
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa
File: 4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa (raw, json)
Hash identifier: CLMbHeN6KOC2uzREwN89WDW32uhZsWEyzoueQqvM6Iw=
Subject key identifier: E2:FC:B2:40:CC:6C:3C:1B:ED:B4:43:E9:E0:E7:7C:E2:C7:62:9C:99
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F4328584B2FC18E040CFD689BF15B4880
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa
Signing time: Sun 14 Sep 2025 01:00:33 +0000
ROA not before: Sun 14 Sep 2025 01:00:33 +0000
ROA not after: Sat 13 Dec 2025 02:00:33 +0000
asID: 21777
IP address blocks: 199.45.236.0/22 maxlen: 22
199.127.200.0/22 maxlen: 22
204.144.128.0/22 maxlen: 22
204.144.132.0/23 maxlen: 23
204.144.134.0/24 maxlen: 24
204.144.140.0/23 maxlen: 23
204.144.180.0/22 maxlen: 22
204.144.184.0/24 maxlen: 24
206.168.13.0/24 maxlen: 24
206.168.39.0/24 maxlen: 24
206.168.96.0/24 maxlen: 24
206.168.187.0/24 maxlen: 24
206.168.188.0/24 maxlen: 24
206.168.216.0/22 maxlen: 22
206.168.220.0/24 maxlen: 24
206.168.222.0/23 maxlen: 23
206.168.224.0/21 maxlen: 21
207.174.21.0/24 maxlen: 24
207.174.72.0/23 maxlen: 23
207.174.76.0/24 maxlen: 24
207.174.113.0/24 maxlen: 24
207.174.117.0/24 maxlen: 24
207.174.130.0/24 maxlen: 24
207.174.137.0/24 maxlen: 24
207.174.138.0/23 maxlen: 23
207.174.140.0/22 maxlen: 22
207.174.157.0/24 maxlen: 24
207.174.175.0/24 maxlen: 24
207.174.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2f:c1:8e:04:0c:fd:68:9b:f1:5b:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Sep 14 01:00:33 2025 GMT
Not After : Dec 13 02:00:33 2025 GMT
Subject: CN=e2401f55-b58a-4e46-bbd1-95883a6cda9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:5e:10:90:30:93:4b:87:a0:d4:12:39:57:
9c:4a:e1:b5:67:83:c2:b2:07:89:59:2b:8b:d7:3f:
16:e2:a9:40:5a:f4:7c:53:3b:7b:20:1a:4b:ae:7f:
17:9d:01:fe:96:99:64:dc:2f:e9:b9:9e:26:9b:74:
63:8c:5c:c1:07:ae:31:2d:dc:d5:de:43:0c:46:47:
f8:90:bd:1d:cb:27:ba:43:e9:88:80:d9:d4:0a:d7:
66:36:d8:80:a8:c2:83:41:9d:f2:e8:93:33:99:53:
f9:bc:20:26:66:e9:8d:f6:d3:59:0d:88:05:80:3f:
29:cd:33:73:62:e6:02:38:24:b4:11:7a:45:18:5d:
22:6a:e5:05:5a:b7:71:f5:83:63:ad:ef:b7:eb:4f:
f6:f9:67:ff:83:31:cf:52:94:15:c2:03:10:0c:af:
18:e0:4f:c4:e3:07:44:c6:fa:a4:45:1d:5d:34:cd:
66:73:dd:71:09:a4:7f:4e:84:8d:eb:1f:6d:de:00:
b0:05:40:67:11:85:8e:1c:f6:ca:fa:fc:f3:30:3f:
5e:d9:1a:d3:d8:ff:5f:97:4e:bb:65:58:30:9c:ac:
b9:0e:a4:98:d7:04:01:9f:ae:05:94:35:ba:02:34:
9b:6f:9e:4c:ba:ee:a1:d8:cc:a1:4c:07:e3:76:4d:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FC:B2:40:CC:6C:3C:1B:ED:B4:43:E9:E0:E7:7C:E2:C7:62:9C:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.236.0/22
199.127.200.0/22
204.144.128.0-204.144.134.255
204.144.140.0/23
204.144.180.0-204.144.184.255
206.168.13.0/24
206.168.39.0/24
206.168.96.0/24
206.168.187.0-206.168.188.255
206.168.216.0-206.168.220.255
206.168.222.0-206.168.231.255
207.174.21.0/24
207.174.72.0/23
207.174.76.0/24
207.174.113.0/24
207.174.117.0/24
207.174.130.0/24
207.174.137.0-207.174.143.255
207.174.157.0/24
207.174.175.0/24
207.174.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0d:0c:32:d6:c5:80:19:3f:ac:c9:cc:c4:50:71:fc:3f:e3:
90:a9:30:ee:43:2c:41:b0:6f:fc:4b:02:96:19:64:0f:14:7e:
f4:f6:25:09:5b:5c:08:87:a4:9e:8f:ab:b5:b1:4e:45:a2:fe:
57:34:cb:d7:53:57:fc:96:ed:35:9d:d8:25:60:38:ae:47:88:
da:56:07:0a:1c:43:c9:fd:93:b6:35:5d:ef:4b:0c:6a:53:55:
34:26:ce:9a:bd:ee:8c:5d:b5:66:ee:74:fb:98:9d:a0:29:da:
6a:80:83:0f:3e:b8:e7:1d:ff:02:0e:da:65:83:06:bf:c8:3c:
e8:d4:3b:c4:3f:9d:57:4e:68:63:47:04:05:95:11:1d:4f:1f:
29:e3:77:e3:fc:fd:23:77:7b:45:8d:3b:29:60:22:44:89:ed:
7f:0f:d1:18:58:7e:59:a4:77:24:84:89:1a:5a:14:ab:c2:35:
3b:75:0d:55:e7:f1:fe:0e:79:9c:2b:2d:47:1b:b5:21:42:f7:
35:04:98:bb:e2:c1:8a:28:a2:d1:78:35:57:b0:e8:64:dc:9a:
1a:99:33:6b:cd:9f:23:68:ad:7d:d1:5a:ef:c1:84:d3:7c:f3:
a7:d4:d0:a4:d1:b2:d3:f6:a5:98:db:22:19:7c:c5:2c:84:f5:
61:22:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:27:04 2025 by rpki-client