
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa
File: 7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa (raw, json)
Hash identifier: fos1gyZDd3ha1+Qg369lnPiRf5/t+9Wk8I44u9tUu0U=
Subject key identifier: 58:58:80:71:53:48:63:BF:8D:87:D5:0D:DC:E7:0C:24:E5:CD:30:2C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F7D832E17F56AFB4EB2E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 70.109.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:d8:32:e1:7f:56:af:b4:eb:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=073330b3-57d4-4cbd-80d7-083a4920719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:b9:1d:9c:87:b1:54:20:97:36:3a:1f:59:
57:83:ba:f3:8c:f9:55:81:6d:03:05:bc:01:4c:7e:
97:f8:78:bc:f1:bc:81:16:7b:e8:84:7b:3a:69:57:
a2:05:02:c4:52:fc:18:2d:8e:dd:54:c2:c4:7a:42:
d0:08:41:cd:0d:c1:5a:aa:94:a5:11:44:e9:92:af:
ed:bf:36:b3:10:15:49:46:78:49:aa:78:5e:40:ea:
22:a9:0b:f4:38:b1:48:f6:a5:f9:a9:e3:37:f3:c0:
13:18:f6:bc:a4:46:32:04:ef:3a:35:05:96:ad:0c:
78:42:f1:99:32:58:95:dd:77:51:84:2f:60:46:ff:
4e:80:60:f4:78:6a:a1:b1:34:6b:87:91:88:17:bc:
b6:d1:1d:dd:49:e2:03:ab:21:c1:66:cf:86:58:b3:
14:7f:bf:9c:ce:32:cc:62:0f:c1:6f:4b:78:32:20:
80:b2:85:45:00:f6:e4:a1:e3:ba:2e:b9:34:bb:30:
f6:79:cd:07:63:b5:21:ef:56:bc:0d:d1:aa:b7:41:
2a:93:33:9a:56:69:1a:04:41:2b:62:bd:7c:89:be:
2e:8d:48:f6:57:e6:fa:44:c0:32:f6:80:91:c5:57:
df:1d:c6:1b:6f:55:09:3d:a6:02:60:5d:71:20:80:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:80:71:53:48:63:BF:8D:87:D5:0D:DC:E7:0C:24:E5:CD:30:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e636e9f-1a75-3eac-a0fa-14b5168280fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.109.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:4d:c4:bc:37:78:de:28:d2:80:4f:ce:44:f1:f7:34:56:59:
1f:ee:52:2a:cc:85:97:b7:d0:56:b8:04:dc:df:50:a5:89:ea:
30:79:d0:e7:3a:7d:5b:ca:c0:a7:31:02:55:52:d8:af:63:45:
0c:57:2e:27:6a:6e:8f:ce:69:45:ad:35:31:65:1b:2b:74:15:
41:bb:25:09:c1:74:3b:2f:0e:f1:94:fb:7a:dc:44:e6:7b:bd:
c3:89:a6:aa:e5:8d:d6:88:c7:78:7c:d8:45:e4:68:b1:42:75:
21:fd:62:a4:84:21:e9:0c:81:9e:6b:34:93:30:c6:b3:bc:d0:
83:a3:f4:de:98:fe:b8:e7:b8:e0:d4:7d:ad:fc:e0:f9:1e:c4:
c7:ed:cb:78:b3:e9:15:0c:46:ec:66:75:08:00:2c:d1:11:4a:
c1:28:84:f9:fe:13:fd:38:b8:3e:00:19:1e:6d:27:bd:16:f9:
b8:b1:b0:f8:ee:83:d8:8f:84:c1:e8:35:37:80:ac:ac:df:e3:
5c:44:14:3b:2c:54:29:bf:31:6d:ad:af:7e:19:a3:1b:54:a0:
53:69:5b:2e:de:ef:51:8b:e4:55:9d:aa:67:ff:40:43:54:ae:
08:99:38:5e:40:9e:db:ba:df:49:25:99:ce:be:fa:62:0d:90:
00:78:4d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:12 2025 by rpki-client