
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4247753-4e09-3abf-9e5f-cc74a90c9dcc.roa
File: a4247753-4e09-3abf-9e5f-cc74a90c9dcc.roa (raw, json)
Hash identifier: 45Hr1dWulJqfck2VBZp5iYpXnQ5R1IIQOTZVUwZDxyY=
Subject key identifier: ED:96:A8:49:1E:BE:87:04:18:C0:3E:98:4B:88:11:A5:34:1C:FA:FD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B9A02742764C3B13EC17920C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4247753-4e09-3abf-9e5f-cc74a90c9dcc.roa
Signing time: Wed 22 Oct 2025 02:27:08 +0000
ROA not before: Wed 22 Oct 2025 02:27:08 +0000
ROA not after: Tue 20 Jan 2026 03:27:08 +0000
asID: 19905
IP address blocks: 173.23.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9a:02:74:27:64:c3:b1:3e:c1:79:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 22 02:27:08 2025 GMT
Not After : Jan 20 03:27:08 2026 GMT
Subject: CN=aa78abc3-3ada-45b9-9af2-769160d932f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:8c:fc:86:b1:65:19:92:81:d9:66:96:fb:
7e:a2:53:be:52:74:5d:1f:12:a3:73:36:73:9d:3a:
e0:98:60:21:a5:5a:5d:bf:84:09:b2:66:8b:9e:c5:
32:ff:6b:26:29:9f:79:a2:e4:fd:5f:5c:c8:73:a8:
60:ad:20:cf:c7:7c:f8:e2:df:c5:e3:23:d0:8f:82:
d8:d2:b7:61:97:29:66:15:f8:dd:8e:e9:a3:45:e9:
06:bf:46:1d:ab:f7:d5:ad:59:5a:d5:c4:84:58:84:
69:2a:85:64:ed:17:04:af:e3:9d:a1:0d:06:ec:74:
b2:20:47:49:76:49:b4:29:3f:ec:46:7a:79:23:ea:
7c:e6:b5:b8:e0:7c:46:8b:b0:96:21:53:9d:ae:30:
c8:6d:24:4f:20:ca:9f:2d:4e:03:5e:89:e2:09:bd:
4b:c6:5b:b9:ae:7c:26:d2:82:ad:e8:a7:a6:e9:62:
f4:9a:b3:0f:aa:7c:85:93:4b:72:04:41:20:e3:fd:
e2:ea:7e:9c:55:5c:e6:30:87:7d:ec:80:b9:31:47:
8a:d4:85:dc:69:89:0c:f9:01:44:e7:e3:49:fc:62:
de:74:d6:6f:1e:08:f6:0a:8a:c1:bc:f1:ce:92:f6:
07:ef:6c:65:94:ed:fc:8e:f9:35:f9:62:53:32:cb:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:A8:49:1E:BE:87:04:18:C0:3E:98:4B:88:11:A5:34:1C:FA:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4247753-4e09-3abf-9e5f-cc74a90c9dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b2:47:58:b5:81:e0:23:b8:b6:cf:38:c2:11:58:7c:26:09:
d5:9f:37:b4:24:70:f2:ab:f6:c3:d2:fa:5d:ab:67:be:b8:83:
03:8c:d4:88:7b:db:4e:31:0b:58:12:33:21:d0:4e:81:f6:7f:
6a:35:96:12:0f:8a:9c:e1:e2:26:a1:52:68:8e:a5:7f:52:ec:
b3:5d:67:13:db:ad:71:40:da:a9:6b:88:6c:b5:58:20:6e:b2:
17:79:60:77:2d:14:fa:a0:0a:d7:82:c3:f6:e3:38:b4:3e:53:
a3:b9:5c:bb:41:79:ef:b0:1e:75:92:1f:4c:09:7e:eb:e3:0b:
b2:09:c1:3c:95:d0:81:29:48:77:41:e4:de:83:66:a3:4c:0b:
85:b2:ec:63:d8:9c:91:2c:59:13:7f:3e:fe:bd:03:68:6a:bf:
62:af:ac:68:c7:e3:81:70:7c:d6:4b:7e:32:12:aa:64:9a:83:
f1:03:e5:f6:96:6b:d8:94:7c:d4:56:8b:3b:36:a5:6c:36:72:
8b:5c:08:12:25:ad:16:b0:3a:89:0b:2c:70:a4:90:ab:81:f3:
a7:b0:e0:17:09:43:e4:64:79:71:9c:55:3b:11:29:d8:87:50:
ce:b1:60:c9:b2:cf:06:52:0a:7e:72:7b:4e:87:8c:7d:c8:fd:
96:60:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:54:14 2025 by rpki-client