
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
File: 3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa (raw, json)
Hash identifier: 8ipMrpZWfLrSvlnEq1y9iPLzENXn3AwfyyCVNhiM/4Q=
Subject key identifier: 07:71:11:BA:4C:C4:13:F5:59:BD:91:5F:2C:D0:2C:24:ED:30:29:7A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B8EACFD48ADBE398A7281F600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
Signing time: Sat 18 Oct 2025 01:00:30 +0000
ROA not before: Sat 18 Oct 2025 01:00:30 +0000
ROA not after: Fri 16 Jan 2026 02:00:30 +0000
asID: 6167
IP address blocks: 174.43.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8e:ac:fd:48:ad:be:39:8a:72:81:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 18 01:00:30 2025 GMT
Not After : Jan 16 02:00:30 2026 GMT
Subject: CN=c90d00c6-3ddd-4f21-a596-4eefcddd290b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:5c:a2:1a:bd:93:8a:fd:38:e8:04:6a:ee:
2c:37:1f:5e:91:e5:c0:93:24:03:89:dd:61:a7:13:
48:40:60:79:9d:de:6a:dc:54:ed:0c:55:df:18:96:
be:94:a7:10:fe:14:3d:ef:b3:2c:35:29:12:79:32:
13:83:25:c9:e0:ff:6f:a9:14:4c:7a:8a:75:3d:f3:
1f:fd:4c:a1:69:05:17:d3:40:58:04:c2:91:71:77:
7b:06:60:87:38:94:5f:e7:66:d5:8f:3b:77:85:b3:
70:c3:2c:0c:c9:32:45:34:81:5c:4e:f1:8b:59:ae:
47:2c:5a:1c:0f:3e:f3:17:d1:17:55:55:5c:ac:a0:
d6:99:82:88:bd:23:11:47:e0:a1:b5:4a:71:85:56:
66:45:c1:b5:44:66:21:9b:0a:40:f3:cd:f4:9f:3e:
e0:f6:f4:ea:0d:66:8d:56:20:e3:9d:df:59:d1:cf:
bb:a9:e5:4a:f1:35:33:78:97:4e:3e:44:c6:f0:d1:
10:a0:53:d7:23:6f:18:4f:e2:58:b4:ca:df:a2:b8:
1f:a7:84:33:84:f4:9a:53:07:0e:b0:c3:06:70:fc:
3f:59:ae:0a:87:01:8b:4a:31:34:90:eb:8d:cd:cd:
50:dc:1a:d6:f3:77:07:52:f2:1c:25:7e:e6:ac:a9:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:11:BA:4C:C4:13:F5:59:BD:91:5F:2C:D0:2C:24:ED:30:29:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.43.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:6e:1a:dd:9c:5d:f2:ba:bf:df:65:48:81:1c:6f:f2:2c:81:
46:d5:5e:55:af:e3:9e:0e:ea:4a:3f:27:3c:77:91:a6:2c:ff:
95:ae:01:f6:83:71:27:f9:6b:f8:1f:32:03:d2:e8:8c:08:a0:
f2:b1:4b:4c:02:56:18:ec:1a:a1:a6:7a:b4:6d:0e:a8:01:2c:
d8:33:cd:c4:b3:9b:73:02:1a:24:82:11:95:ed:5d:c2:7c:a9:
a9:20:90:12:a7:74:19:88:f4:7e:80:1d:eb:1d:d7:82:dd:8b:
e9:67:2c:0b:f8:c6:e0:e4:c4:9f:ad:2b:eb:a8:19:1d:c7:b8:
9e:f0:66:02:75:63:77:5a:e2:76:bc:01:95:d2:35:e4:60:0f:
96:64:6c:df:ab:29:56:d4:71:95:88:d6:ed:94:23:b7:92:87:
40:a4:ac:37:9d:4d:82:b6:38:09:f1:97:f8:3f:2c:23:03:fa:
9e:a1:7f:2a:58:02:54:b4:91:7e:1c:fd:6e:df:8d:cc:1a:75:
b8:43:9c:63:81:0b:f9:56:59:b2:83:a8:a3:40:29:f6:b9:79:
86:77:14:76:30:d9:a3:dd:0f:86:3f:a2:ed:d8:d7:37:1d:fd:
21:7b:35:34:cf:cf:fa:08:e7:48:af:d6:f2:f7:2f:4d:14:ac:
a2:fa:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:37 2025 by rpki-client