
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json)
Hash identifier: 8LVak1RVoph13M5OqquYCJBR0+B2z5fJ50BFAnn8QWY=
Subject key identifier: F9:2A:95:6C:C1:78:99:CD:FB:C8:73:12:61:9E:90:D3:E4:B8:BD:A7
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F4328584B36BC526052893F21B08D0240
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
Signing time: Tue 16 Sep 2025 13:00:41 +0000
ROA not before: Tue 16 Sep 2025 13:00:41 +0000
ROA not after: Mon 15 Dec 2025 14:00:41 +0000
asID: 13627
IP address blocks: 209.112.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:36:bc:52:60:52:89:3f:21:b0:8d:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Sep 16 13:00:41 2025 GMT
Not After : Dec 15 14:00:41 2025 GMT
Subject: CN=342a01ad-ac40-45c0-8376-2d47ccd86510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:02:4d:95:74:a1:b8:53:aa:29:7a:92:f7:
ef:72:d5:a3:be:68:3d:96:06:d3:c4:2a:7f:cb:1c:
2e:da:da:14:f4:33:20:41:d3:b9:4e:ef:73:36:e9:
64:8c:43:a4:df:27:48:aa:da:93:58:37:db:db:e5:
83:bd:0b:08:c7:c3:3c:a3:27:1e:d4:ac:41:81:0a:
a1:99:f1:95:08:ee:aa:bd:c4:bb:e5:d5:19:34:06:
b4:7a:ce:c2:db:a0:9a:e0:78:df:2b:3e:13:83:4f:
78:74:67:e0:0b:39:b5:8c:13:9f:7c:14:30:e2:39:
44:0b:75:06:36:3b:f8:c1:38:ba:e7:05:1c:6b:14:
02:21:1b:c4:c5:4c:b8:9f:c1:b0:18:56:db:66:bf:
d8:06:85:ee:d6:4d:f9:76:28:e9:ff:fd:94:f8:3e:
95:1a:49:a0:56:c3:83:95:66:d7:89:37:93:e8:02:
5b:a7:73:16:3a:00:65:e6:38:5b:52:24:b3:4f:05:
fb:6e:94:bc:1c:8c:d7:a4:07:f1:81:0d:9f:df:84:
63:8a:2a:d2:28:6b:f2:8b:fb:4d:75:f9:af:92:5b:
22:33:a5:db:69:62:3c:a9:de:07:1a:8f:96:2e:c2:
76:2c:2b:fe:60:d3:85:0d:b1:38:5d:2c:0a:64:c5:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:95:6C:C1:78:99:CD:FB:C8:73:12:61:9E:90:D3:E4:B8:BD:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:43:91:f7:d8:55:ca:ed:c0:9f:25:47:9d:f0:51:ef:72:3f:
25:74:1b:b1:9b:c0:8f:d7:49:c0:cd:90:37:bf:4f:6a:22:f6:
7e:cd:13:d5:3d:ee:b1:dd:5c:de:92:0f:9b:0b:bb:cc:26:bc:
1f:f7:a8:6c:64:89:7b:b1:26:49:b8:f8:89:29:cb:e2:b0:0b:
1c:41:66:3a:65:8b:62:e4:db:a8:de:6a:f4:bf:51:15:95:02:
e4:99:3a:d6:d9:c5:e8:b8:d3:2c:03:08:84:08:59:6d:6a:fe:
0b:f3:62:a8:b7:01:5d:42:6b:c4:d6:fd:13:0f:03:41:2e:04:
d2:7e:2c:d5:31:8a:75:b7:6a:15:6e:6d:0f:45:cd:1e:2a:99:
00:86:91:48:f7:bd:9d:b2:47:94:d3:9c:d9:db:80:79:75:fb:
b3:99:2a:c9:f1:5a:cd:60:a6:f3:b0:17:ab:b5:3c:9c:5b:a6:
3e:29:e1:49:69:54:7d:94:21:a8:de:2a:52:c5:f0:68:f3:b5:
8b:67:05:19:6c:a5:7a:9b:6f:b0:fb:13:53:65:ed:dc:1f:76:
92:73:a3:80:7f:f7:9a:5a:26:5b:7e:6f:63:01:3e:48:e3:46:
3d:74:3e:3b:cc:0b:30:15:86:80:fd:fa:b6:bd:76:16:90:51:
2e:16:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:13 2025 by rpki-client