
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa
File: 7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa (raw, json)
Hash identifier: IauCgJyGMEzYfRtwFK9r2MBCHuqCbyGttP9WrAmB8Og=
Subject key identifier: 06:91:F7:9D:60:D8:50:02:CD:98:94:19:22:65:99:DC:9E:17:CE:73
Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial: 010D0C9F4328584BA7CCE44ABCF6E37ABF52F280
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 22709
IP address blocks: 72.11.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cc:e4:4a:bc:f6:e3:7a:bf:52:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=da96a6fd-bab9-446f-a4e4-b2d42f73137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:6f:01:33:1c:12:56:83:5a:71:a1:b8:7d:
18:a5:e0:3a:d8:84:d7:9a:63:d2:2f:57:47:72:83:
33:a5:63:fa:97:f2:4b:bb:5d:04:75:76:ae:bb:15:
13:c8:05:48:26:d0:f7:99:e8:0e:97:52:bd:17:c0:
25:ad:36:65:65:f0:bb:ac:c2:30:4b:d8:19:ba:c5:
90:a3:fc:cb:c1:26:05:59:c9:fa:66:f8:34:99:27:
38:25:4b:2b:01:77:c3:02:a1:a1:58:20:25:55:d1:
18:ba:6d:e6:c5:e8:c5:29:c2:f6:8f:a8:f2:ec:ee:
1e:03:e8:e4:ca:20:42:e6:44:0c:e0:0a:ef:35:2c:
35:c5:ec:56:51:69:29:64:b9:77:d7:50:f0:7e:10:
47:a8:fd:ae:d5:d4:e5:2a:a2:54:87:b7:d6:94:d6:
b7:8f:7f:d5:6b:2a:82:ad:cf:d0:14:01:36:5e:c0:
26:eb:4d:bc:f1:a4:a4:b4:cf:39:f2:3f:c8:38:80:
08:47:c3:b3:b7:76:43:20:86:5a:e5:d3:48:07:78:
f5:35:a7:6b:7d:45:8b:62:19:53:16:44:78:69:85:
cb:69:b7:53:6e:03:04:9e:92:12:36:bf:e4:51:53:
2c:82:92:d2:d1:74:b7:63:52:61:75:12:e3:9a:90:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:F7:9D:60:D8:50:02:CD:98:94:19:22:65:99:DC:9E:17:CE:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
X509v3 Authority Key Identifier:
keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:c5:86:2a:c9:21:75:c2:4b:ed:37:dd:b4:82:f3:de:29:95:
6e:35:bb:15:28:08:38:9c:9c:d3:2c:64:c8:d7:2f:ee:b1:12:
76:8d:83:75:a3:88:6e:00:89:c3:05:0f:f6:64:4a:32:5e:17:
73:a8:45:fb:09:7e:e7:6b:af:17:f2:6a:a1:dc:bb:66:f4:ca:
c5:58:f6:16:23:ce:83:ef:ff:81:03:21:a2:dc:6b:88:4c:9c:
42:55:65:5b:fb:51:ed:f4:a1:96:55:54:e8:8a:d6:19:a7:34:
2f:cf:3c:7f:05:4e:0d:99:1f:e5:b7:5f:da:01:d3:96:c0:82:
11:3a:9a:9b:b1:b1:fc:b1:33:6b:c8:3f:c1:65:fe:68:c2:fb:
de:d8:b0:1b:35:f5:65:4e:b4:ab:44:d7:bb:3d:22:a9:ca:ae:
2b:32:b6:46:e2:a0:3b:ee:b3:44:a3:42:2f:f5:81:23:eb:f1:
32:01:b8:e9:a1:f6:90:4f:64:b8:02:d4:70:71:ea:a2:db:25:
21:d7:2f:49:97:3a:61:60:74:ab:6a:aa:db:0e:06:40:af:f1:
93:c2:8e:96:08:48:e1:99:81:bd:23:c8:b6:e3:a3:a5:27:84:
e8:b7:ea:d9:c8:18:56:fb:91:c0:75:d1:db:7e:46:d4:fb:38:
aa:5e:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:10:17 2025 by rpki-client