
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
File: 88630cac-7d18-3b8e-8847-9847e81f16d8.roa (raw, json)
Hash identifier: HelLDtTtwpGv3WfSWMTpf5SxYlHI/IdUw2v7tiFUPrE=
Subject key identifier: C6:D0:7A:84:57:C3:59:F5:66:88:EB:89:B6:0D:41:0C:41:15:78:8B
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584AE89127EFE3FBBFF44BAD0280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
Signing time: Tue 19 Aug 2025 13:00:40 +0000
ROA not before: Tue 19 Aug 2025 13:00:40 +0000
ROA not after: Mon 17 Nov 2025 14:00:40 +0000
asID: 29538
IP address blocks: 128.1.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e8:91:27:ef:e3:fb:bf:f4:4b:ad:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Aug 19 13:00:40 2025 GMT
Not After : Nov 17 14:00:40 2025 GMT
Subject: CN=03162e3b-1871-45e1-bd51-ea6b3de741cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:53:27:a8:25:7c:88:f5:c4:2b:a6:95:57:
37:4f:c8:23:7e:4d:e3:6f:9c:15:48:a6:c3:95:d9:
03:f5:5d:97:1d:95:fa:98:32:67:d7:6b:ba:03:7b:
d8:d2:7c:12:08:df:38:c8:d9:14:22:32:6b:27:33:
1a:8d:b1:5e:6d:a1:71:b9:f4:b6:dd:d1:f7:f8:5f:
94:b2:bb:b1:4b:94:ec:c7:09:50:87:62:5c:c9:0f:
54:08:48:ba:61:dd:32:02:a4:d3:2b:40:d7:93:f8:
05:5e:c3:b0:b9:08:06:3c:10:86:bf:2e:62:ad:5e:
12:7e:d4:7c:84:c4:58:86:6d:15:d0:13:02:05:78:
17:50:35:cb:94:df:54:e6:ab:48:3f:68:09:98:16:
d4:9a:49:c4:ff:55:20:d6:2e:ae:20:20:de:d1:bb:
c3:a2:15:c2:ed:97:1b:b9:79:91:5f:1e:84:23:e1:
ec:55:b8:8c:58:44:b4:30:30:1c:75:fc:1c:b9:e9:
94:59:6e:da:74:75:1a:65:a8:9a:10:2b:28:89:16:
29:59:11:d2:9a:91:44:d6:43:1f:34:ee:61:a9:31:
c4:29:3d:dd:ae:51:4c:0f:dd:03:2b:4d:cf:c9:c2:
da:97:03:fc:e4:a6:28:f9:97:63:af:00:8d:45:42:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:7A:84:57:C3:59:F5:66:88:EB:89:B6:0D:41:0C:41:15:78:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bf:99:76:be:1f:c4:5b:00:bb:50:f9:38:79:2e:25:21:ba:
1c:91:bd:dc:8c:75:aa:6c:ee:e3:f3:51:16:d6:9d:05:f4:c0:
1e:00:96:81:a0:d3:cd:60:ef:2f:77:c7:34:f7:62:a5:6f:fb:
a8:ce:00:67:b0:be:73:9f:f8:64:c8:9b:d1:ae:3d:31:a4:2b:
cd:b6:bb:b6:da:05:ce:2d:4e:64:c2:7d:3c:42:db:4b:39:11:
e5:97:09:23:5c:84:a2:c9:f9:67:6c:57:13:c5:5a:9a:58:f3:
89:9f:1e:9d:1f:c2:0d:11:a1:29:66:4b:81:85:61:af:66:51:
dc:3d:79:4e:71:8f:90:85:62:bc:4c:e4:73:7a:d2:e4:da:6a:
39:f4:c2:87:5c:5f:2c:71:ee:14:e6:c1:17:f1:6f:c3:38:50:
ef:96:75:db:f0:3c:d5:54:93:fa:15:5e:48:12:fa:7d:c2:fa:
01:4b:bc:35:5d:79:d6:ac:c6:a1:94:69:fb:a2:f3:5d:89:8f:
b4:d0:52:f6:cc:33:04:ed:d9:a3:5b:0d:c2:1d:0a:9e:32:79:
5f:33:ab:27:a9:90:d9:a7:b1:22:0c:83:96:07:85:3b:0c:65:
32:6c:41:91:4d:87:32:67:6a:b7:22:03:2f:ad:7f:c4:b2:6b:
d1:35:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:09:46 2025 by rpki-client