
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
File: b1601996-b300-33cd-a7c7-720d86412bf5.roa (raw, json)
Hash identifier: 5D4qbMZXGw07dFg7w0p5fLHPWPvQUTz3oVdrl1bFgzo=
Subject key identifier: 6C:B5:1C:35:37:85:C1:42:7E:D6:90:3C:96:EC:57:8A:21:7A:73:B3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F8034DDCAB077134291FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 71.245.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f8:03:4d:dc:ab:07:71:34:29:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=d2ff470e-be7e-49e8-9ee9-ef9175dfff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:14:30:9e:e2:ec:e8:a6:d8:11:b8:a4:7a:
1c:12:85:8d:6b:b3:7b:19:fb:8e:92:c7:af:2b:d8:
7c:9a:fe:85:b3:2c:00:a5:2a:41:bd:fd:41:89:06:
83:76:b1:07:3e:8f:1f:78:b0:b5:de:d0:68:c1:a1:
da:71:75:43:e9:2f:b2:98:fb:4e:2b:04:6e:cc:43:
47:8c:b5:bd:21:9f:93:2e:64:52:6f:60:06:b0:03:
06:b9:4e:80:58:08:b4:8b:65:ad:09:3b:3b:d2:48:
2c:6b:a1:9b:28:37:40:73:a7:34:c8:30:b1:0d:01:
cc:fa:c5:7e:e8:1c:2b:22:3e:a0:58:a2:7a:2d:dc:
c1:56:92:1f:11:cc:67:e3:d6:9f:23:f1:93:40:d4:
7c:bb:08:12:36:25:aa:e0:99:0e:a4:69:a2:62:8b:
f5:86:6b:20:ff:93:f8:11:9c:1a:ea:15:d4:45:8b:
e2:ef:cf:15:3d:05:fd:90:05:b5:48:f4:ba:c4:6b:
8a:9a:3f:e8:68:3a:4d:62:fd:75:ec:33:12:1d:bd:
73:a7:a9:a6:b0:f8:28:c3:87:bf:6a:3b:f7:1f:fa:
df:4f:9c:b8:54:0b:60:22:ee:8c:5d:09:15:9c:e6:
ca:fe:15:71:22:38:47:93:26:ac:d5:cb:08:08:93:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B5:1C:35:37:85:C1:42:7E:D6:90:3C:96:EC:57:8A:21:7A:73:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.245.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:39:8c:cb:75:16:53:ab:21:0e:f1:5c:d9:56:4f:6d:27:fa:
10:11:6c:e7:09:fb:1d:60:8f:d6:59:d5:0d:7c:71:a9:b3:d5:
00:d8:56:f8:b8:48:0c:43:84:a4:c9:20:9a:32:83:32:ec:10:
f7:fb:db:1b:0a:94:d4:cc:ba:f7:85:e6:50:d5:3e:5d:c8:a6:
32:71:9a:bc:6d:78:f7:ce:a1:80:b4:85:6a:a3:03:4f:d0:0d:
42:13:d7:2e:07:27:f3:d0:f6:5c:b0:43:68:4f:5f:1c:68:26:
21:24:2e:09:df:1a:ff:07:3b:ff:f0:d5:7f:82:80:65:a1:d3:
67:c9:09:dd:31:b8:48:56:48:df:70:79:ef:51:d6:26:93:b6:
22:6d:90:07:52:d2:3a:33:ea:2e:29:96:9d:b5:2d:5e:31:b8:
48:2c:f9:6c:c0:46:19:bf:0f:ae:cd:80:8e:be:c5:2b:dc:12:
d9:2c:d5:8b:68:2a:11:82:31:80:8b:1d:c0:14:73:2e:e0:1c:
5f:06:76:cf:b0:4c:98:8f:21:5d:dc:a2:8e:37:f5:82:74:0b:
cf:19:6b:df:fd:10:6d:63:62:a6:5e:96:05:23:ff:fb:e6:32:
53:4a:3c:ca:45:8d:44:d4:a9:6c:49:d3:81:1b:d0:a9:12:cd:
1d:04:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:06 2025 by rpki-client