
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa
File: 2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa (raw, json)
Hash identifier: W1hQ0lPi25Y6g+A8UFWAa6FvOV5mAJ3OnbnBkRLhxmM=
Subject key identifier: AF:EC:48:02:2B:8E:62:64:B4:2B:A3:5A:FF:5B:83:A1:F6:B1:A6:38
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BA39D2CA6CD5B11DDE8AEAA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 701
IP address blocks: 216.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:2c:a6:cd:5b:11:dd:e8:ae:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=40fb84e3-d4ea-4aad-85ba-43f9ad0886ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:5a:a5:37:f8:07:b9:4c:37:1a:30:01:48:
d6:a0:49:a0:37:09:8d:c7:d8:77:07:9f:35:04:6d:
f6:4b:88:8a:b7:0a:d2:92:af:de:ec:9b:da:bb:84:
be:64:68:c8:33:05:cc:9c:0e:fd:5d:39:64:6b:94:
cf:2f:83:c4:64:78:43:6d:1e:73:c3:e6:e5:3b:17:
ff:f3:e5:dd:51:0c:45:ad:4c:98:a0:49:8f:9a:c7:
54:a9:fb:1b:e3:2c:4b:5c:2f:fb:a6:58:bc:74:b5:
bb:3d:94:b6:e5:a5:5d:0d:ce:b5:6a:09:58:40:82:
68:2a:88:d3:47:12:4b:b0:9a:0e:b8:f3:bf:d2:bf:
23:19:eb:58:ae:82:ec:bf:31:bc:ff:64:8b:f2:9f:
5a:94:56:df:aa:85:41:70:64:8f:a6:2b:35:c7:80:
75:d5:73:72:ee:6c:e1:f4:14:ab:21:f0:a2:d7:a3:
fc:e1:ac:6e:50:8f:71:d3:5b:89:42:4f:c8:c0:6b:
11:bd:4a:2e:fe:ce:a3:1a:dc:aa:58:82:81:12:95:
e8:c8:24:9c:fb:fc:0c:f0:65:c1:ef:09:06:3e:1f:
e5:fe:74:77:56:6e:d2:c9:ee:eb:92:b6:29:9c:9e:
c9:a6:f0:23:16:8c:14:de:14:f5:ce:eb:60:f0:6b:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:48:02:2B:8E:62:64:B4:2B:A3:5A:FF:5B:83:A1:F6:B1:A6:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
216.112.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ed:0e:49:da:48:03:50:88:87:3b:4a:fb:b3:aa:63:22:4a:
be:89:cd:5c:79:27:d3:f6:fd:83:a4:c3:bf:a9:67:61:5f:56:
08:86:c3:fd:f5:1e:35:8e:de:3a:cc:d1:4d:ca:b9:d5:7e:78:
11:7c:f9:9d:d2:bb:8d:54:0b:47:7a:03:2c:73:79:11:3a:77:
d8:34:b7:b6:6d:c5:37:69:1e:aa:ce:ec:5c:af:72:39:fc:9a:
74:48:b6:19:d7:64:2c:44:af:9f:39:bf:cc:45:ed:bf:0a:12:
c8:34:3f:57:bb:d0:25:de:d7:69:bf:64:bc:22:e5:e3:16:86:
ec:23:51:0b:8a:a7:09:68:bb:f2:df:fb:54:85:2c:25:8f:16:
83:47:16:c2:db:b3:b8:3d:26:2f:54:7b:c2:31:28:04:98:a3:
79:f9:7f:67:bd:cc:e1:43:e0:5d:b8:9e:61:a7:ff:c2:f3:bc:
76:7c:9c:88:78:ad:bf:43:91:c9:b4:b0:1e:8c:90:94:7b:f9:
b6:0c:de:d9:f3:e1:86:1a:2b:e4:6a:15:f0:9e:e7:c2:92:cc:
81:fb:cd:e0:86:3b:a5:1f:f2:19:21:74:96:e0:42:77:00:52:
74:db:d2:c3:f0:c5:e5:e0:e0:31:f1:26:b8:d0:31:f7:51:71:
b2:9e:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:49 2025 by rpki-client