
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
File: 888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json)
Hash identifier: hu2xcrBnz+cZtyda/5Ji5EAJ9nGV1UZCbTy2zDh8G0w=
Subject key identifier: A5:E0:F2:D0:5B:6D:54:66:4C:6A:E9:DF:6B:DF:86:26:C7:82:20:96
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB88D31BA08FE702278F79980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 6167
IP address blocks: 72.97.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:31:ba:08:fe:70:22:78:f7:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=76fe161a-8285-486d-b78e-060a17a29076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:5e:37:4a:81:43:86:34:72:12:28:91:1a:
c8:4a:14:c9:86:af:f8:a3:1e:13:bf:b7:84:5a:fb:
81:4c:df:4c:b0:b6:23:ef:8d:c6:68:ca:b5:5c:67:
ce:cc:ee:9f:f3:c2:03:33:83:73:0b:d2:8e:3b:c9:
5d:68:27:cb:5e:28:f6:4e:68:45:57:7b:a5:fb:e3:
7f:d9:a9:4a:e0:52:c4:2c:7a:5a:5a:c2:59:df:23:
ef:fc:48:78:77:d0:c3:65:b5:8b:0c:9c:c9:f4:39:
62:1a:5e:f6:c2:88:7a:ef:d1:01:c0:e0:33:1a:08:
df:43:ab:4e:0c:a6:48:47:6d:0c:00:74:f3:47:3f:
dd:e4:44:cb:bb:2c:85:c5:65:d6:f9:bf:88:eb:8d:
af:a2:06:56:aa:2c:7d:14:e8:33:5d:49:03:76:f9:
92:88:cf:dd:c1:f9:7f:3a:f1:bf:bf:79:2e:72:1a:
0e:0b:5a:7d:8c:dd:d2:ff:46:e8:c2:64:72:e0:8f:
12:5a:da:a6:09:4c:51:93:88:ce:f4:fb:b4:48:2f:
f4:af:d8:76:b3:b0:65:df:d1:44:e0:ca:92:f1:eb:
26:5d:16:95:c1:fd:fe:45:a1:52:4f:01:70:9e:75:
5f:14:b0:d5:c5:fc:d0:db:dc:1e:0b:15:6a:38:76:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:F2:D0:5B:6D:54:66:4C:6A:E9:DF:6B:DF:86:26:C7:82:20:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.97.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:40:3a:30:99:b4:f9:17:ca:47:4a:04:76:4d:09:64:46:be:
d6:6d:67:23:39:d3:a6:0c:df:d0:45:28:8e:cd:de:ec:4c:ab:
1b:08:f9:4b:1b:78:46:65:9a:3c:31:3c:4d:93:f0:81:78:43:
01:aa:7c:f2:bb:ff:e0:5c:d2:d0:55:3a:42:e2:f1:89:5e:2a:
0a:e7:b5:89:ba:49:6f:2a:ae:ae:d0:a2:b2:b4:1c:29:b2:32:
73:01:8f:6e:af:1c:91:df:95:79:46:54:87:48:f8:49:e3:dc:
b6:46:c1:7f:5e:8e:e9:ad:10:12:60:60:f9:b5:0e:18:da:f6:
c3:38:22:57:6b:a8:0b:d5:ab:8e:e5:c1:8c:69:bf:7a:cf:3d:
34:8c:83:ee:60:d5:2c:9c:32:5b:06:98:06:1b:be:c1:2f:48:
90:41:6d:43:3c:c4:79:a6:e2:b8:41:0d:63:ea:08:12:4a:5e:
1a:36:fb:16:db:af:d0:27:f3:e2:6d:45:6e:66:32:92:fa:91:
1b:d9:fe:e7:ea:79:2d:1c:1f:5d:5a:20:95:4c:a7:70:2d:97:
b3:26:b4:20:6f:28:b7:36:8e:46:d6:dd:5f:13:3e:01:7d:3e:
08:54:1e:83:e7:d1:05:02:b5:5a:29:30:46:a5:55:1b:25:45:
07:47:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:02:49 2025 by rpki-client