
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8aefb339-f70c-3675-9a16-4ab14b1c46bf.roa
File: 8aefb339-f70c-3675-9a16-4ab14b1c46bf.roa (raw, json)
Hash identifier: YZzz5kw+QPgoXWeS9/GUcFURtN95Ik6R/EXfrNzEhWA=
Subject key identifier: 86:0E:EF:1D:11:49:8F:3D:92:D2:30:8F:1D:B7:2D:2E:D7:39:E8:99
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584BA8C84C3DDFD0610EA98A6740
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8aefb339-f70c-3675-9a16-4ab14b1c46bf.roa
Signing time: Mon 27 Oct 2025 09:27:05 +0000
ROA not before: Mon 27 Oct 2025 09:27:05 +0000
ROA not after: Sun 25 Jan 2026 10:27:05 +0000
asID: 31713
IP address blocks: 65.72.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a8:c8:4c:3d:df:d0:61:0e:a9:8a:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Oct 27 09:27:05 2025 GMT
Not After : Jan 25 10:27:05 2026 GMT
Subject: CN=68ac75fd-2db9-48c8-a88b-97eca0d56e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:ca:ab:61:1d:09:a9:38:6a:8d:88:a9:2c:
d4:d7:2d:69:11:ef:fc:ac:bb:ea:24:26:71:f3:03:
a9:7e:64:ea:77:4c:aa:f7:b2:18:52:10:a2:1f:a6:
7b:87:35:d8:21:aa:fa:39:0c:35:bb:81:77:77:92:
fd:5c:34:2f:73:d1:2d:c7:d8:fc:e6:38:90:3f:27:
fc:48:2d:ae:52:86:64:b1:29:14:bb:a8:42:00:b9:
31:be:cf:b9:3f:1b:ed:e3:d4:d7:37:14:94:b6:f7:
92:32:36:e1:23:93:75:15:7c:da:a9:9d:f4:66:b6:
3e:12:52:75:76:bb:f5:0d:dc:aa:f5:86:6e:f1:5f:
5d:61:92:1d:7b:17:a2:dc:1b:bc:24:f3:af:44:6c:
a8:e7:6e:3a:83:69:d0:79:4b:7b:4e:a3:c7:b1:73:
58:4a:45:ae:87:9c:ac:a9:1e:83:1c:ef:cc:19:fb:
3d:4a:15:e0:ae:80:7d:fc:01:0b:dc:c4:72:b0:ef:
a2:3e:b9:f3:bf:f0:e6:c1:c8:08:a9:9c:d1:2a:93:
06:d1:e5:bb:c8:04:10:65:16:f0:b0:d6:dd:13:7e:
36:0c:f3:0e:ba:b5:d0:e3:be:f1:6d:9c:a1:b5:20:
69:fe:92:1e:9b:c9:af:26:18:42:92:ad:ce:ff:7f:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:EF:1D:11:49:8F:3D:92:D2:30:8F:1D:B7:2D:2E:D7:39:E8:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8aefb339-f70c-3675-9a16-4ab14b1c46bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
65.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f4:f4:02:99:9f:1b:f2:00:60:84:eb:3a:e9:2a:f3:6b:75:
fa:cd:56:d4:44:09:60:72:dd:3a:4b:bc:34:ea:7a:4e:fa:62:
4d:22:84:d8:f1:12:93:f6:0e:bc:94:34:7a:9e:cf:d9:10:ab:
25:20:71:fe:04:71:67:73:be:04:bf:b6:07:fc:ff:40:71:42:
b1:b5:05:c3:8d:30:ec:7b:7a:3e:56:e6:9b:3e:24:2c:55:99:
dc:6c:da:ce:60:1f:4c:34:c2:13:a3:6b:ef:0a:6f:86:5f:9e:
a5:9a:74:71:6a:ab:2a:49:21:5b:e8:61:ad:58:da:56:bc:13:
34:bb:a0:4b:4b:3f:aa:3e:24:11:4a:8d:4f:fd:58:be:79:3d:
35:e1:75:86:77:77:63:27:ac:1d:ea:ea:2e:02:b1:59:f2:76:
b5:5e:ab:14:2a:12:a1:db:64:b7:e1:a9:97:d6:e2:ff:4e:e5:
29:59:5d:ad:60:36:a2:71:67:d5:01:23:e5:57:22:35:07:a0:
b7:1c:04:fb:48:c7:d9:86:39:99:73:2f:be:ee:eb:7e:3f:b9:
ea:ca:69:08:19:3e:c6:f5:06:cb:65:6f:b1:3e:9e:41:1a:2f:
a6:1c:96:c3:39:2b:32:f1:33:01:74:ea:3d:2c:a0:a9:44:0b:
a0:63:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:14:53 2025 by rpki-client