
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ae3b50-f2a5-3871-8a7f-77b833cadbb1.roa
File: 42ae3b50-f2a5-3871-8a7f-77b833cadbb1.roa (raw, json)
Hash identifier: TN823QSavLg2u3OX7H1gD/hbxJ7QYeu9n1Nx5xnpYP8=
Subject key identifier: 94:97:12:41:B6:1C:88:B1:47:7A:D7:D8:2D:87:41:4F:7E:CE:57:A8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BC10B4CFBDA29BE6F9B0DA700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ae3b50-f2a5-3871-8a7f-77b833cadbb1.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 33287
IP address blocks: 71.230.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:4c:fb:da:29:be:6f:9b:0d:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=f0b484b5-6f7c-4c13-9c15-d93412c3ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:fa:63:a0:a4:73:ca:d0:bf:ad:b5:71:93:
bb:47:53:1e:ef:8a:71:7a:57:b0:84:a1:8c:1e:98:
06:cb:22:39:21:25:e1:51:6c:bd:a2:da:10:8e:95:
b3:bc:fb:55:48:25:a7:27:ae:87:d1:fc:dc:c8:fd:
d0:c9:8b:cd:2d:9d:c1:a6:05:86:95:83:d0:ac:bc:
a6:45:fe:42:83:7b:ee:de:71:df:cf:f4:d8:3e:e6:
eb:2a:06:ac:99:c4:72:7f:f7:64:8f:52:9b:c7:db:
e9:28:15:97:46:31:98:4e:40:ff:4c:a9:59:59:7a:
37:94:f1:22:83:9b:e5:e0:9c:5d:54:0c:e0:94:3e:
ed:be:fd:ad:8d:09:54:53:a4:0a:81:3e:de:c4:36:
19:c6:71:d1:4b:dc:ed:5b:71:66:54:13:06:49:59:
94:d5:c6:a7:0d:39:f8:13:f6:de:ce:e7:3a:b9:1a:
92:a8:e3:e7:8d:58:99:54:9c:4c:8c:6c:51:4f:ab:
de:34:90:ce:7d:e1:3a:33:7a:ea:56:6c:03:14:cf:
9c:66:de:65:5e:de:d5:4a:39:07:d0:57:e3:79:b0:
57:34:79:3e:5a:7a:d2:ff:c4:4e:b6:85:af:69:d2:
e3:cf:b9:ec:0c:1a:32:d2:98:92:c5:ce:75:76:0f:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:12:41:B6:1C:88:B1:47:7A:D7:D8:2D:87:41:4F:7E:CE:57:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ae3b50-f2a5-3871-8a7f-77b833cadbb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:e2:cf:02:5e:5c:1a:2c:04:5a:45:c7:db:58:a2:0c:6f:f3:
71:dc:38:bf:a0:de:0a:7d:10:37:9e:8e:ea:81:10:e6:a0:99:
fd:47:0c:58:f7:02:9e:b4:5b:c9:0c:36:87:f3:87:7a:1f:ef:
ea:4b:de:55:ca:38:7b:9b:1e:c5:2b:b4:42:44:52:25:cc:5d:
1c:1e:cc:eb:9b:2d:2d:8c:25:cf:49:ed:f3:08:2c:5b:5e:bf:
e7:cd:fc:3c:92:78:87:43:23:c2:c1:86:09:d4:69:a1:54:43:
34:e5:50:e5:14:2a:f1:e4:f1:9f:f9:27:0e:51:7d:d9:bf:b7:
c0:43:e1:de:01:9d:58:58:49:53:50:b3:a9:78:02:3a:b0:c7:
c5:08:43:c3:f1:41:cb:e8:2e:ee:fe:63:92:af:cd:91:c4:65:
f5:c8:3c:6f:c3:13:7a:d7:4c:fb:80:36:2b:6b:08:e4:60:2b:
68:6f:10:18:24:7e:1e:c6:bf:50:2d:20:3c:b8:5f:a0:44:08:
19:55:cf:5a:c0:8c:76:d1:8e:47:29:e6:57:44:eb:05:28:62:
45:92:65:77:ad:0d:f3:fa:5d:68:65:4b:2e:f9:fc:1b:3f:c9:
8f:8f:5d:c4:76:7b:99:6d:92:7c:0d:87:45:35:e5:64:99:37:
bb:ce:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:14 2025 by rpki-client