
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10c70791-47d9-358c-903d-c4ad78a9c31d.roa
File: 10c70791-47d9-358c-903d-c4ad78a9c31d.roa (raw, json)
Hash identifier: TxnscjkEL5ia9gUqZ9wNrGvXIfhQqY3cwI7oLFI2AK4=
Subject key identifier: FE:D1:32:3A:4B:94:3F:BD:E5:CC:63:05:C3:97:6A:B4:65:5B:B1:06
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584AFEE6B25BE756CA88D416BC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10c70791-47d9-358c-903d-c4ad78a9c31d.roa
Signing time: Wed 27 Aug 2025 13:00:41 +0000
ROA not before: Wed 27 Aug 2025 13:00:41 +0000
ROA not after: Tue 25 Nov 2025 14:00:41 +0000
asID: 6167
IP address blocks: 72.108.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fe:e6:b2:5b:e7:56:ca:88:d4:16:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 27 13:00:41 2025 GMT
Not After : Nov 25 14:00:41 2025 GMT
Subject: CN=de2f6b4b-6d6d-4841-901f-7cc3befec2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:11:97:55:8b:fc:ae:22:fe:56:1f:d2:c2:
cb:1d:cf:eb:22:33:f1:68:ce:d2:6a:ec:8d:80:d0:
60:05:76:05:0a:59:0e:f5:49:de:63:7b:d6:1a:46:
d3:42:a5:8c:5c:da:9c:e5:83:c6:11:63:b4:ad:59:
3a:f1:be:c7:d2:b2:93:aa:dc:1c:03:e1:3f:01:17:
34:95:32:c6:9e:12:80:04:27:df:0e:ce:44:5e:20:
59:b2:a0:d4:7d:20:82:db:d9:57:16:4d:c4:6b:fd:
27:5f:b3:de:8f:8c:4c:6d:7e:d6:0b:62:ef:5d:42:
4e:fb:b9:a8:42:9b:ba:54:04:12:71:2c:75:36:83:
b2:05:53:6b:da:af:05:0e:7c:57:80:0f:a8:16:ef:
4b:24:4a:22:3f:dd:d2:9e:1e:af:8e:e5:d8:50:59:
6a:94:e3:10:8f:34:bf:5e:6e:36:b3:62:d9:d7:05:
f7:20:68:35:00:59:4d:35:36:a3:50:e8:c0:59:5a:
22:7e:0a:4c:68:c1:ef:62:27:43:8c:f2:42:e7:20:
c1:dd:71:7b:36:a9:03:5b:55:fd:9b:5b:49:73:10:
3f:11:c2:24:1f:64:25:36:9d:d3:2d:bd:79:24:4f:
8b:e4:a7:98:07:16:4b:32:7a:4f:76:f0:0c:fa:49:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:32:3A:4B:94:3F:BD:E5:CC:63:05:C3:97:6A:B4:65:5B:B1:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10c70791-47d9-358c-903d-c4ad78a9c31d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.108.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0f:70:bd:0c:85:b2:85:ea:76:38:22:06:63:cc:eb:05:11:
74:3a:3b:53:59:b3:d9:cb:0e:cb:d7:c5:46:ac:a5:f7:8b:7c:
12:a6:f9:8f:49:43:a4:22:eb:29:18:34:27:56:f6:b3:af:49:
fa:60:ea:c6:fe:79:9a:1e:8a:15:d4:32:aa:8f:45:20:40:a9:
a8:92:bf:82:b1:70:0a:42:2c:51:cb:96:2f:91:7a:a2:cb:9f:
1a:d5:52:28:8c:78:db:69:88:31:4d:5f:61:ff:30:0d:c5:69:
61:e3:6f:e8:64:e4:b7:15:5b:e6:a9:b2:10:08:a1:96:ba:a9:
0d:6c:b7:34:36:11:f7:bf:c6:fa:15:9d:4d:0c:a2:7c:24:5a:
a5:71:d0:af:19:2a:7a:e8:61:64:b4:d4:43:d2:da:cd:f4:46:
9e:cb:1a:06:58:a8:21:8c:28:dc:ae:7d:32:59:92:a5:e2:6a:
4c:07:34:a2:de:a2:68:af:c9:49:f1:41:53:b4:06:3b:c2:73:
22:bf:03:bb:33:0b:5e:f9:9b:cf:bf:cd:6d:cc:50:ae:4e:7f:
e4:df:ea:9c:d7:3b:62:29:f7:3f:1c:47:5f:ec:bf:c2:b1:a1:
18:f5:6b:63:da:f5:88:a4:b0:2c:fe:76:bc:a4:61:a6:cc:96:
0e:06:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:20 2025 by rpki-client