
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
File: ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa (raw, json)
Hash identifier: dJQoaQa07DZcU3aZkWnePu+NYB3ti0xQmpUQDE/D1LQ=
Subject key identifier: E1:41:D4:EB:F3:61:A6:0F:F9:34:10:6B:4D:61:61:4A:D1:91:84:B6
Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac
Certificate serial: 010D0C9F4328584B3556EB4E813D77DBF170F5C0
Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
Signing time: Tue 16 Sep 2025 01:00:33 +0000
ROA not before: Tue 16 Sep 2025 01:00:33 +0000
ROA not after: Mon 15 Dec 2025 02:00:33 +0000
asID: 14525
IP address blocks: 64.22.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:35:56:eb:4e:81:3d:77:db:f1:70:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac
Validity
Not Before: Sep 16 01:00:33 2025 GMT
Not After : Dec 15 02:00:33 2025 GMT
Subject: CN=fcc26f6e-1611-4286-9518-86d0ffe0fbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:03:b3:66:0e:23:a7:69:1e:21:06:37:42:
c9:ee:50:c1:51:04:15:6e:87:3c:31:ee:33:a5:09:
0a:40:77:31:74:c3:5f:6c:f5:a0:93:00:5a:55:40:
a5:44:85:ac:db:ca:a0:61:7f:c7:65:68:bb:73:a4:
42:5b:77:ba:79:99:a6:83:ca:76:52:20:35:d1:fa:
1b:46:6f:79:25:af:31:a9:a3:49:2d:f4:94:9f:e5:
15:fc:ab:1c:da:9e:26:1a:46:de:58:1e:b8:c8:50:
1a:f0:f9:d3:66:e8:0c:6f:bd:e6:e0:9b:2a:7c:93:
ef:c5:f3:ab:47:96:f0:d6:04:62:ac:11:fe:13:de:
fa:0f:b8:22:8e:49:90:66:ca:31:bf:45:f2:08:3c:
0c:ab:0f:33:74:db:19:be:58:ec:b2:b7:7d:4a:5c:
50:4a:b2:6b:c4:e7:a5:c5:83:3b:f9:2a:16:f8:60:
02:65:98:a4:05:6f:10:e4:1c:4b:7a:ef:72:de:03:
84:4b:91:ed:dd:e8:6b:65:5f:bb:63:7c:04:08:60:
32:09:a6:77:cc:7d:c2:1b:e0:a1:2b:be:7d:95:a6:
63:6f:84:29:66:4b:92:2a:99:7b:9e:e0:84:1b:b1:
cc:9e:39:87:f7:61:88:a3:44:eb:4d:81:15:c8:c4:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:41:D4:EB:F3:61:A6:0F:F9:34:10:6B:4D:61:61:4A:D1:91:84:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
X509v3 Authority Key Identifier:
keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.22.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:78:56:9d:5f:b8:01:04:3d:1d:a8:49:25:dd:26:32:60:40:
d0:3d:48:a4:d3:8d:54:9e:56:bb:a4:3b:97:6e:3b:3d:47:f9:
41:44:f0:1b:9d:0f:e6:09:95:ed:5f:e9:e8:c1:11:3f:a6:bd:
f6:f1:ff:a6:d5:cf:ef:e2:4c:42:f8:57:39:f2:be:f2:6a:fe:
32:31:f9:d2:c2:53:44:b8:a2:0d:f4:3a:7e:ee:07:ae:ed:c1:
ea:17:76:05:58:26:3b:45:ee:83:c3:2c:ab:11:85:1c:ef:1b:
be:78:17:4f:e8:9a:f6:bc:29:8c:a8:94:14:ca:85:7e:c3:5d:
ca:d5:e7:73:39:3e:c8:c0:70:b3:0f:6e:45:c6:49:00:ef:17:
6c:4a:17:7c:be:14:09:34:66:e8:38:ec:cd:8a:ae:39:b1:9c:
06:a3:97:f9:da:6c:1c:00:02:4d:7a:a5:e0:77:04:9f:d8:81:
38:1c:c9:e7:6f:8d:0d:5a:7b:09:d9:f2:f0:98:e9:8d:20:4b:
41:68:60:f7:8a:a5:0c:b0:c1:91:8d:67:b7:59:7d:ef:2b:38:
a8:1e:b9:6a:2d:2c:5e:6c:61:b1:5b:16:e5:3b:a3:0d:f0:6f:
6f:1b:02:3c:77:37:88:fe:ed:ef:65:3a:f9:e1:97:94:e8:6c:
bc:a2:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:23 2025 by rpki-client