
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85d2b320-42a7-3180-901a-9854a016a4cd.roa
File: 85d2b320-42a7-3180-901a-9854a016a4cd.roa (raw, json)
Hash identifier: JZhYm5iQwRdrvSf597qA3NqFikZItaRnfHK5ZtOdeI4=
Subject key identifier: 3F:0C:90:B4:DA:20:59:72:61:33:D8:FF:A9:60:C4:64:BF:A8:9D:D9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BABFD103117E7067F4F410300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85d2b320-42a7-3180-901a-9854a016a4cd.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 701
IP address blocks: 71.246.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:10:31:17:e7:06:7f:4f:41:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=bd07a8da-1e90-4f16-b5ef-6a1accaf105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:02:21:5e:14:7b:87:0a:91:b2:68:32:14:
50:90:5c:54:46:6d:55:87:38:84:97:23:aa:f2:8f:
0c:ec:f3:20:65:38:35:41:99:f3:d1:ac:65:ab:f6:
da:05:c9:4c:28:dc:49:62:ee:bb:54:b2:27:30:2c:
c4:2c:ec:d0:c8:2b:6d:d8:03:15:00:c7:8e:dd:d7:
70:e2:e9:5b:0a:c0:11:09:13:a0:e6:95:ae:e7:64:
56:e2:d9:5a:f0:b7:e3:96:77:53:f0:95:61:89:82:
04:00:e6:5c:13:1e:cb:19:52:b7:47:07:2b:8d:a3:
7a:bd:5a:80:fb:ec:09:2f:e5:26:69:8f:0e:4b:2a:
11:06:52:25:66:f5:77:e6:04:77:c8:c0:93:a6:d4:
a6:da:5e:b9:7e:70:20:2d:3d:31:f1:18:7a:fa:c4:
18:d9:a4:65:54:d7:24:ee:7b:09:61:12:66:22:d3:
df:b7:d9:0f:bd:6b:bf:0a:ac:b9:20:c5:57:70:28:
da:5f:b4:35:54:5b:34:84:96:86:65:41:93:65:2c:
3c:7d:de:78:57:fd:a1:fc:b3:e2:e0:3d:4e:96:77:
2a:73:24:71:23:89:aa:28:09:25:0b:80:f3:a2:4b:
9b:2c:cb:ab:90:e5:3e:5a:95:ce:b2:4b:00:bc:a3:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0C:90:B4:DA:20:59:72:61:33:D8:FF:A9:60:C4:64:BF:A8:9D:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85d2b320-42a7-3180-901a-9854a016a4cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.246.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:80:a7:da:99:b2:36:b0:29:37:cb:af:d2:2c:c1:f8:38:8e:
9c:25:bc:13:20:f7:40:a1:38:c6:50:91:91:99:34:f9:51:af:
77:5f:86:7e:f9:53:bd:dd:e7:ed:39:d1:d2:f9:94:b5:87:f1:
08:57:80:6e:fd:c9:59:01:f0:d7:27:c4:d5:5f:70:47:c2:76:
eb:70:ee:01:a0:6d:de:6c:d5:70:ca:e6:2f:5c:89:33:04:99:
72:34:2b:46:07:29:cf:ba:1f:71:73:e4:af:31:d9:04:74:1f:
32:75:56:9d:28:3a:aa:37:6c:79:7c:9c:58:70:63:dc:9c:02:
c6:58:9a:ef:1b:5a:d0:62:57:96:b0:15:2e:55:13:6b:a1:8c:
28:33:d3:f3:89:2f:37:8d:ea:19:cf:01:d0:34:ce:08:90:94:
e2:3c:50:62:60:d4:97:d7:ce:0d:56:df:0a:7d:3a:2c:a6:88:
da:6d:76:f3:68:f7:10:14:2d:05:7f:36:99:c1:ee:15:f3:b3:
cc:d7:31:d2:88:b5:bb:ef:26:65:25:a5:f7:7d:a3:c7:c7:ed:
8b:9d:00:ef:96:b3:34:eb:7e:6e:b6:6a:e1:8a:f9:fb:25:3a:
c6:e0:f4:c4:5f:f0:f1:85:ff:b3:0d:3c:e1:54:90:b5:ff:17:
c3:c5:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:15 2025 by rpki-client