
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/688555f3-7091-3d04-add3-9326ed3a237b.roa
File: 688555f3-7091-3d04-add3-9326ed3a237b.roa (raw, json)
Hash identifier: wx5lzrJdU/jrjOCGQynvHJ0bVYuneMBcLG1K5oIxCUg=
Subject key identifier: 0C:87:C3:8D:2C:6C:4B:33:51:B4:EE:B7:59:45:F5:E2:13:E5:08:31
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB88D2FB8AB9B5D1BD7BD3C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/688555f3-7091-3d04-add3-9326ed3a237b.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 6167
IP address blocks: 72.96.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:2f:b8:ab:9b:5d:1b:d7:bd:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=3a6a2412-2274-438c-aa35-5d77b4fdc300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:20:86:37:dc:f7:13:77:ac:de:1a:7f:a1:
74:5b:be:4d:02:64:aa:74:81:3b:3f:c5:4d:2c:46:
2f:8a:6f:ae:86:c4:36:43:57:d3:22:90:da:5b:0e:
6b:37:db:dc:94:94:d1:bd:a6:ed:11:01:d9:5a:83:
26:6d:5b:2e:00:f1:58:b0:01:af:08:0c:a2:10:92:
02:ee:b4:87:c8:a4:57:4f:c2:f3:91:57:6b:4f:60:
a4:32:5e:74:b1:73:f3:73:73:ef:73:eb:3b:d9:82:
aa:8e:f1:46:9b:2e:86:31:f5:77:62:b0:5b:64:85:
8f:6d:c0:a6:2f:3a:5e:8e:d2:00:23:dd:1f:14:cb:
fa:60:4e:f6:15:96:55:f2:b7:c7:55:22:96:e7:e1:
5c:a0:1e:22:96:9e:31:1e:3a:8b:67:ea:f6:32:11:
2b:e9:9d:b8:c6:80:f2:5d:73:12:34:59:d0:aa:34:
63:c6:06:6b:16:fc:05:3e:19:f7:ec:3e:ad:99:2c:
43:ca:a3:cf:d9:c3:8b:c7:c4:d9:4d:12:e0:bd:d2:
05:6a:fe:7e:da:e3:7e:a2:65:57:08:82:17:89:9a:
69:65:51:80:f5:91:9e:52:e0:84:79:7a:b8:d4:e3:
fc:ce:09:be:88:79:1b:41:e3:dc:e6:3d:fe:9c:4d:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:C3:8D:2C:6C:4B:33:51:B4:EE:B7:59:45:F5:E2:13:E5:08:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/688555f3-7091-3d04-add3-9326ed3a237b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.96.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:3a:29:a9:ae:78:14:1a:63:cf:23:55:f2:db:3c:b0:87:f8:
a3:1d:77:f5:57:05:21:08:15:c3:ae:fd:ef:2e:4a:4f:d5:6b:
9e:b6:df:03:88:59:9e:02:85:d4:82:90:e6:d2:c0:93:7b:2e:
ad:56:0f:a8:f2:76:b2:75:ff:98:62:c8:21:75:3a:54:6b:a3:
10:af:e6:3a:f4:b7:6f:ae:c7:33:6b:27:b5:47:d7:ea:fb:96:
4b:9d:a9:ba:2b:8d:6b:26:55:48:71:b5:85:96:fb:e3:d0:83:
f3:d3:ab:88:e8:78:a0:41:3e:7e:d4:54:e0:95:b0:d9:13:e4:
12:d8:15:05:bc:b1:35:da:1a:56:50:3e:ce:30:59:4b:47:46:
8a:f0:67:29:61:92:25:6a:7b:01:79:da:bb:ef:b8:62:b9:e2:
3b:8a:0d:fc:fe:70:c6:6a:a6:1a:10:a9:f5:08:9d:37:e2:0e:
35:cc:b1:63:9a:2a:15:bd:a8:44:cb:23:a3:08:c8:f3:bf:21:
84:50:ad:de:45:61:0d:04:5c:4c:9f:4e:32:bc:2d:c4:00:a5:
a8:ef:32:c7:9a:ae:07:0e:6e:dd:19:6c:ca:a9:a8:a4:82:b9:
3b:62:76:80:7f:38:f6:78:69:68:1d:b2:08:1e:12:03:e4:9a:
9d:ad:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:38 2025 by rpki-client