
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa
File: 28315b63-298b-35ee-b1bf-1494728947e3.roa (raw, json)
Hash identifier: hvGDCYOSatAEAfOOLRYLv6j3O2GQxnfHB4n82gqHQ9E=
Subject key identifier: 7B:A4:04:E2:5E:2A:16:F5:C7:30:A5:5C:5F:A2:F4:B1:A7:DC:EC:87
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7BDEC95C2C980D91EF080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 54288
IP address blocks: 66.220.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:bd:ec:95:c2:c9:80:d9:1e:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=9e612ead-9548-4467-a2df-28ff6552307b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:2e:55:ab:e4:48:50:40:59:7a:0d:38:fe:
83:ce:36:69:7e:35:de:c6:bb:03:c8:20:82:d2:71:
23:f8:38:53:dc:53:6c:4a:b5:33:5f:ce:ca:78:57:
75:26:0d:38:7b:b1:6b:3b:06:40:47:71:85:cd:02:
e4:56:98:e7:24:e2:bb:2c:cc:04:67:01:8d:e8:b9:
5b:8c:c3:38:2e:35:e0:e4:e6:8a:7c:fc:4a:a5:e4:
0a:a6:7f:ee:d0:ff:9e:a4:b0:fb:01:1f:a9:aa:bb:
21:f7:9d:e4:28:73:fe:0e:2d:e4:46:20:05:8a:ff:
1b:dc:b7:df:ba:71:83:eb:d6:17:03:df:47:c7:2a:
a4:79:d5:80:17:61:dc:df:28:a2:dc:cb:10:d2:d0:
2e:70:4b:06:f7:f6:30:95:c4:6c:b4:e4:5b:ff:10:
63:73:b3:e3:54:b0:ef:47:61:2d:94:cd:40:63:92:
e5:c4:69:82:ad:d6:36:19:e9:ed:22:7b:e3:4b:dc:
20:a7:38:c8:3a:c3:8e:4e:97:a3:f1:31:83:35:cc:
ba:b1:75:cc:ee:49:7a:d4:d0:58:7b:f9:10:ee:f0:
72:68:8f:f1:e2:78:5c:f7:32:2c:b6:a1:9a:6e:f4:
65:d8:a1:79:f6:09:7e:20:80:3b:70:5d:e6:26:6d:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:04:E2:5E:2A:16:F5:C7:30:A5:5C:5F:A2:F4:B1:A7:DC:EC:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28315b63-298b-35ee-b1bf-1494728947e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d7:f4:8f:0b:dd:96:ee:29:ec:11:41:04:47:6b:35:2d:dd:
74:e5:77:bc:7b:f2:62:39:01:2f:30:66:1d:45:37:49:9d:dd:
ad:94:37:af:36:69:1f:69:65:5d:3d:ff:82:eb:f6:d6:62:12:
f8:06:26:00:b7:39:ac:4a:7d:87:ff:84:85:45:35:f8:8b:a9:
6f:6a:9a:75:93:7a:2b:c6:83:00:b3:e1:4b:df:a6:92:49:de:
79:e2:8f:05:d2:90:92:c3:9d:a4:f2:aa:47:4c:a3:74:c9:3a:
cf:e9:36:a3:63:98:9a:b6:3d:98:da:da:51:87:f9:19:cc:ca:
3b:c5:87:3b:da:6d:0e:b8:b4:5b:d1:94:12:ed:9c:18:cd:17:
00:78:fd:2c:ee:89:bf:6b:35:40:c0:a4:30:c2:7c:d0:f2:d5:
69:75:53:12:dc:ac:c9:31:b9:a6:52:5c:0c:b4:95:3c:e9:1a:
14:46:78:ae:1a:a4:5a:41:0f:7b:e5:01:dc:ee:12:5f:81:fb:
c9:2b:3f:7f:a2:bf:f9:8b:49:e6:3a:62:de:e6:e2:d2:03:5f:
59:2a:15:13:9b:22:0e:7b:26:5c:fc:7b:48:4f:fe:60:db:fa:
a8:01:ed:0b:a6:29:52:c9:00:11:6c:39:50:6c:32:cf:e8:11:
f8:bc:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:28:35 2025 by rpki-client