
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
File: 6b231feb-36a3-3410-bd81-3149f25c8a96.roa (raw, json)
Hash identifier: Hz+84WgF4UiNzfTKsKvy7U4KC1CxhbcMTRrNjD6Lz60=
Subject key identifier: D9:D4:8F:73:C9:B2:99:99:D7:5A:6A:83:3F:07:0A:AC:73:D8:53:F2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BABFD25AA877C647FA3EA9440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 701
IP address blocks: 71.125.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:25:aa:87:7c:64:7f:a3:ea:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=689a5cdf-a916-4e8d-bcc6-555314522a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:db:b2:73:fc:67:7f:4c:0e:99:cd:06:cc:
d8:98:13:bf:c6:39:e1:46:df:8a:8c:e7:b7:bb:09:
41:40:53:9d:e4:4e:3e:36:67:b9:4d:5c:1e:e8:12:
0b:7b:70:ff:93:4d:0e:6c:7e:09:86:3a:3a:cf:e4:
01:8a:79:73:6e:77:51:71:f3:88:a5:f4:6e:1f:a3:
c9:2a:ff:26:62:e4:78:65:31:fd:19:a6:01:ef:b0:
43:b5:e2:c8:ed:2b:5b:d0:dc:27:a9:a4:a1:51:75:
88:b6:ca:ab:9b:bf:63:b9:81:d3:0c:23:3a:6a:27:
34:80:67:01:23:8f:26:56:ef:32:a2:d6:c1:9e:1f:
75:db:c9:8e:e2:97:cc:96:b2:94:19:1b:e8:80:79:
1c:70:d8:f9:f7:d9:62:70:62:96:a6:bc:17:e8:ad:
10:25:44:4a:0a:e9:d0:ea:50:25:80:18:1d:05:b1:
6f:32:84:0d:48:0f:45:6e:57:ef:3c:91:85:aa:4a:
7b:33:3d:5d:e9:d9:7f:b7:85:89:1f:03:00:e2:01:
08:60:c9:e4:8a:35:22:c5:47:44:ad:8c:35:f2:c4:
17:cf:0f:90:80:ee:c9:54:fd:46:2a:83:05:cb:ac:
62:da:94:b0:63:3d:68:c5:1a:f8:77:50:8b:16:de:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:8F:73:C9:B2:99:99:D7:5A:6A:83:3F:07:0A:AC:73:D8:53:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.125.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:e9:8b:d6:a1:74:3d:f2:bb:ff:5e:ca:c6:6c:0a:ea:29:a0:
ce:21:8c:0b:76:7d:fb:15:c4:38:c1:37:bc:fc:9f:8b:9c:e5:
a8:8d:60:b9:b6:f5:e3:a8:47:01:fa:e6:a5:b4:5e:6b:06:df:
68:f3:19:b3:32:3c:14:d4:51:6d:80:0f:44:5b:77:46:2a:61:
ce:9d:82:2d:1d:b9:07:d1:f4:38:15:b7:b7:73:1b:34:3b:dc:
4f:fa:b2:90:75:9a:ab:ce:72:fd:01:34:d3:67:ea:62:d3:f4:
dd:63:97:64:f4:82:cb:48:7e:a2:f1:53:ce:5a:4b:92:9a:ed:
09:bc:36:7c:65:15:cf:e5:d3:78:7e:2a:49:af:a5:92:c5:9d:
f4:83:f2:21:f6:83:d7:c4:1e:f4:fe:25:d8:fe:cf:fa:04:e6:
e3:11:10:89:28:84:ec:e7:be:52:28:37:5a:f6:6d:45:31:70:
77:51:e7:0b:d4:af:1a:59:8b:b5:1c:fe:5c:9f:06:c8:3a:99:
af:b6:8f:93:45:a3:0c:28:26:b4:af:44:fe:f8:1e:d4:42:f2:
1c:38:59:ca:87:95:4c:d0:d2:81:b7:72:fd:dd:ec:8b:2d:8c:
61:56:7e:47:55:e3:ba:26:3b:f5:91:71:d2:86:0d:d3:b1:22:
7f:53:da:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SWqh3xkf6PqlEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
Njg5YTVjZGYtYTkxNi00ZThkLWJjYzYtNTU1MzE0NTIyYTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZTbsnP8Z39MDpnNBszYmBO/xjnhRt+KjOe3
uwlBQFOd5E4+Nme5TVwe6BILe3D/k00ObH4Jhjo6z+QBinlzbndRcfOIpfRuH6PJ
Kv8mYuR4ZTH9GaYB77BDteLI7Stb0NwnqaShUXWItsqrm79juYHTDCM6aic0gGcB
I48mVu8yotbBnh9128mO4pfMlrKUGRvogHkccNj599licGKWprwX6K0QJURKCunQ
6lAlgBgdBbFvMoQNSA9FblfvPJGFqkp7Mz1d6dl/t4WJHwMA4gEIYMnkijUixUdE
rYw18sQXzw+QgO7JVP1GKoMFy6xi2pSwYz1oxRr4d1CLFt6bNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnUj3PJspmZ11pqgz8HCqxz2FPyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmIyMzFmZWItMzZhMy0z
NDEwLWJkODEtMzE0OWYyNWM4YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR32AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnpi9ahdD3yu/9eysZsCuopoM4hjAt2ffsVxDjBN7z8n4uc5aiNYLm2
9eOoRwH65qW0XmsG32jzGbMyPBTUUW2AD0Rbd0YqYc6dgi0duQfR9DgVt7dzGzQ7
3E/6spB1mqvOcv0BNNNn6mLT9N1jl2T0gstIfqLxU85aS5Ka7Qm8NnxlFc/l03h+
KkmvpZLFnfSD8iH2g9fEHvT+Jdj+z/oE5uMREIkohOznvlIoN1r2bUUxcHdR5wvU
rxpZi7Uc/lyfBsg6ma+2j5NFowwoJrSvRP74HtRC8hw4WcqHlUzQ0oG3cv3d7Ist
jGFWfkdV47omO/WRcdKGDdOxIn9T2rc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:12 2025 by rpki-client