
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
File: 2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa (raw, json)
Hash identifier: 3cFoW0QRbe6CemDp7XnuGQ8Jj9MjQW2C+eMCzDcDlwM=
Subject key identifier: 90:BF:45:AF:DE:B3:4C:1D:F6:23:AB:3E:36:4C:97:06:D0:77:BC:BB
Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial: 010D0C9F4328584AF95140B1E27AEF7828488000
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
Signing time: Mon 25 Aug 2025 13:00:39 +0000
ROA not before: Mon 25 Aug 2025 13:00:39 +0000
ROA not after: Sun 23 Nov 2025 14:00:39 +0000
asID: 11998
IP address blocks: 162.252.134.0/24 maxlen: 24
162.252.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f9:51:40:b1:e2:7a:ef:78:28:48:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Validity
Not Before: Aug 25 13:00:39 2025 GMT
Not After : Nov 23 14:00:39 2025 GMT
Subject: CN=cd47b288-0b97-4c48-93b9-471ba0e6fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:d5:a5:39:94:47:7d:1c:33:c6:28:57:07:
8d:f2:e7:e4:99:a5:a8:b6:9c:59:fd:8b:90:72:25:
bb:c9:89:ed:d9:e9:5f:a7:11:b3:50:8d:2b:fe:a4:
50:8d:b6:fe:e7:ad:ce:83:a5:85:60:7d:58:d2:95:
f0:d0:7b:e6:4d:b4:f9:93:9f:c2:db:3b:4c:0a:0d:
6c:04:0b:81:9c:06:ed:6e:ca:30:80:bb:45:c6:d1:
ea:6b:b0:ed:fa:87:31:d6:d8:3f:73:91:46:38:be:
ed:c9:64:46:ae:d0:2c:52:c2:98:65:90:f8:f7:e2:
9f:a3:27:7a:c8:03:10:2e:51:95:f3:ba:c0:a1:ef:
06:6e:8e:40:09:33:fa:79:ce:1d:a0:dc:e2:2a:64:
38:8e:31:ea:51:e6:ca:94:4c:87:6c:4e:54:12:4e:
8d:ab:a5:17:1b:20:42:c0:72:9f:ea:e2:0a:9e:8c:
b2:4e:26:7a:8b:b1:2e:22:1e:25:31:7e:eb:82:fa:
02:ae:9d:5e:8d:42:b7:86:24:5c:7f:a1:3a:65:b7:
c9:3a:a6:44:92:01:c7:ba:e0:9b:d5:13:91:8a:e2:
01:bc:a8:de:fa:a1:28:81:bd:4a:54:6c:93:c5:3d:
f2:01:5b:77:73:03:b3:f4:0b:9b:ae:ef:fd:25:4e:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:45:AF:DE:B3:4C:1D:F6:23:AB:3E:36:4C:97:06:D0:77:BC:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
X509v3 Authority Key Identifier:
keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b9:db:25:39:af:d9:89:31:05:43:62:ff:b2:ef:37:aa:2c:
8a:0b:fe:2a:49:7d:83:81:1e:24:c6:7f:d2:9c:8c:ae:1c:ab:
5b:85:eb:6d:78:65:8a:4e:f2:50:7f:8b:ea:f2:77:d8:6d:9d:
a5:64:03:85:10:37:3c:7f:35:c5:93:6c:8e:51:0e:12:fa:68:
4a:00:b6:60:e1:11:ed:63:77:f8:03:24:6e:d0:a5:32:0d:29:
2b:1c:b7:a9:2e:d4:5b:de:2f:6b:32:f8:67:92:0c:8c:74:db:
ac:8a:8f:eb:c4:6f:44:e6:89:72:63:2b:12:20:c7:3b:6e:5c:
cf:a5:8b:6c:c1:33:cb:57:c7:98:57:fc:2f:86:91:09:18:f2:
ba:0e:f9:7a:03:eb:dc:de:ce:47:89:91:ac:58:dd:44:7f:ab:
b5:b0:0b:cb:b7:e8:d1:44:ff:d7:a1:43:e0:7d:34:7f:1a:c7:
e9:12:af:10:c3:a5:5e:e8:21:1e:a9:95:b8:3c:f5:0f:8a:3b:
a0:68:a2:3d:4d:19:99:23:13:8e:15:4a:49:ff:32:8a:fe:bc:
d1:39:5a:f4:44:3c:88:be:19:f3:ef:fb:ec:e1:8a:8c:4f:77:
2e:ab:6c:76:02:51:37:34:1f:de:5a:28:2c:25:80:83:25:d4:
ac:45:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:31 2025 by rpki-client