
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa486de4-14b0-3cff-9994-00f92658a326.roa
File: aa486de4-14b0-3cff-9994-00f92658a326.roa (raw, json)
Hash identifier: 0Cq7u6l2Hx+paMBOLc7Gp5x+QpHz3csDNC79GIvWf9E=
Subject key identifier: AB:22:F5:C7:19:5B:0E:9B:AB:A3:93:CC:1F:05:AD:A6:F5:9D:B7:FF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BA39D30A5309729716CCF5180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa486de4-14b0-3cff-9994-00f92658a326.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 0
IP address blocks: 208.234.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:30:a5:30:97:29:71:6c:cf:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=1bf54a23-25d4-4291-8e1e-18917d65045f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:91:23:8f:f2:8a:ff:61:e5:42:f9:2e:6d:
55:5c:6c:b2:49:49:6b:25:ec:a6:33:16:81:28:8f:
6b:d4:cd:f9:89:a4:57:60:7b:f1:28:81:d0:a3:a5:
1d:2a:73:ba:82:5f:a4:d1:b6:f5:18:3d:88:ca:b9:
39:ef:b7:dc:73:4f:ab:80:0d:52:68:2a:26:44:f7:
4f:c4:03:11:84:8b:76:dd:70:41:37:42:b8:0c:78:
ca:b9:a4:06:c2:80:4c:46:2e:31:c9:49:13:05:24:
a6:ef:85:dc:38:66:33:f6:6b:b4:3d:28:6a:55:c7:
44:f0:20:da:ee:62:e8:c5:ec:71:06:fa:7c:d8:79:
b9:b5:bd:4f:9c:bb:e2:1f:27:3d:82:15:91:2a:1c:
3f:95:a2:01:54:fb:3e:da:d3:00:9f:ae:b1:47:2a:
d3:64:86:79:59:37:7d:a0:4c:e1:0c:22:f4:13:e9:
66:96:d9:0f:0a:e1:e9:1d:74:a8:f6:6a:5a:52:bb:
c5:a4:48:79:8b:e0:3f:cd:9c:96:53:2c:ef:c0:0e:
bc:e2:e9:ef:06:a6:16:ae:9d:43:52:da:0a:d4:cf:
27:c5:4b:5c:db:f5:42:17:f4:2c:2e:6d:41:ce:de:
d2:f5:01:a8:da:44:e5:d1:cd:07:95:af:14:5b:95:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:22:F5:C7:19:5B:0E:9B:AB:A3:93:CC:1F:05:AD:A6:F5:9D:B7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa486de4-14b0-3cff-9994-00f92658a326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.234.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:92:5c:f9:12:03:a8:c3:67:31:6b:1a:77:59:85:d3:65:1a:
47:f3:1d:9a:52:28:d4:16:60:ac:ac:eb:35:23:77:a5:9b:d4:
e6:52:24:73:0f:51:ca:cd:1f:cf:ef:96:64:ae:c9:23:44:6c:
53:6a:73:47:d7:92:56:ce:09:a2:5f:bf:24:39:7d:a3:c5:3f:
fc:70:b4:91:32:76:ff:48:fd:f2:ba:ab:b9:4b:4a:b9:06:00:
36:90:d6:ed:bc:22:13:22:fb:42:ce:9d:2c:81:55:8b:bd:f4:
17:8f:80:e5:66:bb:68:bd:e2:5b:9d:b8:53:ac:e6:97:9c:92:
3a:44:74:a0:13:71:ad:aa:88:13:92:5a:34:df:b1:8c:67:e4:
99:b4:d7:90:d1:28:09:bd:97:a8:38:8c:25:1a:fe:a2:27:0a:
d2:1e:22:ce:3e:3f:fd:a8:c1:3c:1c:e3:24:06:0c:86:db:f8:
16:7b:f6:ff:89:8e:5f:26:69:fc:ab:3f:1e:8f:06:14:35:70:
5a:d0:87:33:4a:cb:bf:53:f5:b6:21:05:56:05:37:aa:fc:60:
46:93:54:d7:b7:ba:fe:db:11:36:dd:b8:ca:b9:9e:a9:bd:35:
18:12:62:8a:b5:51:b7:b4:94:5a:e7:bf:e2:d2:3c:ab:90:03:
89:42:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:15 2025 by rpki-client