
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8ac59d2-f862-3963-b65d-ddee8ae595de.roa
File: d8ac59d2-f862-3963-b65d-ddee8ae595de.roa (raw, json)
Hash identifier: w+hocdfzEgTflSrdxkCMi0QipvF5XCp5+/w2UN5uSrA=
Subject key identifier: 48:FF:68:07:52:16:3F:3A:F8:E5:BD:2A:14:4A:27:60:C6:74:AD:F2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584B8D47756A40EB23DCEFC10C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8ac59d2-f862-3963-b65d-ddee8ae595de.roa
Signing time: Fri 17 Oct 2025 13:00:39 +0000
ROA not before: Fri 17 Oct 2025 13:00:39 +0000
ROA not after: Thu 15 Jan 2026 14:00:39 +0000
asID: 16509
IP address blocks: 208.215.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8d:47:75:6a:40:eb:23:dc:ef:c1:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Oct 17 13:00:39 2025 GMT
Not After : Jan 15 14:00:39 2026 GMT
Subject: CN=e555a275-4a45-4e81-9a94-424ad3ef084c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:89:0f:71:e0:89:d8:1a:82:0c:d3:4b:3a:
90:26:9d:7f:80:20:9e:f2:02:f8:1a:41:d4:71:26:
f2:ba:1a:d3:ae:09:ea:3a:11:42:12:3f:bf:5e:dc:
e5:fd:36:09:d2:00:ea:1b:90:4b:f2:a3:11:6b:f3:
39:56:f3:01:a5:db:32:82:64:d2:9b:f2:2a:11:0e:
d9:60:80:07:c3:f4:a7:4a:ec:87:ef:ec:28:1b:be:
8a:f8:9a:74:6a:5e:9b:97:44:fd:2a:9a:30:d3:1f:
b9:1e:c0:36:b7:23:e2:e5:ed:bf:42:69:af:2f:01:
e8:35:f7:7f:45:7b:0c:ae:5f:af:48:78:72:78:aa:
07:56:f1:4b:a5:4e:6f:22:d5:d8:8c:4e:1c:10:10:
65:de:15:95:af:d4:fc:cc:95:c5:75:e2:eb:a0:81:
67:78:f9:2c:c1:12:c0:d7:6b:60:e2:08:4c:e6:d2:
15:99:10:28:63:e6:d2:a6:5e:be:77:e7:fb:59:8e:
31:69:2e:01:01:8f:4d:db:26:d7:cd:c8:92:e6:a4:
39:8e:e2:d3:5b:e3:b4:f0:3c:5e:9e:c8:62:fb:7e:
f1:44:e3:eb:c0:23:c7:19:68:1b:8a:62:3f:6c:69:
3e:7b:ca:48:2e:41:6a:cb:38:ad:ff:1c:c4:76:04:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:68:07:52:16:3F:3A:F8:E5:BD:2A:14:4A:27:60:C6:74:AD:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8ac59d2-f862-3963-b65d-ddee8ae595de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.215.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:08:e7:34:19:13:8f:12:65:18:5b:ae:76:0c:4d:cd:3e:54:
fa:59:fd:a1:e2:cf:5d:6c:20:62:35:a5:89:f4:81:85:c2:9a:
50:a6:d3:7e:76:89:bf:b7:a1:0f:9a:67:56:3a:b4:35:5e:05:
c3:9b:24:c1:e9:c6:b0:53:43:cb:5c:8c:19:ec:00:dc:6d:5c:
a1:90:2b:6f:7d:0b:54:92:e5:03:90:93:97:ba:ee:c4:9b:cb:
7b:5f:14:41:91:e9:7a:d8:23:f4:0c:24:82:34:f9:9a:ea:7f:
6a:1c:f0:00:16:7b:87:72:02:12:7f:4f:90:0c:2d:5e:46:5e:
99:cb:6a:a0:68:41:77:10:db:a3:17:0b:a5:ec:38:19:a6:cf:
f2:a7:69:ae:86:ff:6d:e5:56:44:cc:0b:2a:f4:f5:d5:a3:c6:
14:0c:f2:c4:06:00:92:06:53:e4:5f:88:b3:f2:1a:a2:b9:a3:
5a:85:4c:1d:d3:98:13:e0:33:3d:1d:08:ff:8e:1e:e7:e2:1d:
d8:b1:53:99:21:2b:14:b4:0e:24:95:85:6c:85:d7:14:ee:2e:
dc:98:c4:b0:56:19:d7:f6:a5:29:50:4d:de:de:55:95:3a:26:
1e:9b:f5:42:e7:72:e1:d8:fa:ef:33:30:37:9e:4d:6b:73:5e:
d0:b3:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:01 2025 by rpki-client