
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa
File: f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa (raw, json)
Hash identifier: tCR6eLsJxmhQeJU7/KjS8fNpDYU3ESzRxavASAJfmIU=
Subject key identifier: 2B:00:99:36:C5:3C:06:F0:69:34:7D:B6:52:A5:9C:54:CB:6A:7D:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B95A8E1E228D304EAB9645700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 33668
IP address blocks: 73.161.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a8:e1:e2:28:d3:04:ea:b9:64:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=2bfc68c2-a328-4d96-8f94-440780f091e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:c6:da:9c:70:4d:96:78:17:bc:cb:01:e6:
d6:a1:6f:6c:bb:0c:91:2e:05:bb:08:fc:77:aa:49:
5b:a0:aa:32:c7:46:11:6a:ad:d1:0d:82:73:0a:83:
b8:de:d0:dd:8a:dc:ed:92:b7:93:fc:ea:39:44:fd:
0f:55:15:3d:3e:25:5d:1f:25:82:08:97:8a:1b:36:
76:df:24:f8:ee:da:cf:b2:41:52:16:5e:63:a4:9e:
f0:4b:f2:7f:64:55:07:40:de:8e:20:d6:30:d3:9f:
cb:07:b5:0c:45:b7:b6:19:1e:d6:2c:03:af:38:5f:
76:b1:cc:d9:9c:42:8a:f5:1d:6a:9b:36:e0:ec:1a:
09:a6:79:cd:71:ba:60:81:68:b8:74:a5:bf:97:7d:
d9:4d:8d:cf:83:6d:e7:6d:ab:2f:28:d1:65:9d:57:
c9:41:3d:78:5d:a8:b0:41:78:01:49:f6:05:cf:67:
ee:b3:f0:14:0c:0e:63:af:50:6d:9d:36:77:5f:fa:
98:f3:cd:ae:93:64:f2:7a:79:e8:4a:17:4b:e3:c6:
10:46:ca:73:f9:2d:1a:e4:c4:cc:73:b3:b5:a7:ff:
c5:1a:fe:89:8a:85:38:54:01:e6:8a:75:61:85:a7:
41:70:b0:0e:0c:72:8a:3f:7b:36:51:31:8d:ba:72:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:99:36:C5:3C:06:F0:69:34:7D:B6:52:A5:9C:54:CB:6A:7D:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.161.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:16:57:b5:20:c7:4a:81:b8:89:15:74:90:04:c7:a0:7b:74:
75:87:5c:b5:5b:02:b1:f9:39:1f:3d:37:82:38:ba:6e:d9:54:
33:38:98:9d:fd:48:50:a1:2c:c6:c0:39:5a:50:88:98:86:b8:
95:f1:c1:2d:cc:bc:c3:44:0a:25:81:8e:1b:f9:18:a5:9f:ad:
e9:89:75:aa:10:ba:fa:4d:58:2d:38:13:e6:89:87:57:ae:00:
62:82:1d:40:91:81:25:7b:46:75:19:f1:14:52:1f:d9:ef:bd:
69:a5:73:bd:37:c3:4d:50:7b:eb:1a:ee:04:15:85:d0:85:be:
58:7f:c7:15:fa:47:0c:5e:43:31:54:ea:6a:92:b1:a9:76:48:
09:02:52:d5:85:58:f0:06:5e:e6:56:f3:b8:bb:1a:c5:86:46:
13:86:03:d1:2e:83:a4:52:c7:5f:05:1c:46:77:0f:8f:25:cd:
5f:61:0d:6f:8e:09:73:0b:ad:9d:39:1c:9a:77:f5:44:9d:82:
87:a3:4f:e8:af:b5:47:73:f4:4a:ec:92:53:7a:1b:5b:60:0f:
1e:43:9f:75:13:95:fb:75:34:4e:40:d6:6d:12:97:53:14:51:
9d:b8:db:99:42:86:b5:fa:d1:ba:20:96:20:56:b8:ba:02:50:
96:98:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:44:19 2025 by rpki-client