
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b7bc21f-ba56-3fc0-8327-1a078a6e521a.roa
File: 4b7bc21f-ba56-3fc0-8327-1a078a6e521a.roa (raw, json)
Hash identifier: AQKxCFwulxjiIHIWxwUBOl4wsKd2Bg855Usr4QkaLA4=
Subject key identifier: 07:65:39:BF:F0:ED:50:F0:DD:BF:81:BB:E0:6D:F6:D1:11:22:ED:E3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584BA667A589F343FB8219738820
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b7bc21f-ba56-3fc0-8327-1a078a6e521a.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 398465
IP address blocks: 50.114.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:a5:89:f3:43:fb:82:19:73:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=573e2445-2e96-49c5-8c89-eec9847fe563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:3f:bf:ef:99:d9:31:71:dc:dd:e5:83:d0:
a2:18:d1:3c:b6:74:1e:4a:24:75:68:92:c7:2b:1e:
48:31:f5:cb:6d:1e:45:28:fd:e1:3f:ca:e9:8d:37:
67:89:91:54:d1:db:9a:ab:95:7f:79:45:54:49:e2:
27:db:ee:87:34:73:42:38:6a:e8:7c:e1:00:d5:c7:
47:0b:c9:72:bd:ce:24:b3:15:70:46:8b:ef:2f:84:
1a:4d:57:05:a5:9d:f6:97:13:38:82:e7:11:59:f4:
76:d9:af:32:4e:1d:8c:ba:22:82:71:d9:3b:17:6f:
6b:22:de:d8:03:ad:97:d7:f5:f5:14:ff:75:4b:d8:
d1:cb:e8:c7:d6:a7:95:a7:ef:4f:50:7c:df:49:49:
2a:13:68:23:29:33:08:d6:84:7c:95:8a:16:92:97:
b4:45:05:5a:1d:42:67:f0:0b:2a:4c:02:fb:9d:67:
4e:f1:45:29:23:30:20:16:c4:91:81:76:bf:b2:f8:
82:cc:73:05:b2:7d:4d:d6:96:5b:03:44:03:64:ea:
d1:ac:8c:56:05:79:94:3c:1d:5d:ad:26:e2:fc:25:
32:65:5d:f1:fa:08:20:95:3f:2e:ee:60:c5:dc:54:
fb:95:8b:a1:07:dc:15:5c:ff:0e:28:b2:d7:53:25:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:39:BF:F0:ED:50:F0:DD:BF:81:BB:E0:6D:F6:D1:11:22:ED:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4b7bc21f-ba56-3fc0-8327-1a078a6e521a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ff:b7:be:43:16:b8:71:5c:e9:85:ab:c7:0c:4b:d6:92:5c:
0b:3b:46:6e:f0:93:ec:d9:c5:26:03:1b:02:ef:8b:e4:ce:4c:
96:a5:48:71:ba:6b:2a:f7:d1:eb:8d:3d:2b:50:4f:d8:ec:f4:
84:81:f2:80:51:08:3f:21:23:88:be:8a:84:33:62:12:a3:08:
1a:be:71:a3:cf:4e:df:e5:c1:7b:9a:77:ce:62:b8:21:18:f4:
da:c6:36:5a:85:33:48:b6:4e:7b:07:78:39:6f:a0:01:90:eb:
a5:44:86:25:14:f0:2b:7a:ff:30:0d:e6:a1:51:12:50:65:f5:
37:a7:e3:63:ac:19:6b:0e:ac:44:f3:42:22:38:ce:4f:b9:b9:
a8:9d:b5:f6:97:6f:4e:4e:ce:30:fc:97:f0:57:6d:1e:a8:da:
7a:ea:22:cd:b8:78:13:a7:61:9d:77:29:75:62:62:d8:47:ac:
9a:45:14:c7:45:f0:be:db:8a:20:6c:61:86:20:58:3c:bc:2c:
57:9d:c5:f0:eb:b6:26:9f:32:96:74:bc:cc:ee:27:c9:cb:cd:
8e:52:3b:18:a3:a5:ad:2b:ac:45:b3:48:b9:a8:31:5a:02:b3:
18:5c:37:f6:e4:9c:15:d4:48:4a:55:8a:2c:83:90:d7:28:6c:
1d:75:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:21:02 2025 by rpki-client