
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10008cd3-1be1-3bfa-b659-cf5c79016be4.roa
File: 10008cd3-1be1-3bfa-b659-cf5c79016be4.roa (raw, json)
Hash identifier: Xk381d8gCATTgK3fuuVUAYuoyNoUijbcPQo8FpbNd98=
Subject key identifier: 96:A1:12:95:7F:08:C2:F8:95:03:17:A8:D1:4F:85:58:99:5C:C7:41
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584AECC3AD04BB1FA2DC8BD09A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10008cd3-1be1-3bfa-b659-cf5c79016be4.roa
Signing time: Thu 21 Aug 2025 01:00:33 +0000
ROA not before: Thu 21 Aug 2025 01:00:33 +0000
ROA not after: Wed 19 Nov 2025 02:00:33 +0000
asID: 33659
IP address blocks: 73.199.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ec:c3:ad:04:bb:1f:a2:dc:8b:d0:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 21 01:00:33 2025 GMT
Not After : Nov 19 02:00:33 2025 GMT
Subject: CN=8af2969b-1c6d-46e6-8d57-88fe5ccfe3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:85:ad:06:16:ce:9d:41:54:4b:dd:2a:b6:
8a:d2:3c:60:4a:b1:63:e9:d5:58:4a:2e:55:bb:84:
f7:8e:b7:c3:91:17:c5:4d:75:d0:13:9a:6f:c3:62:
8f:05:97:32:49:63:bf:f5:ec:41:4c:2d:7e:01:3d:
68:7b:30:97:ca:06:8e:14:9b:d9:9f:28:71:29:ce:
d1:df:04:29:bd:58:08:1d:c1:cb:b5:f1:8f:8b:95:
17:55:ef:5c:a4:f5:e8:4a:7f:5f:e5:14:49:72:a9:
f5:49:a0:f3:b2:3b:ea:e7:00:88:30:21:8f:c4:43:
2c:9e:8a:89:33:a8:ce:ce:7c:67:1c:f7:10:01:07:
f1:c3:5e:05:97:c2:25:e6:33:6f:53:01:c0:c7:f4:
1f:5d:a9:7b:e8:b1:41:b4:43:d3:b2:b7:82:b0:b8:
84:57:95:c7:8e:a7:dd:f1:e9:57:21:a5:9c:98:38:
41:b2:f9:85:6b:84:b7:46:cd:da:ab:e4:c9:86:65:
f9:5f:45:95:1b:fd:17:f4:38:51:99:bb:61:0c:22:
14:3a:14:80:37:85:b5:9e:b0:00:3a:41:99:be:15:
75:67:a6:14:6f:ba:bf:8a:43:0f:90:9f:8e:15:32:
9e:83:da:da:41:87:7b:8f:23:68:d0:c3:ac:88:fc:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:12:95:7F:08:C2:F8:95:03:17:A8:D1:4F:85:58:99:5C:C7:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10008cd3-1be1-3bfa-b659-cf5c79016be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:85:fc:d4:51:8c:e3:a7:c3:7e:ce:85:df:fe:66:65:aa:5f:
76:42:ac:e1:59:5e:e9:ee:0e:14:41:7a:e8:92:b4:d0:c3:1c:
53:c9:7a:67:4e:23:70:86:48:6f:ca:46:0b:79:f7:44:14:eb:
09:1f:9c:6e:b0:4d:8e:26:b2:e6:4c:69:13:c9:54:a7:68:20:
3a:e9:b8:18:9c:7a:84:9b:8b:30:c3:e4:c5:95:96:03:5c:e5:
be:1d:05:ed:4a:68:4d:05:9b:b8:e7:7a:33:f6:ea:67:63:4d:
9f:62:83:ed:50:b7:5f:09:17:95:7d:0c:e5:0f:80:e5:5a:b1:
14:4c:88:99:f3:c2:85:5a:38:ef:32:4d:aa:92:6e:fe:11:a6:
b8:76:a5:57:40:12:99:28:2a:58:2e:bf:cb:b5:6f:dd:61:66:
fc:0c:81:db:43:9a:f3:06:31:30:f6:92:50:bd:0b:87:48:e0:
4b:1f:a5:34:a8:67:ac:34:80:ca:fe:2f:55:e6:f7:a4:02:4a:
b0:65:ff:04:89:f0:8c:a3:9a:28:9e:8b:cd:f8:e3:a0:1f:bb:
6d:45:f3:c3:f4:0e:e3:18:60:a5:3c:ae:24:bf:84:b6:83:09:
64:e2:12:70:7b:97:9d:73:95:8f:68:e0:7a:e9:cd:ab:d5:0d:
c7:0c:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:52:20 2025 by rpki-client