
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16306233-3242-3b23-a221-343dbebddf28.roa
File: 16306233-3242-3b23-a221-343dbebddf28.roa (raw, json)
Hash identifier: 07EsYDGyiZ3OjBu9QJeoH/gvfYFN9ECRxpN9crTrloE=
Subject key identifier: B7:50:46:24:3E:3A:F7:BE:1A:6B:5C:5F:69:3B:F8:D3:80:38:BA:9B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA9328BE8E02CF47ED035B200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16306233-3242-3b23-a221-343dbebddf28.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.64.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:8b:e8:e0:2c:f4:7e:d0:35:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=4833954b-d03d-4b18-9477-fe9353ae9ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:e8:fd:95:78:84:d7:75:7a:a8:20:0c:ab:
11:9c:9f:96:9c:8d:b9:ab:b0:f9:88:5e:d2:d3:45:
22:fe:09:78:af:5c:2d:42:96:d9:68:8e:c2:b8:e0:
02:bd:80:ee:3e:04:92:0c:57:be:cb:d6:aa:d8:02:
e8:7a:a0:c0:b6:35:ef:ec:5b:fc:45:83:54:27:f6:
ad:06:ad:08:57:01:33:dc:91:e0:b9:53:5b:f7:e1:
cb:f3:aa:32:d2:ae:48:02:a7:d9:81:3a:99:9b:de:
18:f6:55:41:21:b8:26:5e:8c:05:6a:ea:ab:e2:43:
65:01:6c:22:e5:6e:a3:0d:54:2b:b7:a3:cf:d4:0f:
bb:41:f1:6f:9c:90:d9:fc:e6:35:19:46:cf:2b:31:
1c:53:ef:a2:19:36:76:ac:6f:02:85:a5:3b:4a:4b:
eb:b0:b5:91:9d:1a:68:6e:fa:fa:72:5f:b5:57:24:
43:50:b1:5c:36:b5:2b:e1:2d:7c:d2:e0:5e:d4:f6:
97:7c:9d:56:20:3e:5b:5e:7c:8b:76:83:c9:71:bb:
27:d7:c4:7c:cd:f4:bf:09:a9:2f:bd:c2:4b:e3:ec:
a2:21:73:ad:dd:2c:a2:1b:07:68:30:07:e2:88:de:
5e:bd:68:4a:21:94:3f:b3:9c:c3:68:7c:8b:03:43:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:46:24:3E:3A:F7:BE:1A:6B:5C:5F:69:3B:F8:D3:80:38:BA:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16306233-3242-3b23-a221-343dbebddf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:18:78:2b:2a:4b:01:f6:05:21:01:c2:e4:e9:d9:08:8b:c2:
71:c3:58:b4:0a:11:c7:b6:d7:7e:83:d0:bd:f5:2a:6e:b8:b7:
67:b1:d3:ae:e9:42:ee:de:63:fb:48:1a:ee:f5:84:fb:fa:bb:
ab:fa:22:d9:a1:f1:0a:cd:26:f6:0b:6b:fe:23:f2:ed:09:5e:
1e:11:5a:a9:c1:af:77:07:eb:41:e0:d9:26:22:93:b1:d7:74:
15:92:5a:64:6a:05:f7:44:35:c8:63:1d:81:f0:7c:5f:d6:64:
ae:78:d0:f5:5a:62:7b:ee:8c:b2:d3:c3:4c:e3:8d:85:24:f4:
f8:30:11:f9:19:fd:32:c7:b9:f8:98:1e:b6:79:98:e7:f1:e0:
34:c0:68:4c:b2:18:49:ca:03:d5:9a:f7:20:7b:f4:7f:88:68:
68:d5:67:00:2b:e1:af:15:df:c4:d3:c3:94:34:47:6e:65:69:
50:05:c3:9c:5a:b1:a6:42:08:62:cc:11:e1:60:b5:71:a2:55:
61:28:5c:05:ac:cd:30:ec:c2:8e:be:0d:af:71:ea:8e:f2:b0:
51:12:b8:c8:9e:93:b9:47:9b:10:31:e3:37:b4:0b:b6:5e:9b:
ab:fa:b3:94:07:60:f8:7f:03:7e:21:af:a5:ba:b6:10:79:e5:
f3:f6:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:34:27 2025 by rpki-client