
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa
File: a0388682-f011-3f25-a315-590c70213ae3.roa (raw, json)
Hash identifier: 5RUqgvZki6B1yY4ORehc6m4zQtPG592ptlfX0a7MyAo=
Subject key identifier: EE:9A:06:FB:5C:0A:08:C1:18:17:33:5B:74:F1:E4:79:5B:76:89:3E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B475C625976A5D5364E39A3C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa
Signing time: Mon 22 Sep 2025 11:56:14 +0000
ROA not before: Mon 22 Sep 2025 11:56:14 +0000
ROA not after: Sun 21 Dec 2025 12:56:14 +0000
asID: 19905
IP address blocks: 173.23.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:47:5c:62:59:76:a5:d5:36:4e:39:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 22 11:56:14 2025 GMT
Not After : Dec 21 12:56:14 2025 GMT
Subject: CN=d8ce4be2-93d2-4797-94d4-6efba41e1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:c3:3f:dc:bc:d9:76:ed:ff:4f:3f:be:03:
f3:e6:6a:71:9a:e3:da:0c:b3:f1:9c:a0:e6:f7:9c:
f3:e3:79:d2:13:62:72:eb:ff:3a:30:3e:d1:cc:ea:
6d:c6:df:ab:06:1b:0e:39:3f:84:34:2b:61:51:a0:
05:89:85:f7:dc:1b:6b:ba:19:f9:d6:ef:38:d5:59:
8a:ff:83:58:83:c3:90:55:d3:4f:cb:c8:99:f5:ed:
4e:66:dc:37:f2:ca:01:06:4b:74:81:6c:64:52:f2:
46:60:86:3a:91:dd:a0:26:ba:32:f2:11:b4:f8:58:
92:19:14:5a:c3:31:90:98:75:bd:15:45:19:bd:6c:
c4:9f:11:4b:1b:1c:3a:c8:e8:32:c6:bb:d2:3c:29:
00:a0:41:79:6a:6d:63:a1:8e:7a:c8:5b:70:79:c8:
c0:e8:c7:5d:8e:56:7b:6a:c9:fa:a1:f8:3c:98:01:
1e:af:e2:be:c0:b6:8e:cf:9c:ff:fb:bb:dd:a2:c6:
55:5f:e8:d7:28:e9:b1:eb:68:81:90:49:59:ab:65:
d1:40:0a:98:e2:5b:0e:80:7a:32:59:21:a2:97:e5:
b7:e6:bf:26:4c:94:a3:52:74:b5:ba:cd:6b:3f:c3:
6b:71:0e:bb:82:3d:ae:ed:22:0a:51:5f:e8:cd:31:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:06:FB:5C:0A:08:C1:18:17:33:5B:74:F1:E4:79:5B:76:89:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:13:f5:ce:00:23:de:9a:ae:df:9b:a0:d4:b3:77:04:3a:5a:
c4:38:44:f8:a9:9e:7c:b4:86:29:08:40:47:0c:86:29:c1:fb:
0e:12:84:51:51:56:2a:91:71:3b:03:01:a9:40:cf:da:61:e6:
74:67:38:3c:2a:69:12:53:5b:c8:68:35:7e:8f:32:86:c1:00:
c1:ad:fb:c1:77:01:8e:a6:fa:3f:77:17:c9:45:a0:10:0c:6f:
25:54:54:29:cf:df:e4:fd:13:4a:e9:7b:2a:d2:c6:bd:0d:7e:
c2:4c:92:ff:70:eb:c4:4b:f4:06:da:01:10:03:da:a8:e2:ee:
a7:24:b9:f5:33:2e:f2:b0:86:05:7a:84:a0:b5:1f:6c:fc:cf:
7e:64:7b:8a:dc:c6:35:a0:d9:00:24:3d:33:a6:b2:72:19:79:
13:b5:ab:4d:4d:f7:23:cd:15:a0:fd:3d:b1:3c:bd:06:4f:ad:
44:f8:75:d4:00:21:4b:c8:71:df:a9:83:90:0a:ff:bc:43:5a:
9e:cf:c7:18:d9:01:a2:30:55:d4:f6:c9:12:68:28:e2:df:db:
ec:a7:64:d8:7f:5c:b3:55:be:cb:e8:37:77:8b:96:d2:aa:20:
4e:f6:09:ca:ce:ca:0d:ec:cc:14:68:6d:9f:04:ba:da:f0:e0:
d3:fd:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:12 2025 by rpki-client