
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa
File: f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa (raw, json)
Hash identifier: Bix4+kvyeDzZBPFRpSp6wDEmjU+v2OPfiW62JU018eE=
Subject key identifier: FA:0D:28:39:28:ED:8C:E1:B8:9B:F9:75:F8:95:3A:BD:4E:2D:80:C6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584BB2F7DC12EEF40B8D8DE34E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 701
IP address blocks: 108.8.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:dc:12:ee:f4:0b:8d:8d:e3:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=ba8dfcc5-462e-4494-af29-a5f0d707fec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:7c:45:a1:1b:e7:20:ac:6e:00:52:3c:45:
50:88:df:34:d9:2a:a5:c6:7f:d1:54:26:4d:3e:37:
46:43:53:3c:a1:52:0b:bb:49:34:fa:64:84:26:44:
77:ff:dc:d0:c6:86:96:eb:2a:39:b1:17:4e:99:4b:
ce:43:83:d6:96:40:0d:4a:fd:62:da:4c:d8:5a:2d:
94:b1:47:64:04:8c:b3:00:32:62:21:0c:0c:72:12:
f4:5d:87:7a:11:2f:22:e4:88:df:f9:e7:7a:d1:2a:
9b:07:ff:fa:35:09:96:9d:71:12:c9:2f:bb:24:09:
25:c3:dc:08:06:25:09:8b:c0:9b:9a:10:11:f2:b5:
35:d1:6f:15:1a:92:c2:40:b7:6f:51:12:e0:52:84:
28:12:34:34:fa:13:81:78:79:22:0f:9e:6d:86:c5:
f5:6a:0d:46:d0:ef:f0:82:3f:11:e5:7c:23:6f:93:
cc:ce:29:f6:02:72:f1:19:62:34:3f:23:aa:5a:5b:
2e:c8:77:76:76:5a:bc:09:3c:05:c3:32:6b:fa:f5:
97:cc:95:b2:78:58:38:80:e8:d9:02:2f:7c:fc:b3:
2a:75:21:5f:43:c2:85:46:c9:8e:99:51:40:f7:96:
a0:dd:ec:2f:a9:ba:78:94:7f:cd:9f:55:0f:8a:e2:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:28:39:28:ED:8C:E1:B8:9B:F9:75:F8:95:3A:BD:4E:2D:80:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.8.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:32:58:6e:be:22:17:9b:ba:8b:a4:e5:9d:65:4a:c9:2e:26:
33:55:fe:82:00:71:8f:cd:05:a9:c1:29:ba:bf:ef:f4:a2:cd:
2d:e6:de:1a:16:47:91:d9:57:86:11:35:40:76:cc:28:34:4a:
63:76:1e:6b:3b:0c:56:c2:cb:6c:ef:58:33:e9:21:a9:a4:1b:
51:a8:07:aa:ef:55:8b:88:25:1f:fc:28:e6:7f:ec:27:f2:3d:
bf:b5:2b:1e:49:53:cf:09:98:12:ca:24:5a:16:53:2e:43:1a:
ca:e1:0d:bd:80:50:75:41:24:da:49:48:c5:50:54:1b:65:6c:
ba:6a:f2:a9:ff:d2:71:21:4d:4d:de:64:5d:d7:05:39:67:b5:
20:76:ac:b7:fc:3f:20:9b:e1:db:1d:f5:d1:4b:f4:90:c2:a4:
57:12:5f:7e:4f:4a:81:9e:41:ef:af:fd:f3:a4:ce:40:14:31:
4b:3e:ab:04:01:cd:85:d1:f7:9c:2e:21:85:e7:aa:0c:47:53:
bc:c4:fb:b0:9a:f9:d4:af:b6:7e:c1:30:94:dd:a4:f8:ff:48:
9b:d2:ff:d3:1d:ba:1b:af:7b:21:cf:8c:3d:2c:11:d6:ba:d9:
65:74:85:e0:ec:00:25:7d:b8:e0:99:f0:ce:c3:11:56:fe:a7:
15:ef:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:53 2025 by rpki-client