
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
File: 5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa (raw, json)
Hash identifier: mBHrBKGV39Xf5JJEGl+wJryJH3iDoulrhfnSnK4AW7A=
Subject key identifier: F6:DB:B7:11:ED:0E:F1:11:FC:F3:05:F9:2E:82:2A:FD:6B:51:05:3E
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F4328584B1806E15F8A28248CB92ED300
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
Signing time: Fri 05 Sep 2025 13:00:41 +0000
ROA not before: Fri 05 Sep 2025 13:00:41 +0000
ROA not after: Thu 04 Dec 2025 14:00:41 +0000
asID: 32133
IP address blocks: 169.197.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:18:06:e1:5f:8a:28:24:8c:b9:2e:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Sep 5 13:00:41 2025 GMT
Not After : Dec 4 14:00:41 2025 GMT
Subject: CN=5a435234-fa08-410c-a5b1-be00cd3770c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:73:73:c2:e6:fb:1d:a5:94:ba:5d:dc:0b:
49:9b:40:01:35:c0:ab:d9:40:49:85:eb:b1:bc:97:
be:65:76:cc:f4:25:c6:96:79:84:0c:36:13:2a:73:
72:86:9e:18:c7:74:d5:51:0a:3b:ef:63:8a:a7:e0:
fd:48:be:c3:ba:41:f4:e9:a1:6e:0e:3d:cb:cc:0a:
f4:1b:23:5f:25:a5:a9:99:a0:ce:64:9d:a4:80:7f:
f4:dc:a6:94:13:7c:f6:f2:51:ae:fc:ae:1f:e1:fb:
40:0e:05:a2:ff:50:5e:3c:75:c2:9b:f9:f6:35:4a:
d6:37:03:09:79:38:97:ae:7f:a7:23:78:9b:e8:b1:
1d:b7:e5:65:79:f6:90:cb:9d:6f:73:91:97:b8:88:
a1:9d:39:91:bd:fd:ba:12:43:f5:2c:7b:fd:9e:f3:
ec:64:96:84:30:8a:5e:7b:4d:c7:c4:9c:e0:b0:af:
70:a2:81:04:c3:bc:0f:92:f2:30:56:29:5e:3d:07:
98:9e:22:b9:07:84:95:57:02:4f:02:fd:06:c3:38:
2c:26:40:9c:a0:ff:47:b2:77:e8:59:c1:9d:d3:c7:
f9:52:51:ce:63:c6:bd:28:ca:64:e7:48:74:56:da:
5c:fb:b3:88:15:72:58:ba:7a:13:f0:3a:28:7a:01:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:B7:11:ED:0E:F1:11:FC:F3:05:F9:2E:82:2A:FD:6B:51:05:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:28:92:2b:fe:6f:e3:63:35:25:e0:da:71:2e:b4:4f:e6:87:
2d:a9:19:af:95:9d:74:ae:02:58:b3:f6:0f:f6:77:70:9d:56:
33:75:20:9d:53:1c:e3:84:8b:66:0b:56:f7:7e:7e:70:8a:b1:
10:1f:52:9f:30:e2:7d:02:6b:a5:a2:17:25:6b:a3:41:f4:a4:
26:d7:e2:60:6d:ba:02:8e:83:0f:6d:df:aa:49:5f:37:30:b0:
a1:75:00:ec:8e:80:45:42:f7:2b:09:03:e5:f9:25:4c:f3:a4:
4e:00:22:a3:dd:f2:d7:c5:15:08:9c:10:e7:7a:32:3e:1b:be:
d4:1b:b1:c6:54:ce:c6:a8:be:b4:84:81:3d:56:f3:5f:c7:7d:
b8:cf:6f:2f:be:d1:61:01:bf:42:d0:e8:43:10:c0:89:df:99:
80:b9:02:ad:d5:d4:2a:ca:17:1c:ce:c3:a0:e5:33:bf:3a:17:
e6:6a:c1:72:b2:af:21:88:d7:7e:3c:79:69:8f:36:d8:84:8f:
89:3f:eb:ae:04:7b:c2:ed:2a:93:ab:14:3c:d4:b8:36:12:40:
1a:5b:bd:bd:cb:16:fe:05:be:7e:49:71:fa:9b:9f:38:66:71:
ef:23:8a:22:05:79:01:bb:f3:88:cd:0c:3c:c2:4b:33:08:0b:
29:11:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:33:26 2025 by rpki-client