
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3f88587-9633-3d1a-adb4-9cd9bae10b13.roa
File: f3f88587-9633-3d1a-adb4-9cd9bae10b13.roa (raw, json)
Hash identifier: fD98pCRXKz2NWwBlaIedvhVPZApIW2m2OtX5dgON3o0=
Subject key identifier: FB:5E:4F:4E:50:2D:A2:DD:4F:8B:A2:34:62:EB:D5:AE:4F:CA:FF:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B3DB7767D5B73F77D6DB7AB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3f88587-9633-3d1a-adb4-9cd9bae10b13.roa
Signing time: Fri 19 Sep 2025 01:00:33 +0000
ROA not before: Fri 19 Sep 2025 01:00:33 +0000
ROA not after: Thu 18 Dec 2025 02:00:33 +0000
asID: 20214
IP address blocks: 69.252.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3d:b7:76:7d:5b:73:f7:7d:6d:b7:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 19 01:00:33 2025 GMT
Not After : Dec 18 02:00:33 2025 GMT
Subject: CN=5319f67b-40ef-4077-a1d1-2ce9b6a5f50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:07:64:8a:f1:dd:37:ca:f4:da:b0:cb:b4:
65:c7:00:9e:87:e3:74:b6:e4:8e:b8:5c:e2:6b:df:
18:ec:7a:12:84:e3:ea:84:56:04:7f:15:69:20:75:
6f:eb:5e:36:b2:e0:eb:01:f1:e1:27:48:ee:ff:b1:
bb:96:71:f3:85:06:9a:89:51:24:8d:03:1c:17:d5:
f7:3f:f7:64:d6:ed:9d:61:e0:f9:91:58:39:52:49:
80:c2:8c:12:f3:f1:a4:74:9d:2b:23:85:0f:8f:00:
2d:f0:31:b6:ff:67:1e:06:38:b0:6e:16:3a:c9:78:
3e:e5:0a:50:14:f9:c8:c3:8d:9c:77:4a:ab:70:da:
94:c3:e8:33:13:93:f6:02:6b:06:71:e9:68:a5:cb:
a7:cb:7f:54:90:ad:4a:4d:da:fd:73:89:f2:7e:a9:
08:4a:0a:fc:b8:e8:1d:56:58:1e:8f:60:ba:23:f6:
be:78:fc:ce:b6:3e:63:a9:e2:f3:49:a2:86:a9:29:
1e:4c:77:8d:08:f3:54:16:d3:2d:bc:1c:e4:41:38:
82:9c:28:c2:61:1e:ce:4b:0b:59:e0:ea:e0:cd:8a:
c8:7a:3f:f3:9f:be:38:2f:5f:c3:97:94:40:58:3d:
c8:6f:6d:db:54:09:30:1a:71:00:ce:70:dc:12:b7:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5E:4F:4E:50:2D:A2:DD:4F:8B:A2:34:62:EB:D5:AE:4F:CA:FF:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3f88587-9633-3d1a-adb4-9cd9bae10b13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.252.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:51:0f:a5:53:0a:b3:b0:38:fa:e9:55:34:89:cd:84:ef:bd:
79:08:ad:a5:9b:99:0f:e1:89:ad:20:0e:92:bf:35:84:40:68:
9f:6c:8b:9f:c9:77:f9:65:52:a5:c0:7b:c1:26:47:4a:e6:ac:
03:e6:68:cf:57:bf:c3:36:c4:2e:cd:e6:50:85:22:ab:cd:9f:
6b:c0:03:75:a2:35:fc:b3:2e:1b:ca:f1:a8:b6:47:27:ff:db:
b7:ad:99:b2:88:7e:cb:ea:45:8a:42:85:26:b0:d7:bf:12:a0:
61:0d:d0:91:c1:f6:01:0b:22:db:34:56:ed:e7:64:76:36:0c:
26:73:fc:7b:15:39:bd:f6:ea:1e:58:7a:28:7f:7b:06:31:b6:
a7:7b:6c:50:48:9f:42:62:6a:d6:8c:51:b8:bd:c3:92:ec:22:
ed:e7:0c:b7:31:3d:43:ef:6d:b0:b1:03:fb:60:e3:2d:2b:8e:
87:4e:1a:2b:11:ba:9d:1a:d5:a0:b2:7a:da:b7:51:ea:d8:d7:
0e:8a:0b:51:c3:41:1b:25:01:c4:c0:59:ce:a9:db:d7:32:ea:
78:b7:4c:0e:bc:4e:cf:82:68:59:91:d0:59:ec:85:14:e7:f9:
67:dc:3f:03:10:d4:7c:f5:fe:64:04:ac:50:f2:de:0d:52:89:
e2:e5:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:14:42 2025 by rpki-client