
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
File: 68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa (raw, json)
Hash identifier: C5VoyBXfjj/tkt/24DGdG+hHZCY3WJqd/4j0Wn6u3Ik=
Subject key identifier: 2E:73:C2:3B:45:00:1A:84:E0:8F:C9:F6:A2:88:8E:8B:61:58:4B:BF
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584BAF058370A221764FE56DB980
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
Signing time: Wed 24 Sep 2025 13:00:41 +0000
ROA not before: Wed 24 Sep 2025 13:00:41 +0000
ROA not after: Tue 23 Dec 2025 14:00:41 +0000
asID: 46606
IP address blocks: 67.222.32.0/19 maxlen: 24
69.89.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:af:05:83:70:a2:21:76:4f:e5:6d:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Sep 24 13:00:41 2025 GMT
Not After : Dec 23 14:00:41 2025 GMT
Subject: CN=2872a56b-f800-4bf2-8a40-8f3e1f9c3cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:7f:3b:d5:9a:ed:78:6e:62:b2:80:3d:bf:
d8:78:46:cb:8c:95:45:bf:31:97:b8:8c:4f:e4:42:
01:14:d8:78:02:21:87:e2:4d:ea:8b:09:f3:b7:4a:
0c:a0:78:82:49:67:cb:c9:08:c8:6b:c4:3e:33:7e:
eb:d6:1a:8a:15:35:87:17:aa:d7:e7:1f:6e:fd:7a:
16:55:e1:44:2a:c3:68:46:37:31:8a:e6:10:ed:47:
f3:8b:31:88:1d:93:f5:96:7a:34:bc:af:b7:1a:46:
f0:c3:ef:c0:66:9c:8f:0b:16:f1:cb:9e:48:99:be:
6f:c8:3c:0a:73:b2:4d:80:bb:45:88:32:1a:a1:14:
94:50:e7:fa:f9:2b:d9:d9:3c:cb:28:3c:f6:b4:a5:
c7:99:2f:35:bb:16:1a:13:4a:13:79:59:5b:46:84:
dc:c0:ad:2b:a6:8b:6f:24:a0:ad:c1:1a:91:29:8b:
5a:68:37:d0:45:20:9f:b6:b9:0d:8e:99:16:73:41:
42:b9:48:00:b3:34:e4:bb:19:41:1b:d6:41:2c:25:
3b:90:69:91:84:31:48:67:f3:0c:ac:8f:c6:b3:75:
71:86:5d:bd:26:1a:e5:e0:a4:73:63:d3:cd:fd:f7:
97:78:c3:dc:08:db:39:fb:fc:c6:26:e3:ca:37:10:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:C2:3B:45:00:1A:84:E0:8F:C9:F6:A2:88:8E:8B:61:58:4B:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
67.222.32.0/19
69.89.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:aa:cf:fc:8f:ca:2f:57:a7:83:13:fa:cb:0e:0d:0f:ef:1c:
54:5b:29:c9:81:d9:0a:c7:14:9e:2c:07:fe:96:fd:43:8d:33:
08:02:c9:c5:8a:90:5f:74:fd:bf:e6:0a:5a:af:9a:74:29:04:
87:29:fe:c3:de:b0:e1:45:22:aa:4c:35:50:28:b3:ed:21:48:
5e:53:bc:90:9a:30:77:0e:a9:7b:7c:9a:b3:88:6d:df:ee:ea:
97:8e:ac:37:bc:7e:7c:3b:53:18:c9:ea:96:c7:bb:38:d6:12:
46:de:c7:38:77:82:27:7c:a6:31:89:41:75:09:8b:fe:66:c9:
b4:21:c5:3f:9d:bb:ea:e9:0c:45:b8:12:52:a3:fd:68:80:a0:
41:d1:58:2a:e5:7e:8d:08:6c:28:0e:e3:bf:8f:35:40:a9:5e:
99:d0:f3:11:aa:51:5d:ca:13:06:be:f9:c8:67:ec:2e:6b:0f:
e8:b0:21:a4:85:6b:aa:9e:5d:2e:fb:9a:b0:ca:e2:be:ce:c7:
12:63:1d:e2:0a:67:00:c9:6a:1c:89:de:af:80:fe:ba:18:c1:
9e:e2:9b:ea:ab:84:10:d8:58:47:87:da:81:cd:31:fb:76:ee:
3c:75:b1:12:9d:58:22:47:76:81:16:67:65:22:85:4d:e5:0f:
90:4c:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:57:22 2025 by rpki-client