
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa
File: 22ffa8f4-e794-3a66-89df-98333aa3af9f.roa (raw, json)
Hash identifier: ZRjEXusn9/ZAwZssYbSBc2FIOqAHFRnQWetVrvdmyvw=
Subject key identifier: 62:2D:14:A3:C3:DF:34:6E:62:85:AB:FF:FC:6A:80:F4:29:6D:50:6B
Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial: 010D0C9F4328584B84E76EF178FEFD963C3B2880
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa
Signing time: Tue 14 Oct 2025 13:00:37 +0000
ROA not before: Tue 14 Oct 2025 13:00:37 +0000
ROA not after: Mon 12 Jan 2026 14:00:37 +0000
asID: 14618
IP address blocks: 64.71.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:84:e7:6e:f1:78:fe:fd:96:3c:3b:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
Validity
Not Before: Oct 14 13:00:37 2025 GMT
Not After : Jan 12 14:00:37 2026 GMT
Subject: CN=7c437c66-0f3b-4aa1-9a58-9693e3a01e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:bc:15:70:99:17:eb:76:cb:ee:29:1a:9a:
11:25:39:37:a7:bf:48:66:b6:a1:95:62:4d:a9:6c:
d4:95:b1:47:29:dd:ae:eb:3a:5c:85:d0:94:63:23:
b9:35:e1:83:07:f3:f1:ad:bf:06:67:40:32:ee:48:
77:ac:3c:5e:f8:53:d2:50:4d:ec:97:7f:9b:8a:56:
4a:47:6b:3b:47:8b:66:c3:1d:0d:b3:71:a0:d8:a2:
a0:52:ee:1d:c9:29:6c:6a:be:66:5b:df:81:c3:48:
13:3f:67:fe:47:a3:1d:1e:77:3a:ec:c1:5c:3d:a8:
39:8a:d0:c2:2b:da:f0:e7:50:f7:a2:f5:e4:2d:d9:
19:9c:ee:ba:ed:e4:97:83:1e:53:62:fe:8d:94:fe:
2f:bc:20:62:d6:e6:d5:c5:72:87:2b:84:b4:90:19:
20:f2:64:ce:d8:cf:15:47:ab:0f:68:a4:e3:69:d8:
15:76:2c:bc:35:c5:af:df:2b:5b:10:4c:c7:b9:e3:
bd:e2:01:f8:8e:bf:01:38:bc:69:3f:c6:c5:08:ae:
d2:aa:72:37:1a:2e:c5:64:5c:65:ca:65:1e:b1:f8:
c1:7a:73:d7:31:c8:cc:8c:2e:71:cd:f7:e6:3b:57:
e7:69:dc:11:de:96:52:0b:ce:00:f6:43:e8:8c:6a:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:14:A3:C3:DF:34:6E:62:85:AB:FF:FC:6A:80:F4:29:6D:50:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
X509v3 Authority Key Identifier:
keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:06:d8:09:c4:b0:cc:c2:83:53:f8:a5:41:c0:3d:f4:c8:9f:
fa:d1:b8:1b:26:bb:d7:bf:e5:ac:47:a7:e4:15:dd:92:c0:87:
b9:78:d7:e9:95:96:24:d3:f3:6c:30:c2:0d:5f:95:8d:40:f2:
b3:e2:08:36:84:96:99:ae:c5:d8:e0:da:17:b9:62:89:20:dc:
bd:a8:ae:65:f7:95:8b:da:20:ce:89:31:3f:ee:06:b8:95:10:
9e:bd:ec:ce:7a:15:43:e4:81:06:bc:95:7a:9c:58:69:a9:1b:
f0:e6:9b:23:47:aa:c2:a2:72:fb:5c:3d:24:bd:b5:6a:f5:bd:
04:93:d6:31:0a:e4:49:68:54:c6:af:f2:62:fe:24:3b:db:02:
df:fb:ef:81:36:d1:41:ec:a5:56:2d:c0:84:2c:69:54:84:8d:
e4:79:fc:93:58:a8:b9:61:31:5f:c2:a9:bb:7b:91:28:82:09:
f4:af:14:62:ec:ef:88:23:0f:cd:22:4e:7f:b6:af:8a:04:94:
a8:2d:5a:4a:33:df:f2:75:4e:15:41:43:dd:1d:af:da:14:d0:
cc:ba:31:82:e3:fa:f9:8b:dd:a8:e2:27:dd:cf:98:d6:11:aa:
79:68:23:f8:cb:54:5f:5c:39:6b:b3:24:1c:89:a8:a9:b2:38:
05:d5:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:12:53 2025 by rpki-client