
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8229fcdc-083c-3cfe-9892-a1549ef1207c.roa
File: 8229fcdc-083c-3cfe-9892-a1549ef1207c.roa (raw, json)
Hash identifier: gMlPtORMrlEIIWA0EyV6kY17bt0ohjPcuBnYtrokg6w=
Subject key identifier: 2D:A9:CF:A2:95:14:FC:76:F8:32:B0:F7:B0:D4:32:A9:6C:61:0A:26
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584BBB75960C1AC309C56130E200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8229fcdc-083c-3cfe-9892-a1549ef1207c.roa
Signing time: Mon 03 Nov 2025 02:00:31 +0000
ROA not before: Mon 03 Nov 2025 02:00:31 +0000
ROA not after: Sun 01 Feb 2026 02:00:31 +0000
asID: 3360
IP address blocks: 20.139.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bb:75:96:0c:1a:c3:09:c5:61:30:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Nov 3 02:00:31 2025 GMT
Not After : Feb 1 02:00:31 2026 GMT
Subject: CN=cd193c49-224e-469f-bdbd-ffe47c01f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:01:66:b0:6a:d9:7c:0e:6a:88:51:40:3c:
24:ec:99:65:f1:d0:db:de:c0:cc:53:b2:c6:f2:bf:
5f:40:8c:40:83:e6:72:87:55:ae:bc:ff:aa:93:a5:
4a:93:70:12:b1:dd:b3:34:e4:f7:aa:9a:ec:4f:a6:
fa:de:99:33:80:54:df:4f:db:cd:a7:ab:08:6a:42:
5e:7a:bb:2e:04:09:43:c4:00:0f:54:38:a4:78:5d:
da:85:aa:57:cf:16:a6:4e:78:8d:40:87:0e:d4:c1:
c0:09:de:33:fc:89:6a:4c:46:1c:c7:ee:99:e5:4b:
92:42:90:e7:92:1c:04:67:bc:76:c3:9b:a4:38:d7:
1e:e4:a4:96:ce:11:a9:4e:14:4a:b9:e6:62:58:3d:
49:d2:24:99:dc:a6:2a:5d:1f:f6:cc:92:8e:58:68:
40:2b:76:5f:ac:7a:d2:0e:71:d6:1e:72:b1:81:63:
d9:ca:1d:1e:2c:7a:52:65:31:53:0d:45:28:0f:93:
a3:68:fa:f9:da:a3:ab:6b:67:2b:11:6f:b1:fd:c8:
9d:50:89:61:4f:4e:1a:3c:ee:e1:e9:b8:e8:0a:45:
36:e0:66:62:ea:2e:d3:49:31:fb:f2:74:95:8c:d0:
02:dc:1c:b4:d6:c1:54:28:eb:ba:28:c1:bc:4b:b9:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:CF:A2:95:14:FC:76:F8:32:B0:F7:B0:D4:32:A9:6C:61:0A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8229fcdc-083c-3cfe-9892-a1549ef1207c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:9a:f8:dc:17:d1:dc:df:0d:b9:f7:9a:a7:ca:8c:e7:cd:55:
2d:15:27:61:6a:54:54:61:e0:86:3a:4f:49:41:82:0a:82:49:
f1:6b:75:54:bf:aa:5a:12:37:4e:f5:e8:76:ca:ff:31:7c:6b:
97:3b:03:a1:7c:21:d3:cb:cf:47:67:6c:e7:b4:ca:1e:82:a7:
54:49:6e:00:7e:c8:6a:b5:a3:66:e2:49:26:24:34:81:be:af:
4e:64:ad:17:8d:d1:3e:e2:5e:a7:6a:b1:cb:93:55:28:17:28:
c0:e8:08:96:4d:58:50:aa:05:e2:11:02:1d:45:d9:d5:39:39:
d2:8d:4f:8a:c0:72:f9:88:fd:9a:28:fc:0c:93:95:de:0c:3e:
75:c1:c6:34:b1:3a:5a:26:d4:20:e6:0b:84:22:1b:2d:8b:0e:
45:1c:a5:01:4e:2e:3e:97:31:ad:46:cd:ca:02:a3:8b:d5:ed:
0b:b9:5f:67:8f:ee:db:2e:7f:ec:65:08:7b:81:4d:87:a7:00:
10:64:68:cb:79:0f:37:b2:5c:97:a0:04:9b:c1:00:0a:74:ed:
07:dc:c9:d5:b0:fd:c1:1f:ed:ed:1c:d4:95:34:9c:03:8f:db:
a8:3f:72:75:74:b1:61:84:87:8b:9c:c6:82:3d:16:6f:4e:1f:
91:01:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:15:24 2025 by rpki-client