
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/55bded14-4b97-3a05-ac2d-4064fef8d4a3.roa
File: 55bded14-4b97-3a05-ac2d-4064fef8d4a3.roa (raw, json)
Hash identifier: HN0DpZqlnY/Znd6n6rFiBmaDf/kFMLzocREFGyR082I=
Subject key identifier: 55:EA:F9:8F:30:48:03:3F:10:A5:3E:39:6D:7A:15:A9:62:9D:73:81
Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f
Certificate serial: 010D0C9F4328584BB5C25458E860F88F2A457F80
Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/55bded14-4b97-3a05-ac2d-4064fef8d4a3.roa
Signing time: Sat 01 Nov 2025 01:00:30 +0000
ROA not before: Sat 01 Nov 2025 01:00:30 +0000
ROA not after: Fri 30 Jan 2026 02:00:30 +0000
asID: 394086
IP address blocks: 192.156.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b5:c2:54:58:e8:60:f8:8f:2a:45:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f
Validity
Not Before: Nov 1 01:00:30 2025 GMT
Not After : Jan 30 02:00:30 2026 GMT
Subject: CN=3682972f-3d63-48a2-81c7-63179b540510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:2b:c9:c0:18:49:18:62:4b:4a:db:79:d1:
ac:e9:06:53:08:d7:17:81:ee:cf:0c:f3:99:06:3f:
7a:f0:89:a0:0a:35:3e:a2:9b:24:59:b4:02:11:76:
1e:69:5f:39:e7:1b:59:6a:ac:48:6b:6b:df:cb:8d:
9b:67:73:18:cd:a2:7d:04:38:4d:44:b2:cb:d3:01:
2d:77:15:30:09:22:6f:a2:4a:2a:db:ec:e4:35:5d:
0b:7d:f5:48:cf:f7:25:96:58:7b:f5:f8:05:fb:4d:
7e:d2:47:fa:32:e1:16:58:2b:81:97:3b:5d:db:e0:
a9:5f:ef:4c:a0:d4:d7:4b:8e:37:3a:49:a7:ac:bb:
45:52:3c:20:f5:fa:4c:bf:88:0e:cc:d3:24:6b:4c:
37:cc:05:cd:61:95:6e:44:38:c2:9a:c5:aa:9d:2e:
7d:a1:64:84:09:d4:a1:df:fc:69:1d:70:f5:7a:7d:
af:4e:ff:14:96:fc:f7:0b:f2:ce:3e:3f:52:08:08:
c0:d0:35:b5:6d:24:8b:cb:29:a1:88:83:e8:27:47:
21:09:d6:03:47:63:19:fa:97:54:5a:c3:38:40:48:
13:d3:f0:1b:ca:fe:9a:d8:c1:cd:22:0c:e4:45:f2:
64:e6:0a:f6:c4:19:21:3a:6c:0f:11:1e:a1:2a:29:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:F9:8F:30:48:03:3F:10:A5:3E:39:6D:7A:15:A9:62:9D:73:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/55bded14-4b97-3a05-ac2d-4064fef8d4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl
X509v3 Authority Key Identifier:
keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.156.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d5:07:07:c1:86:94:d6:32:36:1c:19:74:53:db:61:2e:00:
7f:ad:5d:44:22:5f:65:61:a1:e1:b2:f5:cd:69:27:7e:c4:4d:
43:8b:10:6b:21:b8:f7:fe:6a:34:af:35:ab:a7:3e:81:80:cf:
e4:4d:be:7c:f1:1f:c6:7f:15:6d:b5:85:21:86:82:05:3d:c0:
46:64:19:98:e9:fe:be:f2:7b:2d:d6:97:f5:6e:af:0c:0f:23:
f1:28:f9:42:c9:78:6e:7d:09:83:09:61:46:64:a1:0a:70:b1:
7c:59:c4:cc:ba:ab:07:47:b4:9e:f1:eb:98:f2:0a:53:22:77:
54:16:b2:5c:d9:b2:a9:56:26:70:bb:43:78:f3:d3:82:11:9a:
a4:94:84:4d:49:6b:89:c9:15:95:d9:8a:28:14:51:1b:fa:86:
29:35:20:29:30:e1:b1:aa:2b:ff:a7:dc:2d:6b:76:3f:d7:1b:
99:6d:a9:31:04:3e:db:35:a4:c0:96:fd:14:aa:5e:23:f1:c3:
05:93:55:58:9b:f5:aa:35:99:59:a4:f2:17:a4:3a:82:4b:99:
79:05:7a:ac:0b:51:8a:a7:77:7a:7b:4a:bc:55:1d:41:da:a8:
9a:c3:05:96:b7:77:73:18:56:ce:22:2f:a0:2f:44:8a:33:10:
c0:58:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:05:47 2025 by rpki-client