
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa
File: 8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa (raw, json)
Hash identifier: OZVKvUDAHZLxw1iOno0Zkxtp68fslcXm/vGpakQnTfQ=
Subject key identifier: 8A:6B:C2:75:FD:47:6C:B0:F8:33:F9:7C:37:60:D0:CA:E7:5D:A5:7E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F800FBB7DAF9AC55297FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 70.110.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f8:00:fb:b7:da:f9:ac:55:29:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=e1c5d8f5-ee59-4327-b526-f8ea8602dfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:83:74:b2:03:df:2b:a6:e2:1e:b8:b4:b9:
18:7a:a8:0a:cf:50:f4:a6:bc:15:ab:d3:e2:1d:d0:
4e:f1:2c:17:dc:32:f0:b4:a5:c0:44:47:e4:a4:11:
04:9b:3b:97:77:05:b4:5b:42:6f:95:ad:29:ff:3f:
5c:b5:2b:c5:82:5b:df:2d:43:4c:d9:df:b2:46:b8:
8a:ea:29:65:f5:f5:83:10:50:6a:5e:e1:ce:95:0c:
40:77:04:91:e6:ec:f7:d9:d2:7a:bb:bf:75:30:b0:
ee:25:ee:b0:31:7a:61:75:1b:23:b6:1c:42:3e:da:
f9:61:9e:81:28:27:db:c8:83:10:32:d4:e3:49:bf:
ab:00:b2:ed:ad:bc:d8:84:58:7b:be:ad:05:b7:da:
fe:5b:45:79:ff:23:06:87:c0:8a:38:d9:1a:b2:a9:
39:5c:12:46:a1:3a:4a:03:41:e7:05:88:1e:1d:f7:
fd:69:79:6a:7f:87:7e:5a:39:0f:50:57:3d:2c:79:
c6:27:c7:e1:82:9c:84:78:2d:a2:fc:3c:f8:22:74:
fb:ca:45:c0:0f:89:2a:b6:03:24:90:db:76:6d:bd:
25:2a:32:b8:c3:58:f3:1c:f2:f9:84:81:e1:06:4a:
9c:05:73:f1:74:a5:99:f3:5d:cd:81:f2:ef:49:63:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:C2:75:FD:47:6C:B0:F8:33:F9:7C:37:60:D0:CA:E7:5D:A5:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a3837cb-87f3-327e-a7c2-6685a1a8613e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.110.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:bc:2f:2a:18:b8:83:0b:45:ea:0f:4a:62:75:52:77:0f:08:
d0:5f:c1:65:96:84:9f:c1:2e:25:f8:75:9f:ad:eb:81:7c:70:
6e:b9:98:b0:50:37:b1:50:17:ca:82:a3:fd:31:72:ae:9b:72:
c0:5e:69:74:b2:0b:32:ca:6c:36:3d:50:3d:d4:ee:4c:31:97:
62:2a:19:8a:d5:7b:bb:3f:44:58:de:cd:b6:9b:56:97:ea:4f:
01:95:28:38:39:ef:e7:f4:90:ba:84:65:ff:27:0b:82:74:39:
05:41:25:45:dc:21:5a:d8:c0:9d:49:32:49:7f:09:c4:46:fd:
b1:17:78:9c:d0:e7:b7:16:90:8f:78:d2:37:71:d4:0b:de:c6:
0d:e2:80:9b:f8:57:2e:87:68:38:2f:ff:94:ed:2c:bf:6f:85:
7b:c1:f8:bf:0d:4c:2a:ca:56:f4:de:fe:0e:a0:62:fb:31:ae:
ce:43:40:ff:00:1c:ee:30:76:ea:95:04:04:46:ad:66:7c:e3:
09:e6:e5:d2:f0:99:7d:17:10:80:f8:f1:51:b7:21:36:dd:00:
99:86:2c:1a:c3:81:a7:60:d5:5b:6d:ba:2c:2a:eb:8e:6b:fe:
51:f2:1e:09:d5:d1:ef:ba:1d:a6:bd:63:46:26:ae:49:f2:b8:
c7:ff:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:18:50 2025 by rpki-client