
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
File: 708d4650-7568-32d1-982e-33a33edcf9b1.roa (raw, json)
Hash identifier: TiYmkrndHJK0LIncaMzJXL6ljdSNt0Zvw4g1pnq5lb8=
Subject key identifier: CC:C8:5A:DF:48:EA:25:04:80:1B:E0:EF:5D:1E:0F:30:92:01:44:71
Certificate issuer: /CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
Certificate serial: 010D0C9F4328584AE0A9EEC717011624DA4F3800
Authority key identifier: D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
Signing time: Sat 16 Aug 2025 17:04:14 +0000
ROA not before: Sat 16 Aug 2025 17:04:14 +0000
ROA not after: Fri 14 Nov 2025 18:04:14 +0000
asID: 27552
IP address blocks: 69.72.24.0/22 maxlen: 22
198.203.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e0:a9:ee:c7:17:01:16:24:da:4f:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
Validity
Not Before: Aug 16 17:04:14 2025 GMT
Not After : Nov 14 18:04:14 2025 GMT
Subject: CN=69c5191d-fd22-483b-91e7-7e80f84ac432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:c3:0d:e5:e0:ce:3d:1f:4a:b8:a9:8b:c9:
7f:58:f4:03:c0:e6:9d:42:e9:16:c9:88:32:1f:4c:
91:60:5d:d8:1c:35:67:80:87:da:11:a4:2e:c1:60:
c7:f7:5d:aa:dd:35:ee:41:5b:ba:07:61:62:67:6b:
ba:06:9b:b6:15:82:21:19:6b:48:a8:ae:94:3d:80:
cc:0b:41:3d:e1:cc:73:30:e8:07:3e:f6:06:05:1c:
ce:96:3c:e3:88:f8:32:be:79:01:f4:d5:40:cb:59:
b9:4d:58:21:dd:99:0a:72:95:08:24:ad:88:ff:47:
91:21:4e:f9:66:e4:f0:e5:5e:7c:0c:96:36:a5:9a:
4e:5e:c4:7e:d0:4b:c2:0e:27:d3:0a:e6:16:f8:50:
85:91:f3:bc:c6:ee:c3:e2:b7:f0:57:98:67:8b:63:
41:d3:29:a7:ad:e6:e1:09:11:80:53:d9:66:61:e8:
17:c7:79:f7:33:be:50:eb:16:ee:fd:f1:51:c0:d6:
02:be:c0:73:59:41:d6:34:2d:07:90:c1:9b:a7:a4:
05:b2:a3:d1:5f:8d:7b:55:cf:0f:96:91:96:fd:2c:
33:85:65:5b:2b:bc:f4:84:0d:ea:59:e7:30:c2:e1:
06:34:6d:9e:ad:89:68:7a:71:11:37:cf:65:51:cd:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:5A:DF:48:EA:25:04:80:1B:E0:EF:5D:1E:0F:30:92:01:44:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl
X509v3 Authority Key Identifier:
keyid:D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.72.24.0/22
198.203.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:fa:c6:62:64:3e:5a:16:22:ec:2d:bb:6c:81:8b:91:27:b6:
35:24:ab:6e:eb:61:f5:8e:e6:bb:23:c3:c8:0e:39:e2:df:3f:
0f:86:3a:f4:8a:9c:dd:ed:c1:74:52:da:20:3d:6a:40:91:35:
2a:4b:42:3a:55:4c:4a:70:40:50:ab:1e:f7:8d:fc:c3:8a:59:
d2:9a:23:79:a7:cc:44:b9:07:ef:37:12:8f:56:ab:0b:cb:b4:
d8:91:0c:b3:01:e9:4e:d8:ff:b8:4f:7f:53:ae:5a:54:c7:53:
36:c2:eb:6c:f9:90:95:63:31:b9:75:74:87:39:65:ac:21:2d:
7e:2a:ec:9a:1d:71:8e:ad:11:5b:c6:ab:73:f0:bb:cb:2b:93:
ef:55:22:68:25:33:50:97:a2:fe:c8:e5:3c:d6:74:49:f2:3c:
0a:44:4e:50:6b:bf:23:19:44:89:66:fb:8a:d1:72:d7:d7:9b:
09:b6:c5:10:9c:75:41:26:83:10:28:7e:61:19:e8:6b:13:49:
33:4d:94:c5:be:d5:ac:52:68:19:0a:0e:0a:f6:b6:c3:33:cb:
90:17:f8:f2:d7:28:03:1c:e3:33:dd:8f:82:6c:87:d0:92:fe:
e6:e9:8e:de:df:33:e4:3f:e1:07:a7:d7:bf:7b:af:16:2a:2d:
73:5e:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:57:09 2025 by rpki-client