
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b736b40d-386c-3a73-98c7-e0e8c541061d.roa
File: b736b40d-386c-3a73-98c7-e0e8c541061d.roa (raw, json)
Hash identifier: 4JYpjMcw8eAhgjWJsN8EiaVAp99UxB8vr6BTforKJYY=
Subject key identifier: D8:73:CD:53:7E:31:12:89:3B:73:76:14:20:4A:5D:EF:41:36:E7:0A
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F4328584BA39CFAE3F333DAA2ACD98100
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b736b40d-386c-3a73-98c7-e0e8c541061d.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 14593
IP address blocks: 149.19.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9c:fa:e3:f3:33:da:a2:ac:d9:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=cc7415ed-fb91-4301-8e92-40781ccc220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:c8:3c:46:de:2c:43:02:6e:6b:86:aa:30:
d6:d1:4c:ff:92:0f:94:4d:c5:15:5c:39:45:bc:ba:
89:74:7c:2c:fa:7d:f0:f8:08:9b:b0:e6:ba:52:7d:
01:d2:29:6a:94:6a:0f:7d:39:61:8d:4f:24:0d:69:
c4:ba:64:f3:00:86:41:cb:0c:46:88:0d:99:20:2e:
73:df:ce:7a:1c:70:55:1a:77:f3:aa:2a:42:ca:08:
31:4f:0c:82:68:bb:42:ca:6d:9e:32:98:c6:00:71:
c4:fd:c3:ab:a0:5d:8c:e7:4a:50:9c:99:1c:fa:6b:
e5:94:dc:14:d6:15:4c:a6:8a:95:e8:bd:27:dc:b5:
88:e3:53:bd:8c:f1:16:01:dc:eb:99:48:48:62:24:
79:50:f8:4f:92:d9:d9:cd:07:8f:39:36:99:7b:66:
6c:23:59:6b:15:75:f2:98:7a:e8:26:35:69:73:46:
01:af:50:ff:a0:ed:1d:45:08:08:d7:43:1b:08:31:
37:9d:59:45:36:30:49:a6:8f:64:22:79:c3:32:f1:
ef:7d:54:ab:43:87:75:aa:42:12:1f:29:12:93:95:
22:50:a9:61:a3:52:01:a8:99:3c:86:bb:bd:89:13:
9e:09:d9:34:82:53:d0:46:ed:5c:28:b9:6f:b8:94:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:73:CD:53:7E:31:12:89:3B:73:76:14:20:4A:5D:EF:41:36:E7:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b736b40d-386c-3a73-98c7-e0e8c541061d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:6b:5a:0d:64:1f:37:c1:0b:2d:a2:47:63:8f:3e:5e:60:96:
4d:60:49:da:f2:83:30:c5:86:c1:fc:f5:84:e4:31:8e:fb:01:
22:ce:10:34:7a:45:38:a3:4a:39:72:fa:20:bd:0f:ec:1d:c9:
e6:b9:0a:72:b8:6b:b5:53:ee:c1:9c:86:6c:06:5b:54:79:b7:
bf:0c:66:8b:ec:30:85:9d:4b:4a:b9:5b:9e:79:48:c2:32:d7:
75:e6:7b:1c:0a:e7:03:4a:67:3e:d5:b5:79:e1:d9:69:e7:96:
ce:62:7d:b8:0f:02:e5:fb:d2:a4:02:49:18:d0:2f:68:12:51:
cc:0e:eb:2f:a5:ae:bc:39:68:49:7e:88:c4:7b:57:6d:1b:6f:
79:20:e3:fd:3e:a6:6c:d3:71:ae:17:ca:22:31:ed:b2:c9:a8:
a7:dc:cc:fb:81:45:c4:3d:6a:a7:0d:7c:60:ea:aa:62:6e:ab:
7b:a0:48:5b:05:47:7f:ed:9d:9f:2b:96:b8:8a:50:c2:f4:c2:
73:58:2a:3b:92:51:7d:e5:1d:06:16:fd:0c:a3:98:f3:e5:6b:
5f:1b:e1:2b:1f:62:3f:74:08:6a:b7:7d:a2:59:96:3a:6f:1d:
a2:12:b9:9e:20:cf:47:1b:0d:e8:10:66:b3:8c:7d:0f:79:29:
6f:d1:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:48 2025 by rpki-client