
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
File: 2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa (raw, json)
Hash identifier: V+RXPJgZ5Kfd4G8o+pR3A5N0iuTkbOk5/EpOZ1+pQVk=
Subject key identifier: BA:36:B6:01:08:AB:62:15:35:B6:7B:22:08:A6:36:B8:A4:1E:C7:C0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BA39D32CB6D7F76C6D7022F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 701
IP address blocks: 209.118.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:32:cb:6d:7f:76:c6:d7:02:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=683e4446-99c9-4480-b3c5-eea03f19a1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:71:0a:e1:52:47:4d:fd:ce:78:38:24:f9:
72:ba:07:8c:c8:1b:41:16:d5:be:31:4b:72:66:70:
cf:78:1f:9b:4d:e4:72:23:21:63:d6:66:b1:26:48:
e7:d5:5b:2a:b2:dc:54:2d:47:d3:44:ea:15:e0:d9:
b0:be:85:56:43:11:de:1e:0f:64:6f:b9:8d:f8:28:
65:9c:79:c5:8f:2c:d4:65:e2:92:64:87:20:fe:1f:
d6:a9:93:e3:cc:f4:22:25:78:84:21:27:36:bb:59:
2e:1f:d1:6a:ba:5e:a3:d2:6f:84:e4:c0:0f:31:2f:
7a:54:30:9a:78:a8:58:3a:af:00:46:57:9a:cd:8f:
9f:86:41:34:a9:59:ec:52:7b:bf:48:82:86:9c:49:
66:8b:35:b1:26:58:eb:f7:95:9d:4d:9a:58:32:4d:
67:25:a4:b9:ed:05:44:f9:69:2b:a2:7b:13:f9:ee:
1d:6c:8c:55:dc:50:ac:53:70:96:8c:aa:92:85:98:
56:1a:bc:37:2f:a5:8b:0b:b1:2f:d3:4c:17:63:9b:
bf:5c:d7:96:7b:65:38:78:38:0a:82:09:de:34:c5:
29:d1:3b:ed:67:c5:7e:84:6e:9c:a5:7c:62:71:ae:
f2:ac:b6:46:d5:fc:6d:25:40:09:5d:71:03:b7:05:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:B6:01:08:AB:62:15:35:B6:7B:22:08:A6:36:B8:A4:1E:C7:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d0c7e5e-bcb0-34f9-b813-58731fa8765b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.118.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:60:e0:15:8d:ca:34:59:ef:9f:18:7d:57:90:76:6f:26:8b:
fc:00:ac:6b:e6:7d:52:44:15:5b:c0:46:fe:77:c8:ea:a1:d1:
4e:14:75:37:63:18:ab:f1:50:2f:f8:bb:12:cd:02:2c:fc:39:
db:17:36:59:43:fc:da:17:7e:0c:24:e6:89:49:e3:e1:21:84:
a9:63:a3:52:d2:27:1e:e5:e6:86:b9:c2:cd:94:6a:e5:12:26:
48:62:6b:68:94:a0:6a:99:f3:43:06:6a:da:26:20:19:eb:40:
fa:ce:fd:55:df:67:44:91:bb:ef:54:22:13:60:8d:ba:ec:cc:
2f:b4:d1:a1:61:d8:bf:37:36:b8:bb:23:a3:19:02:46:89:25:
e4:1b:44:d3:b5:11:6a:04:42:23:dc:f1:7d:13:87:7f:26:28:
37:e6:a5:6c:3e:34:93:a4:0d:64:55:4d:67:5e:2b:9f:88:88:
04:c7:af:92:f0:75:d0:30:a3:f7:3d:04:e3:e1:ec:1c:99:c8:
17:23:16:23:cc:5f:00:1f:67:ab:1a:a8:91:6b:63:36:73:04:
b7:ab:73:c5:98:95:e2:43:44:00:df:71:8e:df:a7:01:8e:4e:
c8:bc:c5:92:95:7f:5a:56:59:ed:b4:e7:d3:a1:dc:8d:81:28:
c1:42:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:59 2025 by rpki-client