
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa
File: cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa (raw, json)
Hash identifier: TcM1sgknrjHkXQowFjkF3NDyerAY3R/xTvO9Kvx+S50=
Subject key identifier: 77:28:E5:2E:CC:A0:25:72:7D:DB:7F:DC:C7:19:AF:0F:BE:09:CE:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B8BE236D19C0831E2308107A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa
Signing time: Fri 17 Oct 2025 01:00:30 +0000
ROA not before: Fri 17 Oct 2025 01:00:30 +0000
ROA not after: Thu 15 Jan 2026 02:00:30 +0000
asID: 36040
IP address blocks: 50.202.195.0/24 maxlen: 24
50.202.195.0/26 maxlen: 26
50.202.195.64/26 maxlen: 26
50.202.195.128/26 maxlen: 26
50.202.195.192/26 maxlen: 26
2001:559:0:b6::/64 maxlen: 64
2001:559:0:b7::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8b:e2:36:d1:9c:08:31:e2:30:81:07:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 17 01:00:30 2025 GMT
Not After : Jan 15 02:00:30 2026 GMT
Subject: CN=4ab57184-c7fe-49fd-96a0-86cf1f83862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:76:08:de:a0:dc:9c:cf:89:60:1b:cc:ef:
11:31:84:be:78:30:09:ec:6e:5f:80:86:80:3f:a1:
be:85:6d:15:9c:af:46:dc:5a:f5:1b:89:fe:00:6e:
3c:14:f8:dc:6d:d5:d2:96:32:51:6e:4e:6e:83:de:
58:d8:aa:53:7d:e7:60:fd:54:62:0c:01:8e:98:22:
1d:29:e9:11:37:67:50:eb:71:8b:fe:fe:f8:d6:6f:
eb:a8:cb:76:93:a3:1f:19:c3:fa:bf:66:4a:db:0f:
d2:5c:9f:3d:60:64:e4:52:ce:b6:4b:68:33:39:47:
f8:0b:4b:a7:16:50:e0:ac:5e:cb:4e:b4:f7:d6:4e:
49:e1:60:c2:28:30:75:d0:bb:c8:77:05:80:ae:01:
cc:de:00:be:b4:a5:8d:a3:09:a5:a0:43:43:18:12:
aa:5d:09:c5:78:f1:ec:9c:a5:21:14:d9:25:52:9b:
db:d3:26:63:5b:f7:f1:6b:0f:c7:07:bc:35:db:4a:
9d:96:ba:6d:69:e1:67:d1:aa:fa:89:d9:04:1c:53:
43:9e:16:9b:d6:a4:76:07:62:67:d5:8c:ed:e4:54:
23:7e:a6:ba:6d:1f:95:f7:39:d0:d9:aa:f8:84:ad:
5a:1d:be:fd:bf:fa:e5:b7:c2:e2:ad:dc:64:d0:43:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:28:E5:2E:CC:A0:25:72:7D:DB:7F:DC:C7:19:AF:0F:BE:09:CE:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.202.195.0/24
IPv6:
2001:559:0:b6::/63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:1d:68:89:7b:d4:ed:35:8c:fd:ff:6f:05:44:c8:60:16:87:
2b:51:97:1c:f7:64:07:54:9a:96:aa:8d:23:b2:64:0b:ef:9e:
ed:f8:bb:0d:db:e8:d1:f9:21:48:0d:b5:ea:5f:5a:49:6f:41:
c3:9e:6d:d8:0a:28:d6:b6:07:c1:85:30:47:bb:7a:d8:b7:1f:
8b:a2:66:ca:7f:17:bf:6e:aa:53:c8:31:64:ec:9a:c0:ab:ad:
52:16:4a:7b:a8:7e:7b:cb:45:51:01:dd:04:0a:1e:7a:37:cf:
32:a0:82:cb:bd:b7:85:ca:cb:f4:91:7b:5c:16:6e:02:42:ce:
8f:ce:3d:2f:90:87:7a:6d:29:db:0d:3e:c4:97:35:95:2d:62:
61:c8:eb:d6:dc:bd:1f:4e:b3:90:94:34:3c:37:f8:73:b8:02:
21:18:63:a7:e4:76:6a:a1:dd:5c:a2:79:3e:dd:bd:e5:2a:11:
ce:4c:c3:c9:96:c3:77:e1:68:7f:fa:38:99:2c:cf:4c:7e:42:
49:60:bd:18:a7:fa:d1:48:a1:bd:b6:22:93:22:15:33:d5:7c:
4b:0b:79:e8:eb:20:aa:6c:f0:76:f3:09:a1:c4:eb:93:55:af:
27:44:fe:e2:a3:d3:b0:f9:dc:50:78:32:8a:1b:f0:4f:de:1f:
62:35:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:55:38 2025 by rpki-client