
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa
File: db594c0b-1972-3064-abcb-2c71cbf21550.roa (raw, json)
Hash identifier: YjVcA3ESojyt64FeWFd5Hr/ppAEOL4fgB82FdZvjfGQ=
Subject key identifier: E1:8F:5C:8F:00:20:59:3F:99:F6:C6:96:2E:DF:11:F5:0C:00:CD:BD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584AF256A67487FA79EF0BE60B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa
Signing time: Sat 23 Aug 2025 01:00:33 +0000
ROA not before: Sat 23 Aug 2025 01:00:33 +0000
ROA not after: Fri 21 Nov 2025 02:00:33 +0000
asID: 3855
IP address blocks: 199.172.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f2:56:a6:74:87:fa:79:ef:0b:e6:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 23 01:00:33 2025 GMT
Not After : Nov 21 02:00:33 2025 GMT
Subject: CN=c71434b3-3ddf-40ca-86e6-1ded0596c2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:f8:b5:98:48:67:4d:1d:44:d1:60:b6:3b:
0b:03:75:5e:66:58:7e:60:12:44:b2:14:c4:3c:03:
2d:38:7c:9d:fb:8d:df:b8:69:09:bc:d2:12:94:42:
86:95:fa:aa:c6:26:65:63:dd:dd:ef:88:19:73:81:
f7:6e:f8:24:5e:8c:01:ba:06:49:fd:07:d6:47:ba:
f0:99:07:31:cc:c8:15:84:39:e1:19:d5:e2:61:c3:
bd:a7:7f:74:9d:07:84:90:2b:7c:7e:79:93:c1:ba:
2c:bb:11:01:e9:34:65:79:5a:0a:ba:42:93:0d:c7:
35:7a:0b:7f:f1:e9:eb:2a:bc:05:fb:d4:a7:b1:96:
89:92:62:06:16:12:7a:d2:4a:6f:62:c8:c7:64:c3:
53:6f:f2:63:e4:1f:73:ff:f2:4d:bd:28:97:89:18:
51:c6:b5:2d:9d:53:83:1d:d6:0e:0a:c3:b8:9a:5b:
d2:90:25:7c:b3:1c:c3:b9:c1:94:8d:18:41:72:eb:
ac:f3:00:90:50:05:fd:e9:42:79:a6:af:67:a8:e6:
ee:0a:47:df:8a:fd:3d:a6:ae:39:d0:de:a1:08:2e:
4e:5b:4f:14:06:de:ca:31:e3:a1:af:30:56:80:c8:
d7:dc:14:20:8c:8c:d4:bd:7f:fc:1c:7c:57:b4:14:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8F:5C:8F:00:20:59:3F:99:F6:C6:96:2E:DF:11:F5:0C:00:CD:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:62:0d:33:09:e9:ff:c6:2a:d3:25:2c:86:ea:de:e1:cf:47:
fb:00:7f:9a:29:2f:c9:a6:17:b8:5f:4e:4c:38:c0:3e:93:df:
58:b3:52:dd:b5:5a:34:53:7a:bc:5f:39:66:40:28:ba:27:ea:
d9:2f:52:09:bf:9f:9b:52:60:32:ff:14:c0:74:06:70:5a:a5:
37:cd:52:43:0a:d8:33:86:30:0a:04:81:21:65:83:cd:37:ea:
f7:d3:68:4f:13:d6:30:69:70:c7:32:57:54:aa:b9:aa:63:1c:
99:38:73:36:16:7c:2d:6d:24:76:0e:03:95:b4:58:6e:fa:c3:
64:fe:ef:6b:55:72:ed:a0:fc:bb:a3:05:5f:aa:b7:0a:5e:21:
9c:41:23:bc:80:93:0d:5f:76:f4:61:32:28:3a:d9:ff:22:d7:
26:05:ca:ad:27:51:b3:13:20:be:c7:52:89:75:b6:1c:3f:73:
77:5e:22:b8:21:24:49:0b:c7:fc:b8:b2:f9:35:e7:a8:8d:d2:
14:7b:a2:bc:76:bc:c6:d7:e7:14:6d:18:e0:b7:0a:b3:1e:af:
5d:40:ae:d9:40:73:dc:4a:02:71:dc:8f:32:12:02:2c:ab:38:
7b:ed:69:16:75:dc:a0:f8:4a:d7:20:9c:1b:00:4e:f7:b2:9d:
0b:cb:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:38 2025 by rpki-client