
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62b99356-120b-3e04-859a-ce37a7f7b7d7.roa
File: 62b99356-120b-3e04-859a-ce37a7f7b7d7.roa (raw, json)
Hash identifier: Os8xEEjHau2z3dgJBMQhpfPS4kobtI1WGmXC1tlK6Ks=
Subject key identifier: 9B:66:1C:67:70:FD:B3:DE:F8:5A:B6:24:12:19:2F:F5:0B:6F:23:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BABFD18D70C4A958A8A4EAA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62b99356-120b-3e04-859a-ce37a7f7b7d7.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 24319
IP address blocks: 72.247.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:18:d7:0c:4a:95:8a:8a:4e:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=5210685f-68e0-40e8-86d7-45a5ac7d574e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:3e:50:c8:a1:60:0e:13:c0:f3:d1:1a:e0:
17:b1:4e:d8:f8:e9:c3:8d:96:c1:82:57:dc:f8:cd:
1c:07:0e:95:f0:4f:d7:2d:ea:14:43:11:55:61:0e:
eb:64:a4:22:13:40:c6:d7:ce:8c:d2:40:2d:ab:b5:
53:17:5c:57:a6:6d:d5:6a:76:6c:6c:23:1b:95:ed:
26:79:1a:b3:18:f5:64:c6:bf:60:cc:8b:37:48:68:
95:95:45:5d:5a:fe:fc:76:2f:47:f9:78:fc:f7:08:
ea:d0:46:4b:ef:71:d8:cf:8e:fe:1e:de:eb:ed:43:
17:5c:3b:a2:cc:f6:ed:bb:a4:3f:d1:55:1a:b8:3d:
c3:79:d5:79:25:ea:eb:3e:4b:f8:6f:ea:42:8a:fd:
ce:e4:77:61:1b:aa:3b:e3:21:7a:a8:f3:67:70:bd:
d1:9e:d0:34:48:de:54:dd:9c:31:70:05:81:ae:81:
9e:38:33:ca:66:49:ec:5e:6a:83:e5:98:ec:15:10:
0c:01:eb:19:b7:2e:ce:ff:79:c8:fc:ff:00:84:15:
ff:87:90:e2:c5:4e:05:bc:e5:fe:b8:7b:0c:36:b0:
ac:10:bb:ac:32:1d:80:6e:d0:99:09:3b:e6:08:f2:
14:5d:0f:85:bf:59:ad:7e:df:8e:cd:ab:31:cb:b6:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:1C:67:70:FD:B3:DE:F8:5A:B6:24:12:19:2F:F5:0B:6F:23:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62b99356-120b-3e04-859a-ce37a7f7b7d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:13:0c:03:8d:aa:0e:c0:bd:00:c2:08:0d:57:4c:b5:09:dd:
2c:71:22:86:1d:dc:89:b0:f1:38:da:d9:67:2b:22:13:dc:89:
a4:10:69:ed:ba:d4:d0:85:6c:23:26:30:3a:68:cb:9f:f1:07:
8f:ef:6c:e3:d7:42:53:a2:a4:60:90:4e:57:36:21:74:68:ce:
c9:50:94:0a:65:2f:a6:78:ae:51:c4:db:aa:b5:95:e0:f7:80:
6c:29:1f:5c:21:c6:63:bb:ba:00:0d:22:7a:08:e7:36:79:d7:
f9:16:a2:21:5c:2d:4b:58:78:8e:0c:fe:41:cc:26:b8:61:db:
82:01:12:bf:a5:1f:7b:ac:cf:43:50:9a:e4:5d:59:b9:b9:d0:
57:0e:52:59:f1:6c:22:e1:cf:db:5d:4d:e2:ff:d1:fc:6c:7b:
b3:2a:c9:ae:08:74:61:70:e4:46:fd:fd:fd:eb:c0:5c:5f:2c:
40:74:95:25:30:d5:0e:06:d4:91:69:dc:1f:51:b2:71:fe:72:
ff:f0:fe:d0:99:c0:01:96:ed:d6:85:70:89:7a:d1:9e:0a:e5:
03:7c:0b:ed:46:97:8b:c6:44:8d:c2:ea:59:90:bc:f1:85:ef:
a7:4f:ec:fc:f6:90:bd:8a:96:47:eb:fc:73:6b:d7:14:8a:11:
fe:1b:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:14:11 2025 by rpki-client