
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa
File: 099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa (raw, json)
Hash identifier: blYbmNYl937+D4n/EcTmGItVC9ae+sa3AFrMze4T+q0=
Subject key identifier: 2A:F2:7A:C0:88:E3:CF:05:6E:BC:5D:1A:5D:73:D6:BC:A0:C6:23:C6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F80F3A73535B40E4E04EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 138.88.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f8:0f:3a:73:53:5b:40:e4:e0:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=0a327707-3495-422a-84e5-a398282633c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:2a:dc:f8:64:72:f9:a8:44:b9:4e:ec:a3:
df:a2:a8:9c:fa:7d:a1:68:fa:51:f8:f2:93:60:c1:
5e:68:e8:bc:16:ff:b4:49:48:56:f7:5e:98:4b:0f:
f3:ab:9c:e8:a8:f6:54:73:dd:3b:4b:61:7c:ba:39:
c0:46:00:fc:97:77:ca:15:95:87:29:5f:87:e2:73:
cb:a8:b9:b1:61:53:a6:0d:c8:da:f8:09:63:0f:8d:
dc:e6:f4:d6:20:32:b9:07:c0:6d:23:88:e0:f5:c0:
29:e6:b2:03:fa:f4:d3:89:28:e6:0f:c3:31:05:23:
d8:4d:6c:52:cf:40:cc:b7:11:76:19:e9:c4:dd:9c:
a0:f0:56:d4:a6:52:28:05:f4:16:91:2c:77:b0:30:
32:5e:21:7e:71:e0:13:bd:11:a8:af:54:78:b2:ea:
f5:28:7d:95:88:5f:39:5a:ec:43:91:b4:90:78:6e:
82:8a:d2:2a:97:84:64:d0:13:a9:c5:4c:16:31:d4:
a8:25:33:58:9e:d8:f1:a2:66:8f:f7:47:e8:dc:97:
1b:2b:03:15:6c:30:a0:76:20:05:5d:03:30:b2:6c:
39:2d:35:eb:15:92:96:dc:4f:eb:a3:07:a2:be:3f:
f9:4d:58:72:10:aa:98:20:35:d1:ca:d7:92:e1:94:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:7A:C0:88:E3:CF:05:6E:BC:5D:1A:5D:73:D6:BC:A0:C6:23:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
138.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:7d:56:1b:98:e0:53:1e:4e:1e:c4:bf:e5:d0:51:99:53:9c:
8a:e4:fa:4f:57:95:24:e4:8f:fa:64:93:48:44:6b:b5:0d:ed:
ab:90:53:cd:e0:f0:12:bb:d6:db:78:4f:b8:85:62:f5:a9:31:
48:26:0d:bf:97:fa:33:1f:b7:b0:b0:7d:32:42:77:c7:f7:73:
11:fe:bf:a6:2b:a4:94:93:e4:cd:05:a7:e5:9d:78:3b:94:fb:
2c:b9:06:32:d6:f5:7d:23:cb:ea:43:f1:c5:c4:83:10:f2:fb:
93:6e:6c:a2:55:4c:f0:2a:03:11:0e:0a:d3:5a:29:1a:cc:fb:
17:be:10:a4:43:19:e2:a0:a0:83:d2:f4:51:c2:77:65:25:14:
be:24:9b:38:8a:2e:fe:d1:bb:ea:7c:4f:3f:94:9c:3e:50:18:
7d:95:c6:2e:09:69:21:58:80:0a:63:e7:ce:23:49:9f:e2:89:
45:7c:95:5b:f4:5d:02:6b:fc:c6:8f:a3:52:da:5a:4f:a3:77:
93:02:c2:b7:f6:9f:e5:ea:8e:4d:e1:50:78:10:13:82:a7:05:
87:42:0b:e0:e9:0c:7d:f2:e7:26:06:d5:76:72:ca:79:fd:ec:
52:94:96:53:fa:7d:60:2d:9c:76:8f:16:ab:94:ef:7c:c8:a2:
b7:8d:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:28 2025 by rpki-client