
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa
File: 6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa (raw, json)
Hash identifier: V14Xwa492RSbKXONEWNdJ8Z9dfdSlZss3dnEGnCqQbM=
Subject key identifier: 1A:0B:E2:F5:E8:EE:85:52:4C:C0:4C:58:33:B2:CB:DD:42:0A:EA:7F
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584B821D6930DE1D2CDE77977600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa
Signing time: Mon 13 Oct 2025 13:00:36 +0000
ROA not before: Mon 13 Oct 2025 13:00:36 +0000
ROA not after: Sun 11 Jan 2026 14:00:36 +0000
asID: 20115
IP address blocks: 97.85.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:1d:69:30:de:1d:2c:de:77:97:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Oct 13 13:00:36 2025 GMT
Not After : Jan 11 14:00:36 2026 GMT
Subject: CN=af9b08fe-52f0-4537-9b9b-61f426c34407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:88:b6:da:c1:ca:9d:3f:0e:ef:f2:ea:aa:
b8:66:6f:60:4c:7e:01:58:1a:74:9f:76:cc:0b:e5:
04:31:0c:7e:9e:95:df:19:dd:eb:5a:7c:39:b0:25:
42:7e:9b:9a:43:cf:73:da:eb:da:23:4e:03:18:82:
a4:97:bb:68:03:39:09:62:94:4a:c7:8e:ee:d7:d4:
64:e3:6e:ba:e7:99:d1:37:76:8e:9c:fd:08:ef:f4:
1e:b1:80:53:93:c3:d5:f6:ea:1f:1d:3b:36:b3:f1:
8a:31:17:91:e2:8f:57:ae:2e:97:7b:50:1a:bc:f9:
45:72:78:4d:06:ba:11:a9:ec:9e:69:06:d5:f8:74:
e1:1e:7e:70:1b:a0:80:ce:99:0f:b1:56:82:24:1b:
01:07:cf:73:73:e6:6c:ed:1e:68:22:35:c8:8d:d8:
8a:cf:d5:13:3c:a7:8b:33:b0:69:1f:d5:bb:fe:71:
9f:68:38:11:ef:23:e9:d5:e1:3e:27:6c:c7:9e:61:
cb:2e:92:16:6c:6e:dd:f4:31:2b:27:7c:42:39:29:
c0:cb:c3:16:13:81:6b:b4:d5:c1:a1:04:ae:14:32:
40:52:8c:ff:6b:6b:7e:b0:a7:98:74:67:60:e1:a4:
53:f6:5f:08:94:1e:e2:a5:b2:73:7a:0d:1d:4e:e7:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:E2:F5:E8:EE:85:52:4C:C0:4C:58:33:B2:CB:DD:42:0A:EA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.85.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:04:aa:be:d7:f4:d6:e6:4d:30:7d:31:a2:3d:30:42:20:0e:
13:31:79:cf:71:74:96:8f:2e:88:92:53:31:26:7b:54:b1:e5:
e6:b8:ae:b0:f8:d7:9c:9f:a5:39:63:6d:b3:44:5f:98:1c:9c:
8c:a6:52:d4:54:eb:2d:d5:9c:d5:7b:07:6f:b1:30:d1:2f:6a:
11:84:c3:9a:b6:f0:66:de:b9:c5:9d:21:c5:52:6a:a2:40:63:
7a:35:9c:fb:9c:75:b1:5e:e8:34:41:81:79:45:49:5b:9c:7a:
cc:f9:c4:84:94:81:b6:38:49:4f:a5:16:76:c8:82:04:35:c5:
1e:ff:b7:1b:42:c9:17:f2:29:d4:65:4c:28:43:39:51:9f:df:
c4:dc:14:ef:ed:7c:a2:69:2c:ae:b0:75:07:dd:d5:07:e1:23:
9b:67:f7:3e:e3:76:c6:7a:d6:7a:32:8e:84:79:24:7d:8a:75:
4b:b3:75:60:0b:f5:da:b2:f9:fc:11:b7:43:1f:27:d5:0e:74:
ac:ec:35:03:33:f3:d2:87:54:e6:c2:6a:8f:16:cf:eb:dc:38:
d2:99:b0:eb:80:bb:8c:46:b9:4d:39:76:51:a6:c2:9c:30:03:
8f:2a:6f:82:10:b0:b7:6f:cc:2a:79:64:fd:fb:51:87:90:f4:
0e:2c:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:14:53 2025 by rpki-client