
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa
File: 9378aadf-33bd-3a99-820a-36e781e6798a.roa (raw, json)
Hash identifier: iYVKTrqlBPVQttpUWokejETT4NRhg2tIengPGnE2zYg=
Subject key identifier: F0:DB:AB:BD:BC:B8:91:D5:37:D5:60:38:C9:AE:49:E9:3A:28:89:C1
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584BB88D55B0022F28EFAB34C480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 22691
IP address blocks: 165.254.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:55:b0:02:2f:28:ef:ab:34:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=b98ab4e3-be3f-42df-a1f3-52898d278219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:e4:00:ba:75:70:76:35:51:ab:a9:9d:1d:
bd:50:69:6b:46:a7:f6:10:03:df:68:26:d2:f0:cd:
00:e7:ba:5a:e3:30:89:a9:b7:df:5d:bb:11:86:9c:
50:fb:89:84:7d:81:c0:7e:70:6b:8c:a4:9b:2a:20:
95:aa:32:b3:b2:30:14:d7:89:40:e0:c5:76:34:dd:
14:a8:67:fc:4b:02:57:db:6c:8e:2f:a4:91:82:36:
3c:50:d6:20:f9:60:6e:aa:49:f7:ab:a2:ab:3b:5c:
6d:62:8a:fe:db:e4:b1:1b:3c:1a:bd:8a:2a:97:5e:
58:48:cd:aa:86:11:56:1a:97:48:83:cb:64:5b:bd:
a7:aa:8f:f8:68:94:0b:bd:21:68:70:28:02:78:3b:
4b:b8:56:80:20:a7:3c:34:0d:e8:fd:72:f5:af:0b:
9e:5a:4d:c4:4f:7a:73:9b:2b:bd:f5:cd:02:e0:80:
e2:ef:25:5d:74:8a:43:d5:69:62:0a:be:76:83:7b:
89:e4:b2:b2:03:50:c8:6f:7b:1e:03:60:dc:81:f4:
b4:dd:46:59:d1:46:99:03:dd:11:d5:29:5d:af:3d:
19:29:a7:6c:9e:00:23:4b:e4:b8:b3:f4:31:56:c8:
db:f7:cd:be:89:f2:15:34:ea:a1:d1:ee:fa:ea:51:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:AB:BD:BC:B8:91:D5:37:D5:60:38:C9:AE:49:E9:3A:28:89:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9378aadf-33bd-3a99-820a-36e781e6798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9c:42:9c:dd:ee:f1:6a:83:a5:c3:3b:c3:c7:10:55:39:e4:
e9:3a:ba:a2:bc:36:1d:ba:7f:22:2f:36:db:d2:9b:f7:4f:04:
28:58:78:52:ac:cf:f5:dd:f2:43:d0:37:53:67:57:25:83:91:
a6:4e:37:76:8f:f0:5d:ca:ac:48:4f:bb:11:22:a1:ad:d0:4b:
26:f1:6d:4c:9f:cd:a5:f4:3c:c7:e5:1d:5d:f5:99:0c:9c:0b:
97:7f:15:2f:9d:a8:58:7c:3d:a2:23:05:65:0b:f4:66:51:de:
7a:e4:f2:5d:d4:af:f5:16:5f:1b:75:ae:50:b6:f7:d6:e4:e9:
64:59:6d:53:3a:58:a1:1e:a8:88:84:01:69:90:92:88:e1:44:
60:00:06:69:c8:0c:84:cd:bb:da:0b:91:21:5d:e0:3e:07:5d:
46:b4:9a:b5:8b:a6:3b:b6:e9:2a:a8:d4:06:a1:88:77:70:4c:
67:8f:1d:1d:1e:85:3f:e2:5a:5f:1c:55:ee:e2:ca:b3:74:8a:
e6:e8:1f:9a:47:f5:b7:7d:55:89:29:88:10:b5:73:3a:ef:6c:
dd:91:65:2a:9d:d7:59:41:c4:35:a1:0b:94:55:23:a3:27:56:
74:19:de:14:2f:41:88:f0:91:b8:41:7d:d2:ab:06:4e:01:f5:
e0:b6:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:00:49 2025 by rpki-client