:f9:73:95:bb:6b:85:65:00:ab:a8:
34:c7:d4:f0:fb:1a:7b:03:28:9f:3f:14:31:e7:b3:
0f:80:aa:24:e2:13:1d:57:5f:9d:3b:ac:67:c1:a2:
e8:04:0e:b0:18:f9:23:b4:61:58:df:1a:3b:4d:cf:
2e:9b:05:06:e3:b8:37:29:95:7e:f9:17:50:ab:09:
e4:68:ae:73:0f:39:b7:1c:23:28:c5:6d:45:03:57:
56:df:32:41:0f:ec:9e:d3:43:6d:0e:9d:ef:9b:ab:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:56:90:A8:3B:6E:98:C4:BA:9D:69:DA:45:04:AD:FC:9A:43:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:65:07:b1:1f:14:f8:db:6a:c0:77:68:08:ee:86:0d:ea:f7:
28:c6:74:c3:b3:37:60:8c:b2:13:e4:81:46:64:ac:67:98:32:
79:b2:40:d4:3f:0a:e9:62:23:f0:9b:95:f8:75:07:0c:ad:b3:
05:04:9b:18:65:dc:0e:7f:09:0d:cb:83:91:e0:fa:f0:d2:79:
f9:64:63:61:ba:69:54:52:e7:84:4c:b3:e5:bc:eb:22:20:b1:
cb:03:27:3f:05:6a:76:4f:45:21:85:13:1b:d5:64:dc:37:ca:
92:3b:aa:14:b2:7f:e1:6e:9c:64:92:e9:0c:70:10:f9:c7:54:
8f:80:2c:57:28:28:e1:76:35:72:73:d2:a2:ac:15:0c:8e:e3:
1a:dc:15:66:ce:a3:37:e1:5e:2b:f7:d5:bc:a1:c7:97:e8:d8:
69:f8:a5:a2:4c:5c:25:08:9c:92:23:8b:19:62:e3:72:cb:6e:
51:ec:8f:5d:c5:a9:e8:be:ae:05:49:7a:8c:05:e7:24:c4:27:
45:e2:99:f0:52:9f:1f:c8:fa:66:5e:e1:aa:00:67:fc:71:4c:
7e:36:41:c0:90:f8:b9:a2:cb:ff:ce:f3:e9:f1:06:13:a9:51:
b2:58:bb:39:a5:c1:42:c3:8e:b8:82:1a:6b:21:2a:43:8e:44:
43:a7:ed:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSco73iLlZ843IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
YmY2MWNiYjgtOWExMi00Y2I3LWExYjUtYWFmZTU5MGM0ZjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEtVENKu+fgR/BykK6ZV5jgCMKoHNsQJPmaX
5VdR1s4fy+L4bXkKHUAcvGZKGExjkQEDGOjzikOpeu0HQZQlNETmGxMDJysb+7YO
bttaDIiyV44nyRnmNN8V/DA2t4zLe8zDDlG1Vd1IszCRg9VYEALP6T7EFhIxH81y
IZUKaadhPZMO6huBwG3w5Arb5rDfGVCYgZv75ocFlPlzlbtrhWUAq6g0x9Tw+xp7
AyifPxQx57MPgKok4hMdV1+dO6xnwaLoBA6wGPkjtGFY3xo7Tc8umwUG47g3KZV+
+RdQqwnkaK5zDzm3HCMoxW1FA1dW3zJBD+ye00NtDp3vm6toUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrRVpCoO26YxLqdadpFBK38mkPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMDc2OGI4MmEtNDlmOS0z
YWE4LWFjNzctOTdkZTk0YmI1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFlB7EfFPjbasB3aAjuhg3q9yjGdMOzN2CMshPkgUZkrGeYMnmyQNQ/
CuliI/Cblfh1BwytswUEmxhl3A5/CQ3Lg5Hg+vDSeflkY2G6aVRS54RMs+W86yIg
scsDJz8FanZPRSGFExvVZNw3ypI7qhSyf+FunGSS6QxwEPnHVI+ALFcoKOF2NXJz
0qKsFQyO4xrcFWbOozfhXiv31byhx5fo2Gn4paJMXCUInJIjixli43LLblHsj13F
qei+rgVJeowF5yTEJ0XimfBSnx/I+mZe4aoAZ/xxTH42QcCQ+Lmiy//O8+nxBhOp
UbJYuzmlwULDjriCGmshKkOOREOn7Rs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:01:48 2025 by rpki-client