
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ae71754-0ab0-334f-be48-b94869011b2b.roa
File: 0ae71754-0ab0-334f-be48-b94869011b2b.roa (raw, json)
Hash identifier: M2JptfbnIarF/FGNsztWzl1pI8lch23j0+Z/b8ySQNI=
Subject key identifier: 8B:C7:E2:B6:7E:F1:B9:22:C7:14:4C:87:51:82:92:3E:CA:33:2E:37
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BA39D321BC5A90F29EB2A8980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ae71754-0ab0-334f-be48-b94869011b2b.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 701
IP address blocks: 208.176.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:32:1b:c5:a9:0f:29:eb:2a:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=c68c3595-d463-4a05-a1ec-aa43c5812da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:e2:6c:58:e8:ba:90:12:9d:9f:16:7a:06:
89:bd:9b:33:de:16:92:27:23:1b:19:71:43:dc:fd:
ef:e6:70:31:2e:4f:37:b0:34:15:e1:57:be:7e:65:
55:69:5a:c4:1e:7c:13:51:0b:a6:e0:b3:96:08:c2:
60:54:13:3e:ed:4c:a8:b4:e6:33:6c:80:e8:d7:db:
55:92:d2:b4:a0:c2:8e:95:5f:17:28:3c:d7:e3:79:
d6:a3:df:60:a4:14:6b:40:d0:4e:40:83:60:0d:37:
da:da:22:e9:1e:97:e4:bd:f0:e9:06:a0:9a:bc:58:
50:43:9a:e9:c4:80:72:c2:06:53:70:d0:97:3d:d3:
7d:fb:7d:af:d2:56:41:5a:30:29:46:d6:b4:4b:a9:
01:9e:7f:4d:74:01:61:0f:90:ac:91:40:a1:0c:a6:
b3:71:d5:94:bc:b3:6c:aa:2b:4c:f7:e1:a5:9c:81:
70:ec:ee:3d:14:7d:0c:f8:4b:a5:42:aa:b8:b0:7a:
b9:ea:f7:c0:e3:8f:4c:ea:a0:55:41:c1:eb:af:36:
0d:6a:a9:2c:0a:78:aa:1d:02:f3:47:4b:ee:7c:42:
f1:a5:52:4e:48:00:fa:00:e6:44:01:b5:6f:61:60:
6a:dd:92:0a:ef:1e:9d:a3:da:d7:75:a7:0d:c1:a9:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:E2:B6:7E:F1:B9:22:C7:14:4C:87:51:82:92:3E:CA:33:2E:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ae71754-0ab0-334f-be48-b94869011b2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.176.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:c4:72:f3:2a:f5:85:be:93:39:b6:ef:98:da:72:d5:6a:e1:
0d:9a:15:67:31:58:f7:32:aa:58:fd:f1:c2:0e:f2:52:86:a9:
0f:4a:2e:b8:83:7f:5f:d7:6e:99:39:a6:1d:1a:44:04:fa:35:
61:00:2e:ed:b9:1d:f5:5a:ac:49:46:ff:e3:45:81:cf:df:52:
0c:0a:aa:ff:ba:32:22:d6:8f:08:39:03:cf:b6:7d:a7:53:f3:
0a:27:f0:55:93:75:0e:f4:22:50:89:a5:63:67:6d:90:a3:24:
e6:ff:ec:26:33:1e:49:c2:34:f5:e1:b3:ac:e9:6f:31:67:67:
48:77:2f:2c:f6:5a:0c:0a:5f:38:b1:24:33:70:07:0e:8c:bb:
9f:42:b1:24:20:5e:80:63:cb:ee:b2:f5:11:19:84:75:07:02:
7a:6d:24:cc:c4:bb:df:35:0f:9c:b1:ee:dc:12:b0:18:44:33:
51:96:85:dc:10:d4:5d:c8:11:67:57:ee:45:7b:1c:d3:4a:63:
7c:b3:a2:e4:71:b4:b4:62:8f:62:7a:98:f6:08:ff:15:d9:06:
0b:94:08:9f:60:c5:23:e9:6e:a5:2a:55:33:25:0b:35:3c:26:
36:e7:05:dd:63:40:d5:dd:8e:f6:c0:97:03:8e:f5:30:06:1a:
08:b3:13:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTIbxakPKesqiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YzY4YzM1OTUtZDQ2My00YTA1LWExZWMtYWE0M2M1ODEyZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvribFjoupASnZ8WegaJvZsz3haSJyMbGXFD
3P3v5nAxLk83sDQV4Ve+fmVVaVrEHnwTUQum4LOWCMJgVBM+7UyotOYzbIDo19tV
ktK0oMKOlV8XKDzX43nWo99gpBRrQNBOQINgDTfa2iLpHpfkvfDpBqCavFhQQ5rp
xIBywgZTcNCXPdN9+32v0lZBWjApRta0S6kBnn9NdAFhD5CskUChDKazcdWUvLNs
qitM9+GlnIFw7O49FH0M+EulQqq4sHq56vfA449M6qBVQcHrrzYNaqksCniqHQLz
R0vufELxpVJOSAD6AOZEAbVvYWBq3ZIK7x6do9rXdacNwakaFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvH4rZ+8bkixxRMh1GCkj7KMy43MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGFlNzE3NTQtMGFiMC0z
MzRmLWJlNDgtYjk0ODY5MDExYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LB3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjEcvMq9YW+kzm275jactVq4Q2aFWcxWPcyqlj98cIO8lKGqQ9KLriD
f1/Xbpk5ph0aRAT6NWEALu25HfVarElG/+NFgc/fUgwKqv+6MiLWjwg5A8+2fadT
8won8FWTdQ70IlCJpWNnbZCjJOb/7CYzHknCNPXhs6zpbzFnZ0h3Lyz2WgwKXzix
JDNwBw6Mu59CsSQgXoBjy+6y9REZhHUHAnptJMzEu981D5yx7twSsBhEM1GWhdwQ
1F3IEWdX7kV7HNNKY3yzouRxtLRij2J6mPYI/xXZBguUCJ9gxSPpbqUqVTMlCzU8
JjbnBd1jQNXdjvbAlwOO9TAGGgizE1Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:54 2025 by rpki-client