
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
File: 89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa (raw, json)
Hash identifier: fBmn58AXTBfxshSwO0nOK+angDnwODOigR8u/7DCQKA=
Subject key identifier: 15:43:6D:69:05:5F:AA:B7:48:4C:C6:EF:47:B3:4F:EF:21:18:11:18
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F7D8665AE65ADE1CF6FDE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 96.249.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:d8:66:5a:e6:5a:de:1c:f6:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=32de042a-fae0-4c7a-9b85-214e8740f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:72:90:eb:56:51:85:1b:e8:7c:22:37:8f:
09:0b:86:9c:1e:62:d4:0e:d2:2a:10:80:21:49:c1:
78:2f:70:da:d9:8f:22:46:d9:bb:a2:b8:41:b7:b1:
8b:c6:21:8f:da:29:f3:3b:41:21:2c:8b:5f:49:cc:
40:c0:f4:72:3b:a6:6b:ea:00:64:c6:d1:98:54:da:
e5:0a:89:c0:0e:c2:68:09:5e:d2:9f:7e:f7:b5:60:
ca:8c:0b:27:9d:c0:ca:aa:c5:0a:f4:ca:10:84:6d:
1b:da:97:e0:8c:20:3e:aa:e5:f9:c0:e3:49:3c:41:
1b:d7:b0:78:2f:10:d5:92:e1:15:80:34:d9:4a:38:
ba:97:b0:68:b2:ec:a7:15:f5:52:1d:52:6b:43:2c:
7f:c5:7e:d4:0d:ed:18:f7:67:af:cd:50:2a:97:e1:
5f:ec:8f:de:6c:3a:40:7f:32:93:75:b6:b2:c3:d2:
60:4d:13:5b:b1:d8:11:73:9c:70:78:c2:cc:6d:e9:
5f:48:56:5d:e1:6f:8d:05:2f:0c:2b:0e:68:ee:fa:
67:8f:4c:4b:de:a8:43:d2:a4:78:2e:dc:9f:ce:8b:
51:06:1f:ab:05:3f:2f:d5:92:e0:47:8e:91:29:24:
64:24:59:df:90:b0:89:df:cd:ad:81:c1:1d:ad:eb:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:6D:69:05:5F:AA:B7:48:4C:C6:EF:47:B3:4F:EF:21:18:11:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.249.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5d:a9:53:04:89:04:bf:0a:07:98:32:49:45:14:af:31:0d:
a5:30:71:e5:2f:cb:39:06:e5:b7:e9:03:e2:a2:8a:69:b0:96:
c9:0d:d2:0a:2f:56:d4:7c:2e:24:f2:75:18:13:18:f2:de:41:
ae:bf:fb:88:e1:ea:10:ed:52:7f:b0:d6:29:0e:7a:42:a7:ef:
9d:1b:93:2c:49:3b:81:8b:29:e8:cc:da:7d:5c:c8:e5:a9:50:
92:a1:c5:03:e8:ee:58:59:91:1d:38:4e:01:c0:7d:64:37:3d:
c7:3e:08:8c:0c:59:92:48:2b:84:16:3d:b4:f6:ac:a3:93:d6:
b6:20:c2:71:0d:e2:f5:34:a5:8f:9d:62:40:a9:58:c0:a6:99:
af:66:80:24:52:e7:0a:bf:be:74:ac:14:41:da:c8:0b:18:69:
71:bd:cf:67:d8:95:59:3b:32:e6:4e:55:3e:3e:7b:b8:97:16:
a1:1e:59:f0:47:a5:c1:de:ae:cd:8d:e5:13:bf:fa:ca:83:f5:
0a:84:8b:8c:94:a3:c1:ac:7f:e9:28:7e:ae:f9:9e:fd:37:47:
51:5c:a3:eb:c4:09:ae:ec:e8:1d:fa:7b:65:04:c8:2a:90:e3:
db:e3:0b:87:31:56:ef:e8:5f:62:b9:cf:f5:b2:81:c7:2f:09:
83:22:a4:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99hmWuZa3hz2/eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MzJkZTA0MmEtZmFlMC00YzdhLTliODUtMjE0ZTg3NDBmNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31ykOtWUYUb6HwiN48JC4acHmLUDtIqEIAh
ScF4L3Da2Y8iRtm7orhBt7GLxiGP2inzO0EhLItfScxAwPRyO6Zr6gBkxtGYVNrl
ConADsJoCV7Sn373tWDKjAsnncDKqsUK9MoQhG0b2pfgjCA+quX5wONJPEEb17B4
LxDVkuEVgDTZSji6l7BosuynFfVSHVJrQyx/xX7UDe0Y92evzVAql+Ff7I/ebDpA
fzKTdbayw9JgTRNbsdgRc5xweMLMbelfSFZd4W+NBS8MKw5o7vpnj0xL3qhD0qR4
LtyfzotRBh+rBT8v1ZLgR46RKSRkJFnfkLCJ382tgcEdreuoOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVDbWkFX6q3SEzG70ezT+8hGBEYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODk0NTNkNmQtMjJjOC0z
ZjRmLWFjMDYtOWQyOWM1NmEyY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1dqVMEiQS/CgeYMklFFK8xDaUwceUvyzkG5bfpA+KiimmwlskN0gov
VtR8LiTydRgTGPLeQa6/+4jh6hDtUn+w1ikOekKn750bkyxJO4GLKejM2n1cyOWp
UJKhxQPo7lhZkR04TgHAfWQ3Pcc+CIwMWZJIK4QWPbT2rKOT1rYgwnEN4vU0pY+d
YkCpWMCmma9mgCRS5wq/vnSsFEHayAsYaXG9z2fYlVk7MuZOVT4+e7iXFqEeWfBH
pcHers2N5RO/+sqD9QqEi4yUo8Gsf+kofq75nv03R1Fco+vECa7s6B36e2UEyCqQ
49vjC4cxVu/oX2K5z/WygccvCYMipJ8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:55 2025 by rpki-client