
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
File: 49372caa-80a6-338e-b361-ca20bbf60b2b.roa (raw, json)
Hash identifier: 57rDA5Lcu7+TofPM/M9tiI470j3bpN9FIXc/onCGL4M=
Subject key identifier: 2D:51:43:4F:4B:BA:08:69:07:28:5B:12:95:21:BE:E1:54:18:41:0F
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584B3556F123FA2ECBC9E8E61920
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
Signing time: Tue 16 Sep 2025 01:00:33 +0000
ROA not before: Tue 16 Sep 2025 01:00:33 +0000
ROA not after: Mon 15 Dec 2025 02:00:33 +0000
asID: 63199
IP address blocks: 148.153.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:35:56:f1:23:fa:2e:cb:c9:e8:e6:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Sep 16 01:00:33 2025 GMT
Not After : Dec 15 02:00:33 2025 GMT
Subject: CN=c8cca894-2587-4330-8ec7-1d8793fed257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:db:29:b8:27:48:b0:40:86:ea:f0:25:5d:
7d:00:1e:bc:7f:fb:5e:69:17:a2:53:35:39:33:7b:
a3:9d:1c:37:c7:10:d0:1f:11:9a:42:0f:4b:5b:a0:
08:67:b0:fd:a5:27:ad:4c:51:5e:78:85:1f:30:76:
d4:13:27:72:1a:e6:83:36:09:54:b7:24:bb:be:ba:
12:cf:63:e2:fc:c5:ef:ab:fe:b1:56:d7:65:7b:05:
d6:69:72:ee:f4:f3:d8:8b:e4:ff:3c:23:40:71:18:
0d:a7:fc:9b:f5:c2:8e:55:e3:66:2d:55:2e:87:80:
07:fe:30:15:c1:c5:c4:b9:a5:8f:96:b3:28:7b:dd:
a9:76:e4:17:c4:25:aa:1b:dc:e2:fa:8b:91:a0:26:
d6:fb:23:28:20:ba:30:3f:c6:59:c3:06:02:52:94:
c0:82:e8:f4:cc:d7:0a:35:53:72:16:eb:ad:29:55:
b8:06:08:e3:79:3c:2d:58:4a:25:78:51:b3:ee:18:
70:7e:03:1c:ad:3b:ef:d0:d7:77:85:db:42:26:ea:
1c:47:55:8c:b4:95:14:b6:77:a4:c4:68:fa:91:30:
6b:b9:08:a5:2c:94:6c:91:90:d2:00:3f:3b:c8:ab:
1e:83:33:ae:0d:e8:23:a4:cf:20:85:9f:2d:77:f1:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:43:4F:4B:BA:08:69:07:28:5B:12:95:21:BE:E1:54:18:41:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/49372caa-80a6-338e-b361-ca20bbf60b2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:25:56:6e:4b:0c:fb:9e:20:63:54:e1:00:23:dc:2b:e9:2f:
a9:9a:3f:82:b6:a3:14:2a:fc:63:33:16:0f:de:be:3e:e7:a3:
ea:2f:6d:a7:e6:61:15:27:1d:f0:f3:e9:65:ef:5e:e4:1e:d0:
04:88:2d:56:18:73:9e:7b:52:c7:e9:05:3c:1e:d7:89:43:04:
7c:16:fb:c7:6a:ed:69:59:11:30:e4:21:04:cc:c9:ab:1f:0e:
3b:a6:a2:25:6d:a9:3c:1b:a3:ae:e8:12:12:45:ff:90:3f:b4:
c8:43:a5:02:93:2e:24:1c:49:7f:32:08:5e:6e:e8:c0:02:3c:
08:26:08:9b:d1:4c:8e:26:d5:e3:4a:fe:38:85:62:04:77:34:
28:b2:9b:32:ff:99:9c:94:13:7a:a2:3a:a3:a6:0c:12:ec:89:
4a:ae:e9:99:31:99:19:53:ba:80:9d:78:e5:0e:b7:ba:b1:59:
fb:d9:1a:6f:5d:91:29:a7:9d:46:b7:10:6b:73:28:50:f1:8f:
e7:ac:d3:97:6b:de:0d:98:82:77:96:bd:b8:71:b7:0f:2d:8f:
c0:67:2c:52:da:68:b3:8f:75:db:21:28:80:2c:1a:bb:32:d8:
69:34:68:d9:b3:f1:1f:aa:d2:d5:2a:d0:ef:61:35:fb:75:54:
30:3f:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:29:47 2025 by rpki-client