
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
File: 933cd287-75bf-387a-83e6-d85b86aba33d.roa (raw, json)
Hash identifier: /eQ8XwEnlUyFreUgG+onbBcVrNgDx+kEkyLDN65BPbs=
Subject key identifier: D0:E9:74:72:27:F4:26:F7:6F:E0:83:7C:CC:6C:7F:A0:0D:2D:51:D5
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584B9E07B5673A0665B7283E7AC0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 2734
IP address blocks: 66.35.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:b5:67:3a:06:65:b7:28:3e:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=0b9b9864-fb11-4cc1-9cd4-3e27536a6ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:91:e7:ae:b9:f2:dd:8e:2f:9a:76:18:8e:
00:99:ed:a1:54:94:68:d9:d4:fe:06:e9:50:e1:65:
d7:4e:92:29:0c:e7:8a:b4:1d:6e:89:b6:5d:87:1f:
e3:e3:4f:e9:77:de:2b:c8:61:e0:3f:3a:3b:ab:ee:
ae:72:48:a8:98:37:00:7a:96:ab:a0:f9:02:cd:73:
2b:79:e2:59:06:b0:b5:b8:71:50:b9:11:3c:13:1e:
46:94:20:76:08:93:bb:82:5b:d7:23:0b:76:3d:54:
73:27:4f:42:02:e0:e9:6f:c0:c0:30:b0:70:b0:df:
c2:56:f2:8a:62:bf:f5:d1:7f:b2:f7:82:11:ba:5d:
b2:b7:f0:4a:14:04:0d:9d:9c:ac:2d:d8:1b:03:38:
34:37:b8:c9:83:f8:a2:db:e7:4a:90:48:01:c8:88:
a4:c9:c1:30:0a:26:f1:14:3e:19:d8:14:57:70:42:
a8:27:bc:ca:bc:3f:94:e7:30:8d:1a:80:a9:ac:ec:
2f:15:f5:3c:6a:c7:d0:b4:8d:86:f3:04:fe:c0:d5:
f9:27:49:32:ea:34:73:ae:d3:ff:be:3c:24:7e:66:
ca:8b:c0:06:2b:4a:82:8d:e3:e2:77:f1:6f:43:b7:
d1:70:85:0a:65:0a:26:6d:64:12:c5:d7:68:e4:f6:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:74:72:27:F4:26:F7:6F:E0:83:7C:CC:6C:7F:A0:0D:2D:51:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:86:a9:16:f8:b1:6b:cb:3c:db:05:ba:0b:9c:df:af:1c:b1:
ba:6c:8c:3d:ff:83:f4:22:03:5c:92:b3:f9:6e:20:6e:e0:08:
d5:ad:6d:3d:bd:77:29:6f:57:00:d3:28:75:8e:8f:41:dc:a5:
06:5e:be:82:0f:51:70:fe:ad:e0:7e:bc:ba:63:3b:66:64:98:
8b:45:17:f0:35:cd:80:44:29:e1:37:2b:07:69:fe:6f:85:0c:
03:f3:c3:58:5a:af:b5:79:c6:31:b1:4f:aa:03:be:96:55:4a:
cf:3c:a2:15:bc:6c:4e:17:0d:c6:8b:eb:a2:17:be:13:ce:69:
bd:57:e3:48:ef:84:f5:41:a1:f2:6c:bb:e3:9e:bd:3f:89:39:
1a:8c:50:98:0d:41:d2:c8:ba:be:fc:6b:95:5e:f2:1a:6b:96:
65:87:63:ea:03:6b:d6:b8:60:d3:74:6d:e6:ad:8d:83:59:89:
e2:7a:14:a1:fd:90:a8:39:45:d4:86:31:c4:2c:71:5b:7d:d7:
5f:94:be:59:e2:ff:0b:b5:61:7a:12:d1:24:d7:6c:8a:ac:be:
e9:3b:11:4d:c9:03:91:04:c5:4a:56:e4:2f:2b:d8:9d:19:6f:
60:3e:8a:f5:4a:6b:80:84:2d:d7:6d:be:a4:bb:e7:ae:cc:ad:
a1:2f:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:17 2025 by rpki-client