
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3440031-1373-3b51-830e-ae03c87a6f06.roa
File: e3440031-1373-3b51-830e-ae03c87a6f06.roa (raw, json)
Hash identifier: GBah1ZxEwEQIdphU9HmNSR5nYUcbGnBbyhkj9sueSKg=
Subject key identifier: 79:64:D4:85:E8:87:61:C8:60:0F:C5:9F:00:F4:EA:E8:67:5C:01:69
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB88D40A634427CFA3CC27C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3440031-1373-3b51-830e-ae03c87a6f06.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 6167
IP address blocks: 72.104.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:40:a6:34:42:7c:fa:3c:c2:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=8b3f062b-56a1-4727-a548-8473404048ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:3b:bc:b5:00:65:fc:e5:02:db:bf:83:94:
1f:43:b0:85:81:e0:a7:e7:56:9b:d9:07:f8:51:40:
c7:ac:d9:84:4b:8b:75:0a:9d:16:56:f8:ca:9a:63:
46:0d:6f:24:d5:d3:ba:ed:96:c1:46:9c:59:46:3f:
ef:df:a0:90:b2:f1:04:8f:85:11:cb:55:69:1f:7b:
ce:69:f7:63:98:0e:3b:a5:2a:d6:26:91:f5:07:db:
3b:25:dc:64:7d:0d:40:f8:01:e1:fa:78:cf:14:66:
2f:aa:80:88:bb:a2:af:c2:18:1e:6a:09:45:1a:80:
a3:40:04:b6:cf:96:7d:00:8f:68:01:f9:a8:7d:14:
d0:24:e6:bc:cb:a2:14:c4:ff:21:cb:77:0a:5f:08:
19:73:19:8e:fb:0a:5e:1b:eb:80:d3:6d:5c:8e:eb:
ff:25:9a:39:67:cc:05:4a:50:ec:c6:b9:66:07:b2:
47:5a:f1:cb:5d:01:c8:1b:66:2d:9f:5f:3e:f2:c7:
b9:b3:a2:6e:b8:f8:4a:62:d7:71:67:23:c5:50:af:
bc:d0:6e:d5:d6:8a:e5:17:71:a7:58:f0:e6:a7:9e:
1b:3c:f0:7a:e8:0b:eb:5d:22:b6:f8:e1:89:56:75:
9f:5c:f8:59:3a:f6:bf:8b:ca:2e:2d:27:5a:0d:3a:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:D4:85:E8:87:61:C8:60:0F:C5:9F:00:F4:EA:E8:67:5C:01:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3440031-1373-3b51-830e-ae03c87a6f06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.104.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4a:a6:de:16:73:65:60:dd:9a:52:dc:44:cc:31:04:46:b9:
10:4b:36:af:f1:1a:ab:13:e2:36:28:46:d3:ea:bc:f0:35:9b:
ac:58:70:fd:11:b7:60:c7:05:57:59:fd:e5:d9:d1:2f:8d:67:
c9:89:11:f0:9b:d4:36:2c:3b:27:77:51:be:a0:05:49:c0:d5:
05:74:ec:e5:1f:ae:62:3c:fd:63:fa:62:0b:2b:02:23:87:7f:
77:25:87:a8:6e:30:2e:78:24:d1:a1:a7:fa:a3:a9:8f:c8:87:
19:b0:34:d0:8a:08:17:53:b7:9d:16:03:16:1a:d7:5e:b7:93:
c3:76:23:e5:94:e6:67:2d:99:42:6d:05:58:3d:fc:5e:29:de:
07:dc:21:22:53:f9:85:52:2f:cf:74:01:fd:a0:fb:c4:8b:2d:
7b:75:30:8d:d1:a2:bd:be:04:93:a9:03:a7:78:d8:2b:bc:60:
64:c7:5b:25:64:91:c2:1b:29:74:df:38:e7:4b:f9:ea:b1:20:
2e:a6:da:94:a1:80:e9:e7:d0:cb:fe:7e:04:d5:98:1e:04:68:
d6:83:7c:b4:43:73:38:91:99:de:ce:9f:af:cb:ee:6e:a1:12:
58:21:f7:80:d2:27:6d:43:25:cb:07:8a:64:86:0d:7a:25:5c:
d9:9a:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:14:37 2025 by rpki-client