
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/02a8e93d-4b39-3a91-adfe-964d98253c4a.roa
File: 02a8e93d-4b39-3a91-adfe-964d98253c4a.roa (raw, json)
Hash identifier: dU8Z1cmJNRFZ7kA6fjOrzhvcGklU8C9Us52ktdyEf/U=
Subject key identifier: DD:2E:C6:C3:19:A5:44:26:6A:83:1E:D2:1D:12:13:47:F8:EA:62:54
Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Certificate serial: 010D0C9F4328584BC27068D7E4776BB4CB37C700
Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/02a8e93d-4b39-3a91-adfe-964d98253c4a.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 398065
IP address blocks: 142.202.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:68:d7:e4:77:6b:b4:cb:37:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=b6f57612-327c-4125-abdb-b75b15c30217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:0c:c2:2e:15:1d:94:4f:63:ad:7b:e5:a4:
75:49:c7:80:ef:76:d9:2f:67:f8:38:e0:79:0d:3d:
a7:d1:ef:ce:7e:e5:fa:21:b2:de:fd:45:73:cf:d1:
57:4f:2b:06:3b:d8:5c:fa:aa:3f:da:ed:d7:a6:89:
de:a8:5c:a1:29:7c:68:7f:7d:5f:7e:50:74:b9:c4:
51:b7:2c:91:41:80:43:8a:7f:14:23:73:1d:e8:86:
2c:42:44:99:3f:18:c4:64:61:54:05:51:f3:d9:7f:
6f:eb:6c:44:a4:79:39:b4:b4:bd:1d:69:fb:b7:73:
d6:53:fa:54:d2:50:52:12:12:58:82:fa:af:7e:82:
00:ea:81:9f:bf:02:c8:b0:73:87:08:70:68:97:84:
5c:30:22:41:bc:90:13:fb:06:0d:68:90:94:57:14:
f0:54:87:a1:3d:d7:9d:7c:fe:d5:9f:41:4f:2e:b5:
da:ce:6c:67:66:21:7e:88:46:80:96:2c:8a:2a:3c:
d6:2d:78:10:69:08:8a:c0:2c:e6:0c:e7:ff:fa:46:
c7:b5:1c:d9:c6:fc:b3:53:e4:69:2f:b9:90:0a:cf:
a4:ca:cb:c5:4b:b1:7d:08:b6:b6:ac:ec:ac:60:03:
3e:b4:97:48:b8:71:73:09:80:a4:b1:e2:b8:98:9e:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:C6:C3:19:A5:44:26:6A:83:1E:D2:1D:12:13:47:F8:EA:62:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/02a8e93d-4b39-3a91-adfe-964d98253c4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
X509v3 Authority Key Identifier:
keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:1f:d7:e1:ba:d7:db:71:aa:32:94:18:be:78:27:b0:7c:52:
3b:11:ab:01:05:1c:39:18:3e:37:67:06:a4:60:78:c7:1a:0d:
49:1f:8b:f1:50:f6:8b:3b:75:c6:f5:63:6e:d1:5d:90:a0:50:
fa:f6:17:57:4c:34:30:b4:bd:a0:cc:fb:79:cf:a5:1f:9a:07:
d2:eb:2b:10:1b:c4:44:45:60:41:47:cf:8c:4d:38:5b:0c:02:
1c:67:1e:50:7d:cf:6f:6c:8a:7b:9e:73:a0:8e:6f:59:2a:01:
57:f0:ae:87:bc:d0:aa:82:16:43:6b:75:d7:f9:23:8a:27:13:
7a:69:aa:3e:46:4c:75:46:6b:b0:a4:db:81:9e:d9:fa:33:d6:
e9:5b:7f:2b:e8:c7:5d:df:18:3a:5a:25:cb:94:2d:8e:ee:80:
ec:85:4d:39:54:3d:ac:44:2d:d9:11:29:23:8f:f3:d3:4b:35:
00:d2:34:2a:db:db:dd:45:5e:8a:2f:13:1a:a0:62:67:e1:62:
f3:83:29:b3:2e:0b:74:e2:72:c8:8a:db:a4:53:85:d2:c6:a6:
08:19:36:89:11:0a:a5:f3:e5:89:99:46:cd:a0:72:a2:ac:f3:
ea:bb:e4:24:44:e5:4e:20:68:c5:2e:d5:4d:0a:71:d1:11:00:
14:b6:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:52 2025 by rpki-client