
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
File: b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa (raw, json)
Hash identifier: x88uKZCjzf7B2IuKEBfbnMDNPxva5w4MUgj8snQ3qmM=
Subject key identifier: D5:11:DA:92:9E:13:83:F0:5A:F4:43:76:99:D9:89:CF:CA:D6:0D:90
Certificate issuer: /CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb
Certificate serial: 010D0C9F4328584BB2F7BD00AE34A9955B2FBB80
Authority key identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 397529
IP address blocks: 23.132.144.0/24 maxlen: 24
2620:6f:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:bd:00:ae:34:a9:95:5b:2f:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=3a750886-6ec5-4ac1-af66-353207c14169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:cc:19:05:68:f8:03:9c:06:1d:30:63:8e:
e7:e6:16:5d:7c:06:29:c6:bc:49:89:97:61:2c:32:
ac:1b:d0:62:cc:b4:74:12:8e:ba:8f:78:f9:d4:74:
0b:bc:42:23:8f:e2:b3:94:8c:87:38:ac:35:9b:e1:
24:4c:78:93:c8:1d:bd:e1:cd:6f:85:bc:5a:8e:49:
90:27:1e:69:44:68:fa:e4:f0:eb:40:16:bc:60:1a:
a4:b2:92:98:81:0b:87:a6:dd:4b:c4:6f:15:31:3e:
e0:c9:0c:63:31:70:72:80:13:f9:6d:50:34:40:42:
53:69:a9:18:2f:3a:dd:72:6d:f6:8c:2e:39:c7:f9:
25:43:c9:24:43:2c:7e:4d:8a:8d:7f:24:b4:78:81:
2e:e2:15:36:34:3f:1b:dd:60:29:52:4e:d0:e5:c4:
72:b4:9d:96:09:e4:26:af:28:50:50:6b:1d:6f:ed:
81:84:c7:90:87:7e:ce:08:cd:32:f3:3f:dd:9f:cb:
f6:f1:de:d4:d2:d6:dc:69:3e:af:92:ad:eb:d4:60:
38:80:5f:1d:9c:92:63:97:4c:cf:c2:9f:f4:78:e6:
9e:de:ba:1e:37:55:73:aa:34:55:aa:c6:07:80:19:
c0:52:83:d8:f3:c5:b4:75:a4:42:23:38:f7:01:1e:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:DA:92:9E:13:83:F0:5A:F4:43:76:99:D9:89:CF:CA:D6:0D:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.crl
X509v3 Authority Key Identifier:
keyid:21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.144.0/24
IPv6:
2620:6f:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:6c:94:d2:d3:e0:c8:93:09:5d:d7:25:d7:76:b5:d9:42:aa:
e1:80:fe:4d:12:96:69:3d:90:c7:87:b1:e3:a5:c9:96:1c:1f:
be:8d:42:3f:17:d8:af:7c:6a:07:31:56:c3:2f:a4:41:16:e7:
85:dc:1d:0a:cb:ae:c8:6b:09:04:bf:80:46:82:5b:b8:43:3b:
17:0e:a4:ed:72:55:6c:d9:8e:02:75:32:11:55:4e:48:18:58:
92:35:7d:65:40:f3:22:bd:cd:83:98:03:3f:8e:b2:92:c1:83:
86:bf:8b:9d:6a:6e:ff:fa:ad:56:9f:4c:61:b5:42:40:23:f3:
c6:88:04:91:c4:b5:39:fc:ac:94:61:0d:a7:2c:1f:9c:21:6b:
b9:a1:1a:01:46:e9:99:fe:c6:1f:12:d3:27:42:15:d3:96:71:
76:c3:b3:c8:d3:be:92:2f:6f:e2:4e:46:9f:bd:0f:c5:91:8d:
0e:62:50:92:05:76:0e:a7:ad:c1:e0:3e:be:90:5c:d2:f3:44:
6c:68:9f:3b:75:b9:cc:62:4c:ad:7c:7b:73:bc:29:0f:f8:b4:
52:f9:06:ad:f1:b9:4c:3c:c6:60:12:4e:2f:82:88:d4:ea:db:
e8:00:29:e3:55:25:4f:cd:97:bb:5a:4f:fd:f5:4d:b2:0d:31:
12:cf:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:27 2025 by rpki-client