
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa
File: d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa (raw, json)
Hash identifier: HXRg5d0cRrMG8KDNgtCWMlOWG3fhexhzOlaZBBINXgk=
Subject key identifier: B5:A2:1A:0A:BD:EF:43:BF:54:B1:5E:CC:B6:13:6D:D7:83:59:0B:66
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B1C36DF57B4AD5085B41FDB20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa
Signing time: Sun 07 Sep 2025 01:00:33 +0000
ROA not before: Sun 07 Sep 2025 01:00:33 +0000
ROA not after: Sat 06 Dec 2025 02:00:33 +0000
asID: 701
IP address blocks: 71.166.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1c:36:df:57:b4:ad:50:85:b4:1f:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Dec 6 02:00:33 2025 GMT
Subject: CN=9ff0838a-73cc-4a04-882a-8a74e3a5cb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:d5:82:97:3a:59:bc:f3:08:26:75:43:b8:
89:bc:19:d3:05:46:b7:e0:d5:7e:ec:1a:0a:48:27:
b0:47:79:11:d3:c0:0a:40:9d:e1:8d:98:7b:67:04:
53:e1:6b:99:cd:63:80:23:07:9e:7c:24:12:53:18:
ff:73:7a:8b:c5:6e:d6:fc:e2:6c:8a:ca:ae:0a:64:
b1:38:3a:a9:4d:1f:e6:d9:3e:94:e4:a7:dc:27:ca:
e7:53:10:90:e3:fb:84:05:2f:0e:37:37:0e:1b:db:
f6:37:d8:fb:56:2a:90:bb:0c:37:1b:a9:b2:df:63:
07:e2:c7:4f:76:a7:21:9d:e6:eb:63:1e:5f:aa:d8:
d8:98:d5:65:60:1b:73:c7:1b:8a:1c:fb:ac:33:d5:
68:ca:e5:b1:f6:47:9e:6f:d6:e6:de:12:ba:7b:1a:
fe:41:ef:c5:f8:67:bf:12:a1:f3:25:3b:54:6d:76:
6d:56:04:9f:a9:fe:ec:c0:26:0e:85:e5:30:07:c8:
9c:b0:e8:0a:ac:77:bb:5f:5d:66:71:d1:2e:72:bf:
7b:89:0f:2e:73:b7:c0:32:8d:be:15:2a:c1:c1:7e:
6b:95:9b:c3:28:9a:95:e0:9d:a2:99:b7:99:67:7b:
18:1c:8a:1b:7e:7f:0f:d9:f6:6f:b7:7b:61:41:40:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:1A:0A:BD:EF:43:BF:54:B1:5E:CC:B6:13:6D:D7:83:59:0B:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.166.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:44:cd:f8:b7:f7:34:db:84:81:86:c6:28:e5:59:36:af:4a:
aa:18:c8:c7:45:38:05:5a:48:12:a7:39:f0:33:53:42:1c:0d:
44:c1:f7:6a:60:d0:86:e6:5e:4d:2c:59:4c:1d:c3:76:21:ae:
99:10:be:dd:06:1d:93:8c:0f:6f:69:77:01:57:3d:ef:5b:a4:
05:52:e5:93:e5:30:ab:2e:51:26:1a:bd:47:f4:a9:d9:c3:33:
87:17:9b:6d:bb:bb:48:a0:b0:97:d1:15:f6:9a:95:dc:c0:fb:
97:cc:78:53:e5:3d:63:0f:57:0f:40:68:51:ba:f0:4e:d8:5b:
d7:aa:09:6c:9d:ee:d9:4b:ab:1d:90:1e:ea:5c:b8:cf:3c:47:
46:da:7c:2d:b6:b2:1e:57:28:64:bb:55:8a:c7:f7:6c:e8:2c:
eb:59:db:0d:63:ef:a8:d5:3a:01:4a:50:9b:50:5e:38:fa:d6:
30:16:e9:01:b0:ba:16:37:9c:79:19:5e:cc:a5:ae:fa:73:4f:
f6:4f:f3:b7:26:f1:49:f2:50:ab:5a:ea:f9:16:2a:d1:49:0d:
33:6c:44:43:2e:58:3d:fa:0d:bf:1e:6c:7a:2c:fb:4f:43:c4:
97:e9:9d:2d:b8:5d:61:35:f8:34:65:16:4f:47:88:56:17:7a:
f6:43:40:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt9XtK1QhbQf2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OWZmMDgzOGEtNzNjYy00YTA0LTg4MmEtOGE3NGUzYTVjYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFDVgpc6WbzzCCZ1Q7iJvBnTBUa34NV+7BoK
SCewR3kR08AKQJ3hjZh7ZwRT4WuZzWOAIweefCQSUxj/c3qLxW7W/OJsisquCmSx
ODqpTR/m2T6U5KfcJ8rnUxCQ4/uEBS8ONzcOG9v2N9j7ViqQuww3G6my32MH4sdP
dqchnebrYx5fqtjYmNVlYBtzxxuKHPusM9VoyuWx9keeb9bm3hK6exr+Qe/F+Ge/
EqHzJTtUbXZtVgSfqf7swCYOheUwB8icsOgKrHe7X11mcdEucr97iQ8uc7fAMo2+
FSrBwX5rlZvDKJqV4J2imbeZZ3sYHIobfn8P2fZvt3thQUAFAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWiGgq970O/VLFezLYTbdeDWQtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDY2NzBjNDAtMTdjYS0z
NDViLWFkNWQtNzFjNmNjNWJkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpEzfi39zTbhIGGxijlWTavSqoYyMdFOAVaSBKnOfAzU0IcDUTB92pg
0IbmXk0sWUwdw3YhrpkQvt0GHZOMD29pdwFXPe9bpAVS5ZPlMKsuUSYavUf0qdnD
M4cXm227u0igsJfRFfaaldzA+5fMeFPlPWMPVw9AaFG68E7YW9eqCWyd7tlLqx2Q
HupcuM88R0bafC22sh5XKGS7VYrH92zoLOtZ2w1j76jVOgFKUJtQXjj61jAW6QGw
uhY3nHkZXsylrvpzT/ZP87cm8UnyUKta6vkWKtFJDTNsREMuWD36Db8ebHos+09D
xJfpnS24XWE1+DRlFk9HiFYXevZDQCo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:21:59 2025 by rpki-client