
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240473bb-16f3-3b73-b60e-9b8cba8004f0.roa
File: 240473bb-16f3-3b73-b60e-9b8cba8004f0.roa (raw, json)
Hash identifier: 9Ql/rU1F7c40yoSv/ujwEFgEYA7xOTn89BDF/BYUHQk=
Subject key identifier: 84:E1:F6:41:A5:24:E8:78:35:BA:D4:D2:7C:1E:D4:6E:62:E6:89:99
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F7E2F180591089D715BF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240473bb-16f3-3b73-b60e-9b8cba8004f0.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 173.68.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:e2:f1:80:59:10:89:d7:15:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=d2855be4-6372-4565-90b1-13c0ed8c44a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:0c:64:5e:e4:b0:53:26:f5:4d:a0:12:4c:
95:3e:b5:52:1c:18:de:14:f6:1a:40:33:58:ed:ec:
44:71:cd:bc:d3:8f:6a:70:a3:ef:d5:29:98:24:86:
33:77:e7:1a:e7:b7:09:24:25:94:80:44:fe:19:06:
82:08:a4:f4:a5:88:33:35:41:53:73:ea:66:ed:61:
13:8f:30:9e:58:b2:0d:83:d0:eb:6a:12:a2:49:51:
6a:8c:84:9a:f6:88:c2:16:57:57:8d:3c:de:7b:c1:
af:49:23:0d:73:22:59:b7:47:56:98:ce:db:e6:3b:
51:14:b6:e1:9c:de:b3:85:0a:25:14:5f:ae:6e:d7:
1f:c0:68:d4:f8:67:82:af:d6:45:98:b9:a7:45:7d:
65:69:fa:23:1e:f5:be:19:a5:a5:8b:0b:50:11:9b:
25:95:7c:bc:45:b6:6f:a2:aa:8a:a6:27:29:a8:3f:
d9:5f:5d:66:9c:6c:65:6a:87:b8:b8:41:50:a3:e4:
7a:96:a9:e0:e0:76:35:6f:22:3d:17:46:c3:d8:1d:
f3:56:fc:c1:8d:10:e4:e7:d4:8b:66:c2:e8:43:0b:
3b:58:3f:7a:54:e8:14:0f:b2:29:2e:5e:a0:3b:40:
63:d1:80:59:de:26:12:e7:fa:09:5e:8b:85:86:93:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:F6:41:A5:24:E8:78:35:BA:D4:D2:7C:1E:D4:6E:62:E6:89:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240473bb-16f3-3b73-b60e-9b8cba8004f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
173.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:15:ce:31:7c:dc:78:08:0f:06:5e:ff:12:a5:93:e8:aa:12:
b5:5f:f4:d4:9c:07:84:1e:7d:6b:e5:02:35:3b:52:54:ab:fd:
75:1d:fa:5a:9f:82:e2:51:6a:37:92:00:50:27:2d:a5:74:9a:
04:ba:66:24:5f:86:6a:a1:a2:69:e6:4d:71:19:f5:b5:73:e3:
62:3b:68:0f:74:c5:55:97:ed:3b:3c:24:a2:60:dd:b3:7d:70:
e2:92:70:1f:88:aa:ea:2c:77:86:7f:0a:37:ae:30:8c:8f:cf:
4b:ab:97:f1:47:87:8d:06:a1:a6:60:22:fe:9d:f2:14:5c:3c:
ac:c3:d7:d6:59:08:f4:19:02:3b:08:c9:cd:c2:34:50:53:29:
1b:59:d3:f4:05:02:7d:69:0a:0e:d0:74:31:38:02:6c:33:68:
8e:e5:42:5e:ab:7a:17:9f:6b:b6:83:6c:47:cd:b9:8b:4c:22:
10:8a:f9:14:7a:89:86:ce:0c:5d:45:0a:ba:09:0c:c1:38:0e:
9a:ef:77:99:2b:64:90:c0:f2:71:b1:aa:77:90:37:75:b7:95:
d2:2c:f5:7e:45:40:6f:7b:ea:4f:81:5c:e8:0f:f7:7b:38:0b:
75:6a:d7:a3:a3:06:cf:78:2e:f1:57:a4:a1:fe:7f:0d:a1:9a:
fb:dc:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:31 2025 by rpki-client