
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8c83c-418e-309a-ba88-a56bf8c882a2.roa
File: 96d8c83c-418e-309a-ba88-a56bf8c882a2.roa (raw, json)
Hash identifier: Me2vzOqDexCoz+KwPdYwp4INmbrgIXXcWGfBUiX4brs=
Subject key identifier: E1:F7:C6:7F:EC:AE:DE:1E:8C:54:86:DB:58:C3:E0:77:64:7F:99:F5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B9CCF9F0A6C16429EDF64A7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8c83c-418e-309a-ba88-a56bf8c882a2.roa
Signing time: Thu 23 Oct 2025 02:32:08 +0000
ROA not before: Thu 23 Oct 2025 02:32:08 +0000
ROA not after: Wed 21 Jan 2026 03:32:08 +0000
asID: 0
IP address blocks: 198.229.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9c:cf:9f:0a:6c:16:42:9e:df:64:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 23 02:32:08 2025 GMT
Not After : Jan 21 03:32:08 2026 GMT
Subject: CN=88a9147f-09b9-47e4-ae58-5f65d9da61e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:d6:6a:c9:fc:b4:34:6a:4b:e4:0c:ff:2b:
5f:05:b1:38:13:a0:77:d2:33:d8:a0:61:65:e4:22:
3b:80:2e:fe:e1:51:15:4f:05:c4:65:5f:c6:1f:92:
6a:0a:2a:f9:4a:7c:9c:9a:1a:ab:a3:97:b5:57:2f:
b7:0a:29:90:f9:3f:9d:22:39:bd:fa:1f:b9:46:a7:
7e:40:bc:2a:d0:e2:a0:da:47:5b:24:b8:eb:75:18:
d3:d3:d0:10:a7:56:29:fd:d5:a3:d3:d5:d2:0b:ab:
38:dd:ae:b3:0d:13:40:ac:f0:19:5f:0c:9b:54:97:
b9:65:fb:89:c3:ef:5d:b2:18:89:7c:ca:c7:48:1e:
43:90:3c:a0:ea:9c:4e:d2:85:d4:14:96:d1:15:a4:
7d:3b:de:e3:8a:c9:cc:09:7a:c5:05:e6:c6:9d:ae:
82:a2:1e:9b:7d:e8:13:66:b1:4a:b5:d7:b3:c2:3b:
20:f7:55:13:89:d4:fd:7b:05:6c:73:f5:6c:ba:c4:
7b:bd:31:ea:ba:30:0e:e5:01:0a:da:0e:67:34:05:
48:5e:4a:8e:17:ec:c8:d2:91:c2:30:37:26:1b:d2:
fa:b7:7a:45:29:90:03:95:5e:91:2b:41:0e:38:10:
33:4a:85:85:8f:65:be:22:22:7b:84:00:2f:48:86:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:C6:7F:EC:AE:DE:1E:8C:54:86:DB:58:C3:E0:77:64:7F:99:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8c83c-418e-309a-ba88-a56bf8c882a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.229.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ec:62:ff:99:2b:64:2d:8b:dd:4a:ba:a2:d5:a2:5b:45:c8:
94:c0:2d:76:9f:03:a0:e0:7a:f6:8d:4d:8d:44:bc:c6:fa:28:
9e:07:15:9e:19:d8:4b:65:65:d1:07:e3:bc:e6:0d:18:16:7b:
b0:b5:4a:e3:91:b9:7f:44:f3:a8:09:b7:cb:63:ae:7a:ea:c5:
7d:34:2b:31:7c:4e:f9:99:f5:d5:b6:a8:bc:2e:06:df:e1:08:
52:fb:7e:2c:6e:26:0c:71:f9:b6:d9:16:eb:8e:bf:e8:c9:83:
00:93:e1:c8:9e:54:c6:48:0e:99:92:25:23:a4:97:65:69:e8:
91:56:96:39:de:aa:b4:8c:23:e8:13:9d:37:c7:8d:5b:e6:f1:
ac:7d:7f:70:9e:f2:dc:b7:df:f4:79:2c:99:2c:21:bd:13:98:
2b:5c:11:95:51:08:d5:39:62:d5:22:90:c2:bf:c5:3d:54:fc:
6b:7a:06:e4:89:43:61:c8:04:1f:76:d1:d7:60:59:45:6d:6e:
28:14:30:3b:10:5f:46:b4:fd:e5:e2:a5:18:be:b0:1a:d9:eb:
70:19:e1:39:b9:e3:e9:46:d1:7e:ee:c4:4f:cd:9f:34:fd:50:
cd:d4:9b:72:0e:32:e4:e7:18:6a:a7:99:83:b7:f8:27:6a:f8:
7a:a2:66:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucz58KbBZCnt9kp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAyMzAyMzIwOFoXDTI2MDEyMTAzMzIwOFowLzEtMCsGA1UEAxMk
ODhhOTE0N2YtMDliOS00N2U0LWFlNTgtNWY2NWQ5ZGE2MWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkrWasn8tDRqS+QM/ytfBbE4E6B30jPYoGFl
5CI7gC7+4VEVTwXEZV/GH5JqCir5Snycmhqro5e1Vy+3CimQ+T+dIjm9+h+5Rqd+
QLwq0OKg2kdbJLjrdRjT09AQp1Yp/dWj09XSC6s43a6zDRNArPAZXwybVJe5ZfuJ
w+9dshiJfMrHSB5DkDyg6pxO0oXUFJbRFaR9O97jisnMCXrFBebGna6Coh6bfegT
ZrFKtdezwjsg91UTidT9ewVsc/VsusR7vTHqujAO5QEK2g5nNAVIXkqOF+zI0pHC
MDcmG9L6t3pFKZADlV6RK0EOOBAzSoWFj2W+IiJ7hAAvSIaGbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOH3xn/srt4ejFSG21jD4Hdkf5n1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTZkOGM4M2MtNDE4ZS0z
MDlhLWJhODgtYTU2YmY4Yzg4MmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuXQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXsYv+ZK2Qti91KuqLVoltFyJTALXafA6DgevaNTY1EvMb6KJ4HFZ4Z
2EtlZdEH47zmDRgWe7C1SuORuX9E86gJt8tjrnrqxX00KzF8TvmZ9dW2qLwuBt/h
CFL7fixuJgxx+bbZFuuOv+jJgwCT4cieVMZIDpmSJSOkl2Vp6JFWljneqrSMI+gT
nTfHjVvm8ax9f3Ce8ty33/R5LJksIb0TmCtcEZVRCNU5YtUikMK/xT1U/Gt6BuSJ
Q2HIBB920ddgWUVtbigUMDsQX0a0/eXipRi+sBrZ63AZ4Tm54+lG0X7uxE/NnzT9
UM3Um3IOMuTnGGqnmYO3+Cdq+HqiZpU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:33 2025 by rpki-client