
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa
File: 1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa (raw, json)
Hash identifier: X74sIgRvpu5Tlv5gIKSVTxlRErnkO+n6K4gks28U51Y=
Subject key identifier: CF:3F:B3:C1:70:9F:4E:DF:4B:08:60:ED:54:91:C3:39:E9:ED:E8:68
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F7E018EB99B34F9F933600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 173.64.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:e0:18:eb:99:b3:4f:9f:93:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=b521b869-f711-498d-8022-9e6b9e3f28b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:ae:69:ad:87:f4:75:f0:0a:b2:9c:b0:08:
69:79:6c:99:0c:fa:4c:e4:d4:7b:ef:ce:11:ff:80:
80:40:b6:78:1d:a2:4e:26:72:9c:3a:51:4c:b8:d8:
c7:72:ee:99:21:ea:e6:07:b4:46:8f:e4:b5:0b:35:
76:02:b5:53:3a:ce:c9:6a:04:19:04:a0:2e:b0:2d:
19:92:e4:66:e7:6b:11:58:15:4b:17:5a:10:39:c0:
1a:2f:40:c2:1e:9a:40:d3:af:97:23:49:13:a2:62:
08:70:9e:aa:b1:44:0c:5e:8b:d1:d4:4d:0b:67:3b:
b7:ad:63:46:16:13:6b:9a:a8:11:28:f9:21:68:2c:
34:aa:ae:80:70:22:fb:fe:2e:e7:74:e1:cd:40:c8:
04:fd:7e:b7:55:e4:c3:eb:c9:db:ad:dd:cf:3b:32:
fc:2b:f6:e5:40:c6:38:69:c1:3f:98:1b:9b:9f:ac:
4b:13:56:bc:2d:29:00:6a:1e:d2:d8:8e:64:f0:4c:
1b:9b:f8:12:5a:ba:85:83:16:b0:9d:8b:7c:88:e0:
b9:a3:99:9e:21:fb:b2:f0:61:d4:c8:ba:27:36:71:
53:a1:70:c3:86:df:f9:e6:b6:23:47:41:e9:93:e0:
a6:6d:25:ef:48:5c:8d:1f:98:fa:55:a4:fa:24:34:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:B3:C1:70:9F:4E:DF:4B:08:60:ED:54:91:C3:39:E9:ED:E8:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.64.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d7:9d:dd:69:b4:2c:f2:4a:7e:fa:6b:ca:80:40:91:21:e0:
38:87:a7:4f:85:9a:1c:96:80:0e:2d:3c:a4:04:6f:68:66:0d:
be:12:82:3f:97:65:66:12:2f:f5:3e:8f:a0:e1:91:40:f5:fb:
2a:7a:07:13:f4:bd:89:e2:f9:5a:26:38:e4:a6:ac:77:77:12:
42:d0:e3:22:18:72:15:38:83:a6:b2:d8:da:cb:2d:60:6d:90:
9a:7e:a7:fd:f5:5e:b5:ed:00:3c:29:12:2d:78:3a:3d:87:70:
80:7c:0f:10:f3:1f:c0:a5:a6:f2:23:6a:75:5c:25:c9:cd:20:
50:02:0e:17:6d:52:b7:79:cc:c1:67:78:3d:86:ab:c8:b4:47:
55:7d:5a:11:51:6e:16:53:1d:dd:19:5f:0b:90:53:be:ad:a3:
24:cf:ce:80:50:a2:d9:33:ad:f2:ed:04:c4:cb:56:24:35:18:
c1:98:1c:78:a8:71:e1:8b:3f:84:71:10:c6:b9:0b:9a:d3:49:
dc:74:1f:ac:04:f6:4f:07:a6:bd:14:a7:1d:40:ce:57:cc:5c:
bc:d2:ab:e7:30:b4:ba:48:40:f9:80:2c:3f:78:7b:15:da:55:
db:ef:58:f9:48:b5:f0:b8:90:a0:34:ad:8b:7a:25:fb:be:f1:
e1:cd:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:49 2025 by rpki-client