
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa
File: d58690c4-f846-381c-92e5-cd15adc11a7c.roa (raw, json)
Hash identifier: Z/xIgjG8JvTj611PhR6fGrqrAECi9O9EXBX2daCIaJE=
Subject key identifier: CD:67:62:6F:B4:3D:6C:B2:28:AD:44:39:CB:1F:32:B9:C0:70:4E:F9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584AFEE6BACD42E97ACA8F7EA780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa
Signing time: Wed 27 Aug 2025 13:00:41 +0000
ROA not before: Wed 27 Aug 2025 13:00:41 +0000
ROA not after: Tue 25 Nov 2025 14:00:41 +0000
asID: 6167
IP address blocks: 72.111.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fe:e6:ba:cd:42:e9:7a:ca:8f:7e:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 27 13:00:41 2025 GMT
Not After : Nov 25 14:00:41 2025 GMT
Subject: CN=2dfb8fc2-4ae0-4caf-b06e-5f951cc814c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:41:8c:ac:9f:d6:1a:9d:8f:38:2f:9a:f9:
f5:fc:9f:fc:ac:9f:4a:be:9a:1e:b0:96:72:bd:cc:
86:05:2b:4d:39:c5:d5:cf:da:c5:f5:b0:a2:59:92:
56:ac:26:fb:d1:9a:4d:c5:07:91:80:3c:35:3e:05:
60:e7:9e:5e:03:9a:4b:c2:82:6a:70:61:d1:55:b3:
53:26:f2:d2:e0:d2:54:d4:b7:38:92:91:f3:d4:7f:
c0:c5:d7:02:75:0b:d0:81:31:7d:95:23:61:0f:e3:
24:44:20:8c:84:ef:ea:0c:f1:e4:f1:9e:de:29:40:
3e:03:03:54:bb:ea:60:3c:a9:94:e7:b7:18:e1:ee:
44:bc:9a:ff:dd:41:cb:1e:bc:a7:45:e1:eb:0b:9c:
43:c9:c7:15:4e:66:17:36:4c:95:08:8b:c6:eb:37:
a2:26:7d:1b:52:97:31:c1:c6:e7:f8:61:14:d7:0d:
ce:15:57:66:f6:3f:8a:77:67:d4:e7:c5:0a:a1:1b:
7b:05:02:46:43:43:c6:d3:ea:3b:b9:c3:53:67:c2:
7b:42:91:54:34:0f:00:3e:a1:75:14:53:8a:d7:44:
2f:72:f8:65:8b:2f:66:1e:34:fa:43:1c:f7:fe:59:
61:ac:cf:14:66:cf:fc:d2:4a:15:cf:aa:b4:f4:dd:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:62:6F:B4:3D:6C:B2:28:AD:44:39:CB:1F:32:B9:C0:70:4E:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.111.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:3e:d1:0c:e4:06:17:24:21:19:ca:c7:2a:a9:fb:2d:6c:01:
7c:8d:aa:f3:18:aa:d4:b0:f9:a9:ea:50:2c:04:ad:48:c2:75:
6c:a5:e9:9b:5e:d4:e5:36:a3:0d:82:c5:88:ea:68:0c:ce:40:
be:19:e7:1f:d3:94:e8:10:74:c8:57:13:fb:92:a1:d3:87:bf:
f5:04:9e:f1:3f:60:a0:e3:12:8c:b9:63:e0:16:9c:69:d4:e0:
21:c2:3b:b8:e8:7d:16:1e:e3:e2:c2:05:22:6c:b3:f6:99:d3:
ce:13:27:7b:b0:bc:57:54:e1:9a:6e:3a:7c:a0:3a:ed:d4:02:
3d:af:d6:69:48:41:b0:c6:99:95:dd:61:a7:0d:0d:99:7d:61:
41:66:34:70:76:eb:8f:09:a2:0d:c2:d5:97:f5:84:c9:33:14:
84:07:d4:dc:09:2b:14:5e:06:b1:11:ce:c9:87:90:3c:7f:44:
3b:f8:7d:5c:29:56:35:d6:75:5e:0e:56:61:08:3e:ec:c2:95:
7c:fd:b3:00:db:8c:b0:67:8a:19:e9:61:be:8d:b9:4b:25:78:
ec:18:aa:52:de:db:da:b6:d6:32:3e:6a:38:97:d2:59:3d:5e:
af:9a:a7:db:ff:45:d6:3e:b7:21:ae:85:22:85:57:b9:f0:80:
38:74:8e:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rrNQul6yo9+p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
MmRmYjhmYzItNGFlMC00Y2FmLWIwNmUtNWY5NTFjYzgxNGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIxBjKyf1hqdjzgvmvn1/J/8rJ9KvpoesJZy
vcyGBStNOcXVz9rF9bCiWZJWrCb70ZpNxQeRgDw1PgVg555eA5pLwoJqcGHRVbNT
JvLS4NJU1Lc4kpHz1H/AxdcCdQvQgTF9lSNhD+MkRCCMhO/qDPHk8Z7eKUA+AwNU
u+pgPKmU57cY4e5EvJr/3UHLHrynReHrC5xDyccVTmYXNkyVCIvG6zeiJn0bUpcx
wcbn+GEU1w3OFVdm9j+Kd2fU58UKoRt7BQJGQ0PG0+o7ucNTZ8J7QpFUNA8APqF1
FFOK10Qvcvhliy9mHjT6Qxz3/llhrM8UZs/80koVz6q09N2eZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1nYm+0PWyyKK1EOcsfMrnAcE75MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDU4NjkwYzQtZjg0Ni0z
ODFjLTkyZTUtY2QxNWFkYzExYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSG+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFw+0QzkBhckIRnKxyqp+y1sAXyNqvMYqtSw+anqUCwErUjCdWyl6Zte
1OU2ow2CxYjqaAzOQL4Z5x/TlOgQdMhXE/uSodOHv/UEnvE/YKDjEoy5Y+AWnGnU
4CHCO7jofRYe4+LCBSJss/aZ084TJ3uwvFdU4ZpuOnygOu3UAj2v1mlIQbDGmZXd
YacNDZl9YUFmNHB2648Jog3C1Zf1hMkzFIQH1NwJKxReBrERzsmHkDx/RDv4fVwp
VjXWdV4OVmEIPuzClXz9swDbjLBnihnpYb6NuUsleOwYqlLe29q21jI+ajiX0lk9
Xq+ap9v/RdY+tyGuhSKFV7nwgDh0jnw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:11:59 2025 by rpki-client