
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa
File: c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa (raw, json)
Hash identifier: 2autOiPSZIfz4dh3nDO0lb8rcTqJ3VPNtOt8zBEe1C8=
Subject key identifier: 13:61:57:55:F7:44:44:AE:E6:DC:75:71:BA:10:72:34:83:19:5D:03
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB88D301215E06FF34B144160
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 6167
IP address blocks: 72.103.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:30:12:15:e0:6f:f3:4b:14:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=32e98549-83b6-4f54-afeb-bfc745901d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:ec:8e:79:d1:a1:43:f2:dd:9d:14:99:36:
59:bc:d3:02:be:4e:39:55:e1:2a:e1:ef:4a:58:45:
e4:bb:ca:4d:60:b8:e6:96:e6:23:f7:c5:89:c7:99:
44:90:aa:82:bb:ea:d5:7a:1e:11:2d:07:53:4e:f4:
ff:c9:6c:1e:f5:48:1d:ca:88:8f:ff:cc:15:bc:db:
f8:e2:6e:2d:44:43:0c:c8:66:6e:18:9a:98:45:96:
b9:3f:b6:9c:80:13:5a:29:ec:e7:e3:40:4d:3d:98:
e9:31:3c:d2:d4:01:90:4a:8c:05:1b:c4:53:d5:9d:
9e:31:06:82:8d:1d:9d:73:fb:86:d4:9a:7c:84:bf:
6e:54:d2:51:9b:e0:be:c3:39:c2:bb:9b:09:83:d5:
35:d3:5a:5c:67:dc:e6:ba:d0:25:21:62:c2:d7:ab:
b3:56:2b:66:fb:5e:e8:f2:ac:42:95:94:5e:fa:44:
6c:6f:f9:9a:b9:e3:43:2a:03:32:ba:7f:8d:a5:96:
a6:ee:bd:7f:85:89:29:c2:17:52:ad:ad:91:84:3e:
99:6c:dc:37:7f:37:f9:03:55:d1:0e:cd:06:77:01:
2b:c8:5d:9b:a8:0c:15:38:0d:45:a7:1a:f1:f2:90:
2f:6a:59:8d:05:d9:65:9b:f5:ca:5d:65:cd:fd:ab:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:57:55:F7:44:44:AE:E6:DC:75:71:BA:10:72:34:83:19:5D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:0f:17:bf:fe:b7:b5:31:69:8b:db:9e:ec:97:22:59:2b:63:
66:82:d5:ad:98:f7:30:fb:33:d0:25:fe:6b:4b:c7:97:6a:22:
d6:1e:47:ce:d2:3b:a5:2d:c4:26:3b:f7:90:25:2c:4e:6b:73:
04:cf:3a:a3:35:c3:1b:2e:b7:bd:16:e9:19:f5:fd:2d:c4:c7:
66:f8:90:6a:1a:ec:85:1f:18:3e:37:7d:b2:99:00:dc:0f:6f:
70:6d:d2:f7:5b:31:e5:f9:44:90:7b:dd:2f:d6:b3:bb:78:cb:
7f:fa:61:39:54:62:6a:ad:94:c1:04:58:0a:b2:0b:34:da:15:
7d:d1:0f:30:3e:7d:2a:45:93:c1:25:65:e9:1f:42:ac:cf:e0:
ce:4a:86:f7:35:f2:ab:1a:69:4a:5c:e5:73:e3:27:be:60:b6:
6b:e8:2f:08:3a:74:32:56:83:11:f9:d3:67:91:c7:54:4c:60:
f0:18:bd:1f:d7:8c:7a:a7:de:5c:82:12:a5:6a:18:b3:57:43:
e0:c5:9c:15:8c:8a:87:51:17:54:e4:73:c3:93:18:e3:b8:bd:
e8:66:49:9c:ec:fe:ae:b4:79:98:17:d3:8b:04:c5:ef:37:d4:
8c:81:d6:55:28:8a:9f:09:20:8a:88:89:a9:43:a5:aa:72:01:
b0:6c:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:23:26 2025 by rpki-client