
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
File: 341517c8-40ca-31e7-a95a-b1ec05cfca82.roa (raw, json)
Hash identifier: ugru3abmiCJB/XTaMRimPJUfdcHt3webaBZD3h2C0qs=
Subject key identifier: 94:6B:C1:06:65:FD:C5:5B:A2:27:B1:A4:B9:A2:2F:1C:54:F6:DA:BA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F80F5CA2A01E4B8616E380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 108.28.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f8:0f:5c:a2:a0:1e:4b:86:16:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=a2afe8a4-ee52-46d9-a568-b4185f67fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:45:ec:3a:95:76:ed:07:09:99:fc:af:9f:
7b:eb:22:b0:45:9a:e9:cc:b2:43:9a:1d:e6:97:bb:
4d:ea:e5:0c:8f:ae:81:0b:cc:f4:97:6f:56:12:36:
2e:6a:7e:92:c4:0a:93:a0:21:67:ff:4e:48:e7:3f:
ea:32:3b:eb:14:4d:5b:15:2b:17:9b:9a:4c:8f:b3:
bc:72:b0:dd:35:40:92:71:dd:6e:19:8e:68:18:50:
03:8c:cd:67:25:5e:ec:5e:7d:a9:c7:d5:2e:ce:e2:
8b:0e:20:3d:94:83:b0:94:3e:28:ad:ac:7e:07:92:
5e:7f:10:da:79:ee:a0:2e:9f:06:4e:3a:69:29:82:
3e:a7:d5:0c:0a:05:49:c5:d7:32:d0:3b:69:69:99:
ad:58:f6:2e:67:50:ce:46:e3:2a:a0:41:5a:19:84:
ee:76:50:ad:bd:aa:ed:1f:6c:a3:57:b7:aa:f5:cb:
c4:87:f5:8d:54:b9:e8:e4:43:c5:64:16:56:48:ed:
9a:a4:23:f1:31:80:1a:92:95:60:bc:5a:81:9e:c9:
bf:e4:37:30:cc:4b:e5:56:15:51:dc:9c:0b:ac:8d:
7c:87:99:9a:74:5e:65:41:c5:7f:d8:1e:13:14:5b:
56:0e:ea:24:a8:82:97:e7:10:33:7d:0d:17:a5:44:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:C1:06:65:FD:C5:5B:A2:27:B1:A4:B9:A2:2F:1C:54:F6:DA:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:f1:9b:e6:5a:38:32:47:fc:cf:ac:4c:78:bb:34:65:98:7f:
14:b6:4c:76:ce:6c:ff:65:ca:fa:fd:52:13:6f:be:37:81:68:
04:ac:81:12:ff:f9:fb:ee:c3:ed:7b:09:5d:47:c4:9b:fd:27:
81:2c:96:c7:09:2e:2a:2f:08:a3:a9:b1:1d:ea:3f:d6:f0:a9:
4b:9d:ed:8b:ff:dc:dd:df:93:84:3b:02:e7:8a:73:4a:2c:0a:
73:ed:52:27:6c:f3:98:e1:71:64:22:00:8f:58:df:b2:ff:c1:
70:98:f7:57:1a:38:f8:3b:3b:0c:5e:32:dd:0e:4e:fd:57:41:
a1:20:e2:4f:b5:72:72:bb:cd:28:6d:4c:6e:7c:6d:c5:e8:30:
a0:2a:70:54:15:dc:b9:d5:92:ea:9c:f4:f8:2c:e9:ff:0e:c0:
75:35:84:3c:b1:07:7a:d0:72:37:23:41:e0:46:bf:0d:40:4c:
03:5b:4e:d6:3f:c5:35:67:20:b5:d6:e5:50:91:e1:f6:cd:c6:
c6:75:8a:67:fe:8f:b7:1b:14:58:1e:8f:43:78:84:4a:9f:d3:
69:f4:1a:5a:13:47:92:bb:5b:c6:e9:d1:59:ea:1e:1e:64:db:
5e:6c:ca:88:b6:fb:e8:80:92:46:9d:1e:2c:9a:ac:b3:df:a4:
e9:ae:fb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:25 2025 by rpki-client