
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/ff14600f-7655-381e-9e7d-d02732981eb8.roa
File: ff14600f-7655-381e-9e7d-d02732981eb8.roa (raw, json)
Hash identifier: nDKmGDTT5fDD7jJ4BqoWhXz+kTZdjAAAUHZ7TGbu16c=
Subject key identifier: ED:72:B8:0E:02:22:9E:93:F7:E6:92:36:2B:FC:AD:82:9A:96:0E:F0
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584BC27067EB84F59660D6E2E900
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/ff14600f-7655-381e-9e7d-d02732981eb8.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 46215
IP address blocks: 216.91.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:67:eb:84:f5:96:60:d6:e2:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=bf1411de-c45a-46c7-a648-d6ea20128ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:a9:55:bd:00:1e:6e:88:41:e8:cb:90:45:
15:c5:dc:97:93:3e:c3:1a:d5:87:b6:91:0b:a6:eb:
2b:43:9c:dd:4a:5f:e3:0a:32:fe:77:fa:f8:d2:b1:
3c:aa:22:ce:da:80:0f:37:b3:8e:20:27:a9:2f:68:
28:48:2a:1c:1d:14:f6:70:26:61:53:c8:d2:28:f5:
be:20:e7:84:2d:93:3b:a6:e3:27:23:5e:bb:b7:b9:
13:54:8d:ca:72:9b:75:0b:03:9d:a7:1e:1e:7e:4a:
df:d6:eb:b6:5e:bc:7b:e2:7d:6a:f3:f7:06:30:a8:
f0:6f:69:ef:c9:d8:91:ba:ca:ba:bd:82:56:b0:5d:
0e:26:c2:1a:04:94:35:3c:7f:89:e0:ef:f7:ac:63:
85:e7:70:4d:6f:f4:48:d5:c2:20:0c:65:44:f7:c5:
eb:b4:72:e2:64:ed:35:f4:46:65:ae:7f:06:33:54:
e5:6e:34:10:c7:7b:82:a9:eb:74:e6:97:52:ab:dd:
bd:a3:6b:06:9d:e0:9b:37:5d:06:95:26:29:f6:5e:
09:55:27:32:6a:1f:9b:b1:70:ea:e6:57:40:61:ab:
08:61:50:68:9a:ef:7f:33:31:93:48:54:6f:2f:0b:
a7:d5:27:b4:fe:2c:61:a5:8f:03:5b:95:13:c5:80:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:B8:0E:02:22:9E:93:F7:E6:92:36:2B:FC:AD:82:9A:96:0E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/ff14600f-7655-381e-9e7d-d02732981eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
216.91.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b9:99:cd:69:0e:a2:8c:b6:ad:c6:bd:78:c2:4d:e1:5a:86:
d8:b3:f3:20:fc:39:ca:57:3f:7f:de:49:35:f9:13:03:76:50:
64:a2:7c:5d:33:20:79:0e:c0:68:fc:b8:a7:a2:8a:b5:7c:ae:
4f:9a:9d:4b:57:84:05:34:a4:a4:bd:69:e3:84:43:0f:9f:2f:
a8:5d:f4:21:22:f9:6b:03:b5:fc:84:21:73:1a:b3:2f:ff:5e:
22:33:71:56:01:6d:4e:9b:f6:a3:e3:01:29:a0:d8:f8:bc:d0:
ce:ea:65:71:8a:9e:bf:74:40:bc:ac:6d:9f:5c:00:7d:a3:00:
5d:51:ae:be:2f:6f:bc:fe:e5:08:64:38:90:39:c8:1a:42:95:
d7:ac:b9:95:05:33:6c:41:fa:79:5b:5f:97:5c:b4:ef:7e:61:
97:4e:65:88:0e:8d:ca:69:5e:f0:76:1e:54:47:d9:96:5c:57:
71:c9:b7:8c:f3:a2:6d:d2:84:b2:16:c1:f2:0b:c5:14:92:70:
35:01:0c:a6:8a:a6:d7:48:8b:93:3b:f1:31:2d:c2:48:17:48:
a6:55:1c:b4:e2:ee:0b:55:41:2c:d8:7d:d6:c3:09:53:b1:87:
d0:10:72:82:e8:f6:0f:96:b1:e4:e6:ec:bb:5d:b5:32:60:63:
ea:c1:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:30 2025 by rpki-client