
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
File: 450bc5ce-6f8f-30e9-aa47-acb805a09111.roa (raw, json)
Hash identifier: aRzHm9yqeUqBA6tsAKK5NisXrXIuvVex5kaarYPk5wI=
Subject key identifier: 2E:70:A9:9B:76:6B:AE:D0:A5:A3:76:20:5D:C8:54:7D:84:60:B0:65
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BABFD2419E712789303DFEBB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 701
IP address blocks: 96.236.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:24:19:e7:12:78:93:03:df:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=2aa69ace-02e4-4438-b541-400a4e982246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:d8:e8:34:89:02:32:64:22:f7:6c:57:f0:
c2:97:1e:d3:c3:14:be:3a:7a:14:5c:18:74:b1:6a:
80:3f:16:e4:09:5a:22:02:78:b0:b4:48:ca:f7:b7:
1d:e4:11:9c:23:ac:6d:20:72:de:3f:1d:2f:09:fe:
31:44:16:9d:44:8b:8e:cf:81:0b:80:96:9b:ea:a8:
c2:a4:4c:1f:79:82:4c:f5:ee:53:82:76:97:f8:5b:
db:72:34:ea:df:f2:b0:48:fc:65:87:1a:5a:f8:6e:
b3:98:24:65:67:e7:ff:17:52:06:4f:46:14:b4:ed:
90:7f:80:62:2d:c6:05:fa:f1:2d:ba:14:1b:f1:80:
87:58:b5:dd:60:81:c5:d2:22:48:bf:f8:2c:fd:78:
ad:0d:0a:3a:fc:0a:98:39:b7:39:48:c5:c3:b0:85:
6c:a8:0f:50:dd:5f:74:47:b4:af:98:9c:8b:72:d1:
81:b3:7d:65:df:b1:f2:fc:27:0b:fb:7a:ec:8e:cf:
56:1c:f7:d5:70:54:d5:9e:46:5c:e7:d7:e2:cd:07:
d6:51:57:63:49:3e:b6:11:84:0f:d1:1e:b3:4e:5c:
d2:51:6e:fd:8f:80:82:22:f0:13:93:09:6a:db:fe:
d0:b8:f6:af:a7:a1:e9:af:e1:fb:ce:14:27:c9:28:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:70:A9:9B:76:6B:AE:D0:A5:A3:76:20:5D:C8:54:7D:84:60:B0:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.236.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7e:84:f9:2e:98:67:e0:d0:9e:0b:6a:dc:03:c3:83:01:6c:
87:09:c8:a5:bd:51:24:dd:56:35:5d:00:28:27:31:2a:5a:bf:
9d:be:5f:4b:d6:26:c3:fa:dc:5b:16:41:e5:0a:a0:43:db:f3:
4c:c3:38:e0:86:3b:8d:33:92:51:3b:5f:52:49:67:3d:66:cc:
26:98:50:db:66:2e:db:45:86:5b:ca:16:70:10:2a:3b:03:bd:
e3:bd:bd:1a:68:2c:6c:aa:a5:89:1d:d6:8c:76:a8:fb:57:13:
f3:86:cb:fa:fb:05:fc:3c:76:4b:ca:e8:68:e9:a6:10:7e:fc:
38:ea:9a:0c:f1:42:65:3d:ef:ae:d5:d5:9f:f4:0d:e2:2e:7b:
a8:fa:99:98:a2:b2:d2:ac:13:8a:23:65:ae:d9:78:de:bf:2a:
3b:d0:eb:9f:eb:8a:eb:50:ef:44:39:df:0c:20:21:a4:26:10:
1b:55:ed:b2:af:6f:e0:27:3c:b2:63:a5:e1:32:22:a1:7e:3a:
61:86:7f:43:68:ce:71:d0:cf:8d:29:dc:21:9a:4f:00:bc:30:
35:3f:95:ee:fe:4f:30:24:97:36:8a:e3:25:32:a1:79:ac:05:
5f:8d:69:9b:78:a1:af:8b:30:26:b6:91:85:9e:bf:c0:d1:17:
45:cf:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:29 2025 by rpki-client