
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c0d2426-e694-33c7-9fae-c2514083d393.roa
File: 0c0d2426-e694-33c7-9fae-c2514083d393.roa (raw, json)
Hash identifier: oXHUm3uNnrGMtIWT5sbNzKZDBJs0D8bH6Fj2DRtH7rs=
Subject key identifier: BB:A9:71:43:24:48:3E:06:05:A9:33:F1:1B:D2:F8:00:FC:15:2F:75
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB88D3E6FB1C368462C7AA4A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c0d2426-e694-33c7-9fae-c2514083d393.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 6167
IP address blocks: 72.97.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:3e:6f:b1:c3:68:46:2c:7a:a4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=bdd19ba1-42bd-4872-a288-0415b924fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:04:69:4c:37:26:da:f3:71:40:ac:11:9b:
3f:eb:04:ba:ed:6c:4a:0d:18:f0:26:a7:db:42:f1:
92:23:90:d7:ed:11:72:e7:15:4d:7e:fd:1c:8d:2e:
7d:b3:bc:cc:42:93:76:3b:09:99:5d:b3:5f:d6:9f:
9b:e3:2c:f9:a6:46:d3:ef:1c:2c:22:d7:10:6a:b0:
93:5b:b9:27:4c:e3:c5:18:b0:40:15:91:7b:b1:1e:
9e:0c:37:96:5c:59:28:75:18:3b:b3:cb:f8:c8:cb:
df:4e:ff:8d:f2:d9:e1:d0:91:7d:c5:0f:18:47:b6:
ec:0c:bd:a1:ad:f6:64:42:41:0a:48:39:aa:bd:3a:
67:fb:1b:d2:d5:58:a5:66:68:59:e6:2e:4a:43:db:
5c:c0:67:19:2b:08:65:8b:5a:d0:e8:86:6e:ef:93:
4d:57:8f:f6:8c:07:72:4c:1e:5c:83:c6:d9:6d:40:
91:7c:b2:d9:08:26:3c:cc:5c:28:d2:15:65:9c:97:
95:91:b6:0f:db:9e:97:7e:50:ac:e4:ad:f2:c7:3f:
f3:6d:60:6c:42:4d:03:4f:6c:40:f4:b4:00:88:f9:
d6:eb:a6:b2:2f:04:be:19:28:de:7c:98:72:cd:c4:
30:28:1c:ba:98:d4:96:d8:70:93:01:6b:b3:96:6f:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:71:43:24:48:3E:06:05:A9:33:F1:1B:D2:F8:00:FC:15:2F:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c0d2426-e694-33c7-9fae-c2514083d393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.97.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:57:d6:fd:9e:f4:1d:54:ec:12:13:76:ad:94:49:4b:1d:2c:
24:92:f5:1a:3d:7c:1b:d2:0e:e9:4c:64:04:c8:8f:7a:b6:17:
da:b6:3f:70:88:7b:e9:cf:64:17:b7:60:56:d4:5c:df:e4:32:
28:93:29:9b:44:a6:dd:a7:f4:37:47:c6:94:34:e4:2a:b0:af:
e3:1f:66:76:f7:af:c1:5a:8c:76:12:75:0c:a9:ac:ff:c8:86:
ba:81:e0:5e:8f:3f:a4:23:8f:4b:bf:81:2a:88:c3:40:32:35:
9d:6c:08:ae:aa:d7:71:c8:6b:f5:f0:aa:64:4e:90:59:2c:dd:
29:39:9e:07:cc:4c:d9:3b:32:c8:39:66:ca:91:11:50:e3:42:
fc:96:71:77:77:04:60:85:61:14:55:0d:8a:9d:1a:f9:60:50:
dc:00:e3:4d:3e:6a:3f:89:09:cd:8d:05:11:e3:73:17:a7:10:
c9:8f:6b:8c:11:83:63:86:3b:1c:8e:42:94:19:e0:18:d1:f7:
f7:40:e5:ee:4a:47:38:36:0f:8d:0e:34:f8:7e:d4:a9:d1:47:
3e:6a:e1:b8:68:a3:12:ba:5c:35:2e:a5:06:74:96:1d:b2:66:
38:ef:3b:95:54:7f:26:e9:8a:29:24:8a:a2:28:06:07:03:4c:
7e:dc:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:54 2025 by rpki-client