
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
File: 80fdb0a9-6208-3f9e-a314-da6a439aac56.roa (raw, json)
Hash identifier: fEvpp3RKOMvptfmGpIF0PeY2u40AU9sMEhZxNrxO41c=
Subject key identifier: EF:7E:40:D1:77:EE:2D:CF:6C:88:D1:32:15:0D:BE:9A:D1:F7:22:9B
Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial: 010D0C9F4328584B7C876444928B6FDFD5E846C0
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
Signing time: Sat 11 Oct 2025 13:00:38 +0000
ROA not before: Sat 11 Oct 2025 13:00:38 +0000
ROA not after: Fri 09 Jan 2026 14:00:38 +0000
asID: 393457
IP address blocks: 64.59.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7c:87:64:44:92:8b:6f:df:d5:e8:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
Validity
Not Before: Oct 11 13:00:38 2025 GMT
Not After : Jan 9 14:00:38 2026 GMT
Subject: CN=f3d95e4d-3355-42c6-8330-e690f477545c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:b5:d8:95:d5:5f:19:c6:0e:cb:39:20:b6:
13:27:56:80:51:17:60:37:ea:c5:4e:3c:28:02:e4:
40:56:b0:ef:f4:a2:e6:73:c7:2f:97:99:27:9e:b9:
d1:e8:fa:26:eb:34:ea:1a:b3:18:bc:c8:21:24:1e:
01:f6:ad:59:5c:c3:24:4a:de:3f:e1:8f:1a:b2:66:
11:e0:5b:da:a8:5f:a1:70:13:3a:87:59:17:e5:3b:
a7:50:a0:d4:b9:b7:c9:33:95:c4:7b:5e:8f:9b:69:
62:d7:ce:ae:29:b2:87:40:7a:f9:02:91:bd:d7:e8:
bd:e3:d1:71:07:60:46:96:87:1a:86:e4:7e:c7:49:
45:f0:f0:e4:51:86:20:1a:f8:6a:ef:4b:b0:e3:74:
ef:c1:15:ca:76:0b:a5:fe:84:4e:b7:f9:31:2f:f2:
b2:c0:0a:07:cc:da:db:75:d5:31:54:37:f0:52:47:
a7:cc:a7:13:70:4c:af:f8:3e:7a:5e:f4:7f:61:b6:
16:cb:50:36:e7:6d:7c:8c:53:3f:6d:4a:90:66:75:
25:b4:bc:f5:01:67:82:62:2b:f1:99:73:de:75:d5:
a7:73:a1:31:fa:e8:fe:49:05:4c:ed:cf:1b:26:94:
e8:f1:6c:36:fa:45:71:0d:6e:07:75:1e:06:14:36:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:40:D1:77:EE:2D:CF:6C:88:D1:32:15:0D:BE:9A:D1:F7:22:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
X509v3 Authority Key Identifier:
keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
sbgp-ipAddrBlock: critical
IPv4:
64.59.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:77:f8:d2:9c:96:7d:cd:62:44:98:48:64:a0:ee:cb:3a:6d:
ea:c2:43:6d:2a:f8:ed:5f:54:5d:c9:74:39:d4:ed:7e:09:cf:
39:b5:17:ea:ed:6e:e6:77:1f:77:90:8d:6d:df:b2:ca:1c:b6:
65:a9:6f:57:67:0e:84:4e:81:c9:0d:0b:cb:a1:37:d2:4d:c6:
0a:e6:ce:9c:2b:51:ca:8a:b2:79:56:f0:6d:df:e0:d1:46:f8:
74:fb:05:26:d4:03:93:b8:45:ea:de:7e:7d:8e:81:aa:01:14:
8d:72:7b:59:54:4b:52:e7:e4:39:e1:48:85:2a:00:70:1c:8f:
c5:cc:34:31:a1:4c:63:30:72:8d:15:11:58:02:69:59:3e:d4:
5e:bd:15:82:47:a2:c8:25:36:91:f0:05:71:38:39:d3:98:b4:
c9:e6:ae:ad:2a:08:fc:35:af:75:9c:cd:c6:36:61:84:8b:88:
7e:d3:1a:c2:a9:04:bb:fa:b5:63:eb:ad:cc:f6:e3:c8:cd:0d:
f8:4c:77:d6:4d:2b:90:a9:35:1d:73:5f:57:ec:76:d1:22:94:
32:07:e5:c9:ba:78:4b:2b:7f:ef:f4:55:63:33:9c:bf:54:48:
13:38:17:69:78:fd:0b:38:dd:bb:f1:e3:bf:7a:f4:a4:3b:90:
46:66:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:20 2025 by rpki-client