
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File: 8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier: WB1mKHdy+/NTxZftv5ByIk/Q+ifIxgMVGCgPZYet08g=
Subject key identifier: 2A:26:32:D6:D7:09:DC:65:D8:2E:8F:5A:90:B4:41:FF:B4:AA:AE:BD
Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial: 010D0C9F4328584B80B75652F0426FEC38343100
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time: Mon 13 Oct 2025 01:00:29 +0000
ROA not before: Mon 13 Oct 2025 01:00:29 +0000
ROA not after: Sun 11 Jan 2026 02:00:29 +0000
asID: 17012
IP address blocks: 64.4.240.0/21 maxlen: 24
64.4.248.0/22 maxlen: 24
66.211.168.0/22 maxlen: 24
173.0.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:80:b7:56:52:f0:42:6f:ec:38:34:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Validity
Not Before: Oct 13 01:00:29 2025 GMT
Not After : Jan 11 02:00:29 2026 GMT
Subject: CN=6a1739b4-ef98-4894-9cfe-5309f86da699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:b1:02:b7:18:a0:14:1f:a2:bf:40:ff:cf:
de:f3:74:4b:c4:40:1c:cd:9b:f5:17:b4:5b:b1:00:
77:b7:d1:fd:3d:8c:56:93:57:11:c5:b9:04:dc:7a:
6b:a8:c3:13:54:99:2a:e0:38:37:71:4c:65:1b:12:
85:29:cf:47:61:d8:5c:e0:bf:dc:58:d0:9d:58:62:
d8:b0:e2:fd:f3:d5:90:57:41:cb:58:b7:be:69:8f:
f3:e8:03:b6:ae:a0:20:b0:12:fa:dc:12:72:8a:4f:
0e:05:f0:02:7e:93:01:d7:91:4b:4c:a5:bf:d3:9b:
26:e9:56:8a:cd:db:b4:1d:cb:93:07:a9:95:26:5e:
d5:49:4b:04:e5:e7:91:1c:9e:83:c9:62:08:ab:ab:
5a:ee:b9:e8:91:f0:b4:84:9d:d9:96:a8:0b:82:56:
0d:b2:b0:cc:83:ab:a3:b9:c4:7d:5c:b1:b6:51:eb:
bb:cc:37:50:a4:f4:b1:6a:43:23:e7:e3:10:f9:c5:
a9:6b:03:4a:bb:2a:40:96:77:50:2d:56:a6:d1:81:
c5:a5:17:46:ee:e7:62:3d:be:93:1d:ee:d8:10:be:
25:39:4e:7c:7c:a3:e6:05:d0:1b:0e:68:7d:8c:53:
fb:01:84:de:c7:b3:fd:66:8f:3d:e3:13:fc:93:fc:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:32:D6:D7:09:DC:65:D8:2E:8F:5A:90:B4:41:FF:B4:AA:AE:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
X509v3 Authority Key Identifier:
keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.240.0-64.4.251.255
66.211.168.0/22
173.0.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:6b:fd:30:c2:52:af:37:a1:04:e5:00:7b:bb:32:90:0b:8c:
cb:6f:f4:57:59:b0:1e:d0:3d:aa:de:65:1d:61:8d:b5:44:88:
f5:2c:fb:19:70:43:da:1e:6c:83:9a:b1:37:6f:63:4b:f2:a6:
70:f5:aa:ec:03:c2:2a:34:35:7c:9e:69:0e:ce:27:4b:d2:a7:
a4:47:2c:1d:16:da:92:62:e9:0f:0b:17:f8:f6:5f:7a:a0:ce:
5d:d1:5b:20:49:37:06:50:d0:d9:59:a5:9c:cd:42:11:4d:a7:
f1:d2:02:cd:9c:b7:2b:82:63:44:a2:e2:96:29:ed:8d:c3:15:
73:e7:55:d5:9c:7b:fc:25:7a:45:af:e7:88:46:69:6f:52:c0:
4c:df:e8:40:a7:f1:c0:dd:55:3f:a4:bf:c8:f3:10:89:1f:16:
c2:47:5c:a5:4b:24:be:86:23:ee:53:1d:96:34:a5:03:4e:a9:
6a:c3:52:36:5e:5a:86:d0:86:b7:5d:de:80:6e:de:fc:7f:44:
cf:e1:40:de:4b:47:45:67:2d:1a:81:89:a9:4c:1c:3c:22:69:
37:ad:1a:6f:89:54:81:63:71:51:c8:9c:69:43:f4:17:b5:2f:
06:65:75:08:a7:95:51:59:8d:90:96:59:a2:1e:22:7c:d1:90:
d8:80:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:54 2025 by rpki-client