
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
File: 27ad11b4-e211-3ca4-a206-bd00c733729c.roa (raw, json)
Hash identifier: ZkTwn5Dp4tkbzRxfuz2z8PzWPK+TF+FIMRBJg+nI+J0=
Subject key identifier: F8:9A:61:87:A2:5D:72:5B:C9:82:26:3D:32:CB:C5:4D:5B:6F:8F:A5
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584BB45D0CE5BA60BB644AE537C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 213802
IP address blocks: 128.241.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:0c:e5:ba:60:bb:64:4a:e5:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=89986c03-e581-46de-ba62-be01aad7a8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:24:cc:99:03:cd:2a:ae:ba:77:65:9e:0e:
b1:d4:5f:ce:83:38:71:bb:dc:3a:b4:2b:3a:f3:f6:
16:95:9a:86:83:78:4e:5c:2c:15:88:c7:fd:58:52:
53:d1:92:8b:19:c2:fd:22:2a:c0:66:49:b2:d2:1f:
e0:6c:c6:f1:70:14:d0:11:44:9d:ae:63:58:f1:01:
e5:3a:82:38:76:dc:2e:85:46:b4:41:90:20:66:25:
09:f8:12:d4:99:f3:1c:69:37:26:de:04:86:5e:65:
da:12:e0:6e:70:57:43:f7:36:6e:12:33:93:2c:b9:
5e:be:4c:6a:e4:9e:2c:1c:65:43:80:d1:e5:90:3b:
ce:eb:0b:b7:41:0b:3d:06:6a:13:18:3a:71:67:6e:
ed:2a:d5:5c:8a:09:41:c5:31:cf:be:6b:15:54:9a:
19:9f:27:de:ad:12:af:7b:a1:09:27:02:eb:91:ab:
45:0b:db:5b:ca:c8:40:4c:b6:9f:f3:49:c5:02:01:
ae:d4:10:65:94:08:4f:58:18:f9:d2:88:73:be:52:
cb:ff:0a:a0:11:80:ba:c7:2b:98:79:27:a7:fd:18:
61:3e:e6:68:af:7e:21:7a:68:4f:dc:87:99:ef:fb:
23:3b:e8:be:f7:a0:e6:51:e2:43:cb:d9:db:df:1a:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:61:87:A2:5D:72:5B:C9:82:26:3D:32:CB:C5:4D:5B:6F:8F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.241.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:ec:f6:34:fd:11:1d:f9:b1:88:e5:ae:e5:bf:67:50:31:cf:
8c:62:6d:b3:49:f0:ff:72:c8:ca:a7:ee:82:68:4a:15:c6:c9:
3d:af:ac:28:ca:4e:1d:d2:01:f7:b7:af:72:15:82:c5:95:3f:
43:51:fe:e0:f1:61:43:6b:fb:cd:34:b6:68:c2:09:85:7d:4f:
23:2a:58:68:0f:3a:f9:d1:37:f6:b9:52:98:43:0e:3f:c6:ce:
17:ce:3f:e2:39:cb:b0:8d:61:ec:e8:2f:d3:ee:be:f5:da:63:
3b:9b:56:aa:d4:7a:61:52:94:c1:f3:dc:09:30:73:85:75:3e:
93:15:72:ee:02:15:28:ad:73:01:12:66:5f:b3:9c:9c:82:2c:
af:fe:dd:4d:da:6a:70:25:ef:84:cd:69:54:f4:48:a6:9b:5e:
76:86:d6:1f:53:1b:4f:09:14:15:26:85:fc:1a:ea:64:10:3a:
7d:32:33:c3:94:02:10:6a:67:31:42:7a:3c:98:50:ae:42:a3:
4e:c0:df:46:88:eb:90:85:4e:2f:15:b3:10:31:16:3d:b8:46:
3a:1e:ea:d6:e2:a3:7c:b5:e3:cf:ae:24:ea:fe:3d:d5:da:a9:
0a:7d:2b:b5:88:83:e5:cd:50:12:34:ad:fe:a2:1f:4a:47:1b:
9b:32:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:49:18 2025 by rpki-client