
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6fe47484-5eb3-3d07-9a55-8fd1dd1a1da4.roa
File: 6fe47484-5eb3-3d07-9a55-8fd1dd1a1da4.roa (raw, json)
Hash identifier: 6T1rk/KWg8fF6A3L0H1N7j01on4Vxb+d1InJGlU37X4=
Subject key identifier: 45:E3:ED:8A:0F:8B:14:2C:80:C8:E8:85:B6:55:99:55:B5:D9:85:6D
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584B9B3CFE03EF8BB4EF30B72100
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6fe47484-5eb3-3d07-9a55-8fd1dd1a1da4.roa
Signing time: Wed 22 Oct 2025 13:00:38 +0000
ROA not before: Wed 22 Oct 2025 13:00:38 +0000
ROA not after: Tue 20 Jan 2026 14:00:38 +0000
asID: 22616
IP address blocks: 170.85.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9b:3c:fe:03:ef:8b:b4:ef:30:b7:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Oct 22 13:00:38 2025 GMT
Not After : Jan 20 14:00:38 2026 GMT
Subject: CN=9f20b051-c319-48d3-a7ac-470e5de38270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:17:f7:39:34:67:2a:33:f6:1b:6b:ea:52:
a4:f7:82:6f:42:d3:27:fd:0a:15:1f:ec:4e:91:26:
b7:f3:9e:85:1f:9b:28:59:dc:99:00:f3:4b:2a:55:
6f:d8:76:9c:6b:6f:f7:f9:ee:4b:63:d2:8f:2f:f5:
f3:71:4f:59:45:3d:f3:1a:8b:91:21:f4:c9:6f:51:
76:46:ee:22:0f:8f:a3:bc:68:d6:3a:a7:19:6a:bf:
39:3e:fa:b6:8f:39:f6:5c:68:b1:9b:a1:42:ff:8f:
be:c2:f8:9a:dc:73:ae:eb:48:d9:1b:45:05:c3:8e:
8d:5a:26:8d:5c:f0:52:f2:ee:1b:3f:2a:db:a5:d5:
10:b9:fe:50:77:cf:a6:93:bd:6f:8a:c4:69:ea:bc:
3d:e7:b3:86:60:9f:58:2f:fe:7e:db:ea:16:de:8e:
10:78:ee:76:49:30:3f:94:7e:51:89:1f:b9:1f:1f:
6e:a2:21:ef:9c:be:f2:6a:9c:54:67:82:7e:18:ea:
d6:f1:45:a2:ea:23:c0:69:0e:94:3f:0f:aa:89:bb:
56:92:88:68:36:ce:28:28:a1:37:9c:b9:50:7b:f7:
76:be:d1:d6:05:2a:2c:6d:22:5b:8e:83:9e:af:66:
a5:0f:5c:4b:55:3e:ee:c5:1c:bb:d0:f5:1d:0b:e1:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:ED:8A:0F:8B:14:2C:80:C8:E8:85:B6:55:99:55:B5:D9:85:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6fe47484-5eb3-3d07-9a55-8fd1dd1a1da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:d7:be:1b:dc:4b:20:9c:0f:88:23:80:1d:00:01:ad:da:69:
7e:a0:81:51:67:e1:59:93:ec:6e:16:7a:f2:53:a9:87:fb:6d:
63:93:c8:a2:58:9e:84:e6:fa:ec:d5:26:66:85:bb:5d:20:fd:
5d:cc:fe:46:4d:73:3b:4d:4f:41:af:6a:ea:d9:ed:f6:ef:7b:
9f:36:bc:74:d9:2f:83:75:5d:3a:85:11:86:bf:96:ff:85:55:
fa:d6:23:1e:0d:fa:67:df:72:e3:c5:ab:d3:7d:dd:63:1c:83:
c6:38:1b:d8:d1:9a:78:72:db:9e:c3:13:ad:c3:0b:ae:0e:00:
4b:33:d1:46:f1:80:7b:71:23:df:ca:72:3a:49:60:c9:7e:4d:
9a:0b:d8:ef:ac:99:85:7d:cd:6a:01:80:59:fe:f6:07:a3:28:
4c:eb:41:42:c4:20:30:fa:05:c1:dd:fd:da:75:d8:13:80:f1:
ce:ce:50:b5:8a:48:96:5f:b8:7e:ae:39:87:de:f5:21:20:a8:
84:03:8f:a8:b3:15:d6:eb:4d:12:56:be:f4:5d:d4:22:36:a1:
69:6f:e6:00:2a:eb:00:39:3c:7c:a3:de:b0:49:ab:ad:44:f9:
05:74:47:3a:b7:55:44:1f:89:29:fe:ef:35:6d:6e:de:1e:6f:
be:a8:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:53:39 2025 by rpki-client