
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa
File: 5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa (raw, json)
Hash identifier: yOulkTy1nslmVkp9Rdm/Gee7RgxYl7/jkXtC0azxkfQ=
Subject key identifier: 0E:1F:93:17:BD:6F:B6:11:C9:34:D4:04:74:7D:CC:40:0D:26:43:DC
Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial: 010D0C9F4328584B64CE417FF24378E0AE927BE0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 14813
IP address blocks: 72.22.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:ce:41:7f:f2:43:78:e0:ae:92:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=e4fa1b67-6e63-496d-bd8e-8de6cc1637db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:69:68:17:b7:9e:f0:18:a4:18:90:38:8d:
b8:4d:b7:f4:5b:36:15:94:35:69:87:0a:e1:23:3a:
fa:2b:cd:38:4b:77:19:d4:16:30:a8:a2:00:2d:35:
90:63:a4:fa:dd:07:d8:9a:9e:45:d8:53:59:ef:39:
f5:a0:a9:e0:64:8e:fb:3c:e2:ee:99:cf:c8:e5:f7:
3c:dc:f4:f9:83:01:ce:88:b6:22:c3:5e:15:b4:9f:
5f:01:e6:2f:e1:c2:c6:e1:cd:b4:bf:f3:14:59:bb:
93:10:87:26:f6:55:70:15:2e:45:a5:50:44:eb:67:
e9:9a:41:fc:8b:56:bf:bf:d0:46:a0:94:e8:f9:48:
28:64:1f:f7:9d:58:b7:8f:21:c4:98:6e:22:53:2b:
c9:99:a5:f9:1b:ab:7a:99:b0:f8:a7:7d:fc:44:92:
7c:ed:83:9a:5b:79:53:c2:5d:4e:d6:00:d6:0f:c2:
56:6f:78:05:9d:55:07:59:9b:da:e0:84:c1:f2:b5:
6d:e2:59:f6:34:a6:4d:28:97:a0:17:8c:18:95:29:
44:a0:bb:68:e8:d0:b1:e0:55:5e:a3:06:c9:ec:12:
f7:96:bd:dd:06:89:28:33:9c:41:58:f0:14:3a:a9:
75:63:b1:90:c5:f6:50:93:94:f4:c9:bc:7b:48:d1:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:93:17:BD:6F:B6:11:C9:34:D4:04:74:7D:CC:40:0D:26:43:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
X509v3 Authority Key Identifier:
keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:1f:ab:74:1e:49:35:16:67:a0:20:bb:1b:c9:b0:1a:63:3d:
b8:38:0f:f1:b4:af:72:64:1b:4c:b5:35:56:30:98:88:01:34:
00:62:5c:60:09:50:45:e5:69:59:80:0f:6e:bc:32:61:ff:44:
39:18:37:be:7a:84:a8:77:64:46:d7:d3:ef:5c:15:6f:e4:7a:
d4:96:fa:94:9e:6a:91:e8:68:32:ed:0a:4a:3f:f0:ac:a6:08:
6e:85:19:a0:1e:97:f7:8c:3b:48:80:ba:69:f9:a4:6a:44:30:
f5:b0:03:53:50:17:9a:e7:10:cf:d9:d6:66:8b:f4:12:ae:34:
7a:aa:4d:c1:4f:80:60:6c:5c:55:25:3c:46:50:78:6b:cb:c0:
3f:46:75:33:c0:a1:df:74:2b:8c:40:c9:0f:db:04:2a:2e:5f:
77:23:d4:49:1d:1e:6a:ed:b1:11:45:0f:65:99:0a:ba:1b:25:
9c:51:85:ee:ec:9a:6e:20:26:8e:dd:cb:5e:f2:c5:ed:68:69:
f6:44:81:22:8f:f8:fe:43:79:e9:3e:4d:96:08:bc:2b:00:c4:
e3:86:ef:5d:fb:4e:e2:7a:a2:91:ab:83:55:4c:4b:95:7c:d1:
03:7b:dd:be:d8:45:ec:9d:96:b1:53:a5:53:77:da:d0:b5:41:
d7:75:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:20 2025 by rpki-client