
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42c83176-dbb6-39aa-93b7-4957992a652b.roa
File: 42c83176-dbb6-39aa-93b7-4957992a652b.roa (raw, json)
Hash identifier: D90GL+PMnnqJJvbkOrOvH0//3TeafN4q3t0zgMqHulU=
Subject key identifier: A6:70:3C:69:99:E6:E9:FA:D4:0F:E9:36:E9:FE:72:37:58:AD:43:28
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B4081CC86163484A19EBA0D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42c83176-dbb6-39aa-93b7-4957992a652b.roa
Signing time: Sat 20 Sep 2025 01:00:32 +0000
ROA not before: Sat 20 Sep 2025 01:00:32 +0000
ROA not after: Fri 19 Dec 2025 02:00:32 +0000
asID: 701
IP address blocks: 63.66.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:40:81:cc:86:16:34:84:a1:9e:ba:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 20 01:00:32 2025 GMT
Not After : Dec 19 02:00:32 2025 GMT
Subject: CN=b31fd780-7ec5-4551-993b-b0081d15da01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:c4:6f:db:b0:34:3e:02:12:04:29:f0:f4:
9c:24:ab:d9:d0:ca:20:17:4c:b1:0d:fe:a4:96:bb:
eb:43:8e:6d:8a:f6:5b:50:1b:b6:c8:2f:87:79:48:
24:7a:e5:bb:88:e7:bc:f7:27:ff:26:ae:c4:9b:4e:
65:53:4e:a1:fb:50:bc:09:ca:a8:d2:7d:c2:7c:f4:
67:86:cc:ac:2c:29:58:d2:ef:eb:ba:c9:61:3f:d1:
fd:53:c8:12:23:73:7d:4f:22:f2:60:8b:58:de:83:
4e:56:a0:4d:03:81:e5:3a:8d:4d:49:40:a5:36:07:
c0:38:d8:ad:01:74:88:f3:5e:f0:86:c5:54:ac:79:
40:15:ae:77:ff:1c:30:b3:83:11:d5:63:e6:26:b1:
5d:42:00:66:8c:27:51:4d:5a:36:e9:72:37:7d:2e:
3f:6c:7e:7c:68:b7:16:62:36:21:a8:bd:bd:bb:88:
e4:b0:73:62:ed:5f:a2:2d:76:71:86:6a:31:40:39:
38:46:f0:34:d1:8d:7f:d7:d2:67:4e:99:3d:14:a2:
21:56:28:3a:7a:2f:dc:2c:f9:51:6f:34:82:99:7f:
3c:79:c0:cf:a7:a8:56:11:0f:75:ef:db:b5:19:76:
97:e2:46:63:4d:08:f8:74:cc:4c:47:69:a8:51:87:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:3C:69:99:E6:E9:FA:D4:0F:E9:36:E9:FE:72:37:58:AD:43:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42c83176-dbb6-39aa-93b7-4957992a652b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
63.66.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:79:cf:d1:5c:b6:1e:1c:89:31:61:dc:1f:58:92:14:6f:84:
9d:b4:cd:ad:62:97:bd:e2:9b:ab:13:13:65:59:26:cc:fb:fc:
d3:09:ed:44:ad:78:53:ac:be:a8:c6:a1:44:09:1e:c6:a5:e2:
b1:72:d6:17:93:9f:e7:1c:1a:5a:7b:6a:d4:7e:7e:ce:a2:4b:
f8:ea:50:4e:9c:4d:39:f0:7e:cf:1f:e5:93:83:28:db:c0:bb:
61:e3:4f:28:47:fd:13:31:aa:fc:04:72:5b:0d:a0:1f:80:7c:
21:76:5f:65:df:82:93:12:5b:42:bf:c0:19:6b:38:fa:2b:45:
a9:71:7d:0b:5e:1a:5c:e2:a4:03:b5:94:0e:28:bc:83:2d:ec:
6e:2f:14:41:70:ff:3f:96:ab:74:33:a8:9b:e5:ce:eb:92:28:
5a:70:0a:3c:6c:56:db:6e:69:15:b2:8f:63:99:92:b2:5c:4b:
c3:d0:7c:96:e7:fd:28:42:30:d0:8b:e9:d3:d0:90:f5:93:26:
a3:56:af:ee:88:f3:02:9c:7b:a0:37:53:32:6c:21:40:5b:4c:
4b:2b:41:0a:82:04:a7:67:f0:4f:90:3d:9e:e0:b2:a6:62:8f:
78:d1:88:7f:64:c6:2b:90:b6:32:96:96:a7:cb:30:80:5b:c3:
70:18:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:45 2025 by rpki-client