
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa
File: 91aaccaf-f050-3f69-9e66-2f8cb643c659.roa (raw, json)
Hash identifier: BValU03ArREfczpW8OY5kIw8LVIzIvt0OIexG82qLDs=
Subject key identifier: D3:49:C9:5E:DF:95:4C:F1:D1:D5:64:E4:BC:DB:C7:EE:A2:89:68:19
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584B6631F7D200A1D5A5AABC6380
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa
Signing time: Fri 03 Oct 2025 13:00:40 +0000
ROA not before: Fri 03 Oct 2025 13:00:40 +0000
ROA not after: Thu 01 Jan 2026 14:00:40 +0000
asID: 3561
IP address blocks: 208.159.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:66:31:f7:d2:00:a1:d5:a5:aa:bc:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Oct 3 13:00:40 2025 GMT
Not After : Jan 1 14:00:40 2026 GMT
Subject: CN=da2306ec-32dc-46af-8709-1c2d5c4ea7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:60:49:1e:a6:fe:ee:a1:5d:f4:26:24:ff:
1a:6a:ff:f8:fd:83:f7:9a:d7:e0:5c:57:ba:f9:26:
35:b0:15:16:ef:6f:75:5d:f0:4f:82:55:bd:0f:31:
05:7d:e0:dc:3f:62:08:89:38:54:35:9a:6e:a4:f8:
a9:ba:83:25:3b:db:02:91:ec:1b:f9:89:59:00:10:
58:d6:4e:4f:b5:f1:3a:f8:3d:5e:5c:56:6f:ff:d1:
31:ba:61:48:76:70:72:f7:4b:a6:75:e9:65:96:7f:
ec:3e:b8:4d:3e:69:5a:04:db:e1:de:96:aa:ed:e2:
1c:54:54:22:a8:48:8f:b7:e8:dd:e2:c4:96:ef:a9:
22:8a:e1:ab:bd:a5:41:ea:70:6a:a2:f2:88:e4:7f:
2e:e9:e7:9e:2c:30:06:b3:be:f8:8f:b2:51:e1:2b:
dd:e1:2e:53:9f:ef:59:6b:47:ba:f3:d7:4b:6c:ed:
e7:ca:8a:f8:b6:8f:ee:99:65:33:d5:aa:4d:80:ec:
3e:82:76:89:f2:f0:30:30:80:4f:9e:c5:7d:ca:89:
02:9a:1a:1d:51:b4:7b:08:9d:66:c9:c7:3d:f3:b2:
eb:98:68:39:ff:b6:c6:40:3e:db:75:1a:a6:1b:10:
33:60:4d:fc:3e:bb:d9:b8:89:f7:ce:51:a9:af:7a:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:49:C9:5E:DF:95:4C:F1:D1:D5:64:E4:BC:DB:C7:EE:A2:89:68:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.159.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ba:fd:7c:e5:98:8a:b6:76:e3:23:47:b3:a9:b2:da:85:85:
b1:d9:13:f8:ab:5c:89:53:3d:c1:49:68:76:82:87:35:9e:0a:
ee:33:db:3b:72:f9:86:e6:86:0a:40:d7:83:4f:c9:b9:eb:b5:
4b:42:c1:b9:dc:ac:8b:d9:c5:02:d4:85:d9:42:1f:2b:71:d1:
07:6c:da:c4:41:06:7b:03:8f:51:c7:b8:3f:c1:87:40:27:6e:
16:fc:51:ca:eb:96:a8:8d:3f:82:37:93:a5:e0:17:41:f9:73:
0f:96:1c:e2:f6:ff:e8:9e:b7:b6:61:34:c5:89:5a:c8:24:03:
1e:b0:1c:20:ad:5a:bb:48:dd:28:10:fd:75:60:fc:f2:bb:6e:
fb:a6:37:6c:b3:12:0d:28:7d:0c:63:b3:e9:9a:5c:05:5d:ae:
47:0f:c8:10:69:7b:46:78:5c:b6:bf:08:0f:84:5e:4e:66:42:
ad:f3:d2:e9:eb:3b:7b:06:b4:86:1e:35:c9:43:84:5c:ef:0c:
23:0f:26:22:38:5c:f1:58:42:2b:e9:4f:16:b3:32:b9:84:ff:
a5:ee:b5:c4:54:b5:b8:b5:f2:2a:ba:b7:bc:7f:92:6a:eb:21:
73:8b:14:81:ef:7c:99:32:71:61:b7:e9:f3:25:91:5b:61:a8:
8c:7d:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:43 2025 by rpki-client