
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43297765-3eff-3caf-a107-2315568fced0.roa
File: 43297765-3eff-3caf-a107-2315568fced0.roa (raw, json)
Hash identifier: 43pplsR47pr+5P3VUHYtqo1hEIDYiXBKaZx+RjgHyfU=
Subject key identifier: AB:A6:38:24:D5:DE:C6:B2:55:1B:5E:8D:F9:86:AE:D2:DA:D8:EF:B6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584AFEE6B1D945A43F3CFC23A380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43297765-3eff-3caf-a107-2315568fced0.roa
Signing time: Wed 27 Aug 2025 13:00:41 +0000
ROA not before: Wed 27 Aug 2025 13:00:41 +0000
ROA not after: Tue 25 Nov 2025 14:00:41 +0000
asID: 6167
IP address blocks: 72.103.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fe:e6:b1:d9:45:a4:3f:3c:fc:23:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 27 13:00:41 2025 GMT
Not After : Nov 25 14:00:41 2025 GMT
Subject: CN=043444b1-04e2-4383-9025-59ce9c7423ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:5e:ef:7b:35:a9:18:46:df:4f:01:db:ea:
7e:c3:1e:70:cd:f6:49:cc:60:b5:e4:5f:f8:62:54:
a6:c3:bd:5b:76:d9:3f:ba:a9:6b:85:f2:85:4e:04:
18:62:24:1c:0d:e6:cd:57:20:40:dc:d9:cb:19:ac:
b5:ef:7f:8a:f8:e3:24:ba:cd:45:48:15:58:cd:0f:
c8:1b:0c:02:97:63:c0:c1:d9:5c:4a:a3:47:6e:92:
2c:27:91:78:18:16:e7:86:1c:85:fd:9f:3f:68:78:
8e:64:70:6f:91:f6:8a:51:77:ef:45:92:a8:29:c8:
22:a2:6b:99:97:c0:5f:8e:b5:39:aa:8e:71:10:67:
11:95:88:ab:be:52:1d:5e:ed:8e:eb:bb:4e:c4:ef:
e3:81:ec:7d:4c:12:bc:d3:31:67:d0:88:8a:64:fd:
73:76:97:b3:c8:5f:24:ac:be:93:df:59:e1:ad:b6:
44:c6:2c:1f:8a:f1:00:5d:35:20:0d:20:8a:db:22:
c7:9f:87:ba:18:20:92:41:2e:c3:2e:3e:14:73:bc:
29:cf:80:41:5f:85:bd:3e:26:a8:57:61:d4:98:21:
ea:3b:e5:67:6b:56:8e:2d:fb:05:8d:52:10:b7:1b:
90:86:c0:4d:6b:5c:7f:91:e6:a5:6b:89:eb:77:5e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:38:24:D5:DE:C6:B2:55:1B:5E:8D:F9:86:AE:D2:DA:D8:EF:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43297765-3eff-3caf-a107-2315568fced0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:93:da:d4:d7:13:12:48:cc:8d:e3:bf:35:3a:0f:4c:93:a2:
74:14:24:57:ff:14:b0:7c:94:39:1e:c8:d7:4b:dc:3b:ad:26:
8a:62:a4:7a:e8:95:35:10:05:c2:4b:4d:be:a1:e0:a0:54:e4:
81:3a:90:5e:f4:21:06:67:a8:31:2e:9f:5d:85:e3:5a:35:29:
04:83:57:22:6f:50:f4:a9:ea:d7:d6:25:ef:43:fb:d6:c7:82:
d9:8b:64:b5:df:44:cf:19:30:31:30:be:ba:b4:b3:66:68:b3:
29:7c:90:91:62:72:24:9e:29:d7:b3:20:31:48:e7:ab:f6:53:
93:dd:cc:1a:c4:1b:91:28:1f:16:7b:55:bb:68:fc:e4:a6:86:
d6:b5:29:ab:29:57:f9:b5:44:a8:1d:82:0a:80:b1:80:06:de:
80:34:7a:0f:24:35:ef:b9:8f:dc:f7:8a:71:da:60:aa:95:a6:
e9:36:24:8f:9a:d0:3f:79:a1:b5:96:bd:fd:6a:e2:7e:41:19:
ff:fe:97:4c:fa:ac:39:ac:5c:39:3a:d6:1e:ee:d0:49:07:52:
1c:1b:1c:2d:46:75:b1:a8:30:55:54:78:ea:92:b5:29:ce:55:
b3:93:46:ad:d2:14:ff:f1:60:31:f8:56:58:99:c2:53:9b:c0:
df:93:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:02:42 2025 by rpki-client