
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
File: ba243f99-0c02-3caf-abae-a7672e161f0a.roa (raw, json)
Hash identifier: rLP9KpnhcK/3eD25FJ8KNa1AymEIPF193z8fBfG6RSE=
Subject key identifier: 09:FF:E9:72:AD:38:6F:D0:2B:AF:DC:13:CD:97:B8:44:04:FE:FC:62
Certificate issuer: /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial: 010D0C9F4328584B9E07978C2A9ED0C36A84FE80
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 18875
IP address blocks: 64.66.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:97:8c:2a:9e:d0:c3:6a:84:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=0646c579-ebb5-48f9-a516-a8d289977144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:98:3d:d8:23:1c:57:25:12:b6:40:81:5c:
94:0e:f3:b1:4f:ef:9d:06:22:d3:10:ac:3a:45:87:
56:5b:f1:0f:1b:c9:41:d7:c1:39:f0:56:25:2d:c0:
d4:47:33:f1:0b:e5:5c:1c:ab:28:ff:55:39:b4:01:
b7:75:8f:1f:92:99:3f:98:8e:f6:87:7c:3e:28:79:
ab:5a:00:07:52:61:5e:d5:f1:30:7f:87:17:bc:d1:
0b:13:ea:a6:17:9e:93:7b:c2:0e:50:28:31:df:56:
fa:20:07:12:e0:ec:35:42:53:3b:e8:25:69:62:f7:
b6:3e:e8:5d:69:ed:6f:e1:c1:96:a1:e9:74:c2:83:
3c:c3:1a:5b:5a:88:ad:a2:d5:9e:17:d1:6b:7a:0e:
77:2c:40:23:97:e3:0b:1f:b7:df:2c:2a:c1:45:e7:
5b:7a:1a:65:c7:07:66:eb:e5:d4:81:93:27:e2:0c:
a3:b7:17:ba:a1:03:3b:6c:06:5b:c1:a4:58:90:60:
f8:4c:84:f6:74:2e:19:37:ae:5c:f4:de:c7:38:5c:
23:c7:c0:d9:36:7e:79:fc:0e:83:d9:24:83:0b:bc:
6d:55:c2:f8:8d:5c:41:3f:e3:d5:b6:e7:c6:ba:47:
21:85:49:b4:ac:23:c6:1f:6c:cf:5e:1f:6f:2b:b1:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:E9:72:AD:38:6F:D0:2B:AF:DC:13:CD:97:B8:44:04:FE:FC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
X509v3 Authority Key Identifier:
keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
sbgp-ipAddrBlock: critical
IPv4:
64.66.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:7b:d2:da:20:20:b5:4d:9e:10:c4:a6:cd:d4:1f:39:f2:84:
b6:75:9c:17:86:55:1f:3f:4e:6c:2a:57:02:d4:97:f1:e5:a1:
21:d9:8e:ab:c4:28:0d:1d:31:c0:3f:ab:d9:99:0d:51:37:b3:
79:d8:cd:64:e6:b2:c7:a9:85:02:a9:c2:72:07:13:69:c1:a5:
0c:da:f9:4c:64:13:42:5d:5f:01:4d:47:91:77:5a:f7:e7:85:
c3:70:73:06:d7:89:7c:fe:2b:d4:39:f6:40:fa:41:a4:72:0a:
6a:a2:f5:8b:bc:e9:ac:0c:d9:67:e2:82:5d:96:29:bc:bc:b0:
9a:44:b6:b9:3e:49:8c:f7:16:75:19:37:2c:01:38:2f:0b:cb:
fa:13:51:65:4e:f6:36:06:44:e5:79:71:41:78:0d:8e:b6:0a:
53:5f:ed:62:f6:f3:3f:ea:40:01:63:93:ba:43:e3:8c:a2:69:
27:54:45:64:d8:e5:e2:1f:05:71:83:da:19:cd:cd:24:31:ad:
86:95:ec:67:fc:5b:1a:61:f6:b5:57:a9:25:67:50:cd:b6:08:
f5:68:ce:d2:0e:02:75:cc:cd:d9:6a:08:ce:ab:d0:e2:f8:fa:
f2:2f:fc:9c:bd:4c:fb:3e:19:e0:67:1a:97:21:19:4a:53:e9:
bf:4c:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:51:38 2025 by rpki-client