
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14762383-69b8-3c43-9bec-4b8c157655e0.roa
File: 14762383-69b8-3c43-9bec-4b8c157655e0.roa (raw, json)
Hash identifier: KNdTHAUI9uTJDVy+XOLmhCPYI4YPM1K5JqKpB5PjNnk=
Subject key identifier: 9E:DF:54:92:3F:A9:E2:E3:30:13:89:26:B4:E7:98:B4:A0:C9:BE:CC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B1C36D8D436E3F65E115BC980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14762383-69b8-3c43-9bec-4b8c157655e0.roa
Signing time: Sun 07 Sep 2025 01:00:33 +0000
ROA not before: Sun 07 Sep 2025 01:00:33 +0000
ROA not after: Sat 06 Dec 2025 02:00:33 +0000
asID: 701
IP address blocks: 70.20.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1c:36:d8:d4:36:e3:f6:5e:11:5b:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Dec 6 02:00:33 2025 GMT
Subject: CN=c6b6e4ed-d8ae-48d8-b2f9-a41b6f2e8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:30:c0:5c:74:bb:34:c1:82:c9:42:fe:99:
27:39:3b:9a:70:c0:d7:3d:a9:04:b8:ca:eb:f6:94:
f1:ec:a7:c4:00:f5:c3:dd:06:4e:10:e6:21:10:91:
03:29:96:ec:46:8c:8b:60:4e:b7:23:5a:cb:bc:df:
11:8a:ef:4e:c3:7d:dc:07:d7:a8:51:c2:89:81:12:
98:2f:cc:a6:e7:99:bb:83:0a:c2:47:92:d0:9a:01:
47:6e:01:27:7b:7b:e3:be:37:71:4f:79:ce:db:df:
87:2a:96:20:dd:a1:16:b8:9f:44:40:ae:3a:99:51:
ee:1f:89:cf:45:06:ba:39:03:bb:d6:eb:bd:9f:3a:
be:34:75:fb:99:92:42:1e:1f:84:3a:10:27:81:d6:
85:30:a9:20:40:91:8b:c1:63:66:e7:47:10:cf:6f:
3f:80:e0:9d:0f:5c:45:5f:70:c7:3a:c2:c6:59:29:
07:4f:35:c4:63:8d:04:12:87:c1:42:ff:4b:2e:92:
68:69:e6:88:4e:2e:10:ac:ed:c6:9c:d9:cf:0a:8f:
90:a6:fe:ec:64:5d:30:8f:3b:c0:d4:7f:a5:7b:89:
e6:5e:36:97:ef:b2:fc:12:f6:fa:d7:c1:d6:cb:87:
e8:04:3d:11:7d:30:39:1a:78:54:11:a0:57:81:92:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:54:92:3F:A9:E2:E3:30:13:89:26:B4:E7:98:B4:A0:C9:BE:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14762383-69b8-3c43-9bec-4b8c157655e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.20.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:65:b9:6a:a3:f0:24:c8:73:85:f6:ac:73:a6:05:4e:18:b8:
dd:c2:ee:c6:25:4b:6e:d7:c9:de:b2:77:50:2a:d9:89:5d:92:
de:06:eb:df:ee:d1:9e:69:8b:1b:7c:dd:b9:dd:57:a9:f8:29:
e7:aa:3f:b8:4a:0d:03:99:d7:f1:e3:4c:e7:19:df:e5:75:8a:
c0:c3:4b:7a:e5:bd:44:06:6b:99:91:31:19:f6:09:0f:8d:89:
fb:60:ae:6f:bf:40:d5:c0:c7:d8:64:fe:7c:16:fa:ec:98:02:
45:92:e7:b1:24:78:b4:11:61:03:72:bb:2d:ab:27:1a:da:a1:
7b:ee:2f:32:68:27:b4:e1:56:44:a9:a8:17:ed:97:de:ec:57:
8d:28:ee:2d:e9:bd:2c:fb:28:f1:93:8f:05:3d:3e:38:da:90:
46:dd:c6:06:e8:8c:95:69:74:f7:0a:4a:3f:1c:ce:68:ea:ea:
fb:05:61:48:c8:16:87:cf:36:97:f1:00:37:79:98:03:69:7e:
c6:02:20:e2:4c:55:de:d8:2c:04:5a:34:7c:d2:6a:3f:9c:d5:
71:dd:3f:19:5a:f8:33:8f:dc:f8:ba:e7:d8:5d:35:76:46:74:
26:54:72:f8:45:34:a8:00:ae:82:d9:c6:25:70:9a:5f:d9:fb:
8c:82:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:14 2025 by rpki-client