
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
File: d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa (raw, json)
Hash identifier: M3p9kn6OmVD0pk9bktxPqmIW+Dx2cgJEwwRlyLi154U=
Subject key identifier: 0C:0A:13:22:1B:54:7B:C2:E4:CE:2B:F7:9D:E4:2D:CA:E3:95:A1:C8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B1C37112818AD380D567F4A60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
Signing time: Sun 07 Sep 2025 01:00:33 +0000
ROA not before: Sun 07 Sep 2025 01:00:33 +0000
ROA not after: Sat 06 Dec 2025 02:00:33 +0000
asID: 701
IP address blocks: 141.150.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1c:37:11:28:18:ad:38:0d:56:7f:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Dec 6 02:00:33 2025 GMT
Subject: CN=8f3676f6-725d-4d38-9b08-bbe615d545cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:40:2d:22:32:62:4d:f4:ff:1b:a4:af:c5:
7d:6d:d6:de:59:b0:85:43:24:a9:03:02:76:e6:95:
1a:f6:8f:ca:ef:7f:02:05:13:5f:e7:88:b3:cf:67:
54:6b:6d:4f:3b:ac:64:6d:57:70:33:6a:84:62:b1:
7c:75:29:5a:bc:c9:bf:f3:1c:52:0a:4b:db:8a:e4:
dc:dc:a8:f0:89:d5:f1:6c:0a:73:56:19:40:3c:a7:
b5:06:c1:48:03:33:a9:71:b1:4d:a2:7e:8f:49:6a:
74:36:54:07:78:c4:20:d2:13:b8:84:c3:4d:85:d7:
ff:df:40:b9:6e:d9:bf:11:ad:d5:c0:e1:6b:ee:f6:
0c:79:2e:d1:ef:1e:4c:1a:6e:64:b5:8c:e8:c8:df:
57:45:98:ca:2b:3a:51:0b:91:f8:33:3a:a9:15:64:
26:72:13:38:39:e0:0e:6f:5e:19:b9:15:1e:78:53:
3b:e8:4d:68:6f:a2:6b:b3:ad:4d:3a:6f:da:c1:7c:
5b:d3:3a:1f:17:73:1e:ab:6c:05:7a:25:aa:51:99:
70:c5:46:64:01:34:51:8a:be:67:30:a4:1a:c1:72:
89:8a:67:36:bf:0d:81:32:75:a6:8a:0b:4a:aa:2a:
66:a3:7a:11:8e:9d:a4:fa:dd:9a:bd:3e:08:de:a8:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:13:22:1B:54:7B:C2:E4:CE:2B:F7:9D:E4:2D:CA:E3:95:A1:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e8:df:f1:f6:28:f7:5f:5a:ff:60:0c:2e:f4:55:af:2e:f5:
53:aa:a7:d4:ce:8e:e8:3d:98:8f:7e:79:94:03:95:a1:6a:44:
ca:91:41:d1:a0:b5:7d:d7:73:09:0b:2a:bc:59:35:35:1c:5c:
dd:ee:a8:35:29:db:36:b0:61:69:28:4b:76:38:d5:60:9b:e1:
bf:17:29:85:1d:ae:ea:c4:90:3a:0e:44:7f:82:74:a4:31:34:
e7:d0:78:ec:f4:e2:7e:f0:e0:09:fa:5a:ad:d9:7b:ec:4f:2d:
ba:2d:c1:18:70:be:13:99:36:54:f1:e5:96:9c:71:f1:13:55:
dc:9a:5b:09:fc:96:0a:da:24:39:76:14:4b:a3:0a:5b:73:49:
32:08:6c:d9:76:97:0e:58:1d:cb:36:10:35:16:3b:f7:32:4c:
31:7e:73:00:f1:8c:d0:7a:79:c6:bb:aa:db:59:d1:54:92:08:
db:ce:6b:45:7f:e1:71:3e:4d:c8:28:62:3e:0b:43:a1:b4:97:
96:72:b9:31:22:3c:62:f6:27:8f:e3:65:d5:6a:e8:20:3a:81:
17:bc:61:13:44:10:a3:86:82:c7:7a:3f:10:1e:3f:d3:07:25:
ad:bb:bc:bd:43:1f:68:4a:5c:26:54:8c:ab:32:d3:75:2f:9a:
fb:16:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:22:34 2025 by rpki-client