
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
File: 9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (raw, json)
Hash identifier: aPwJ5+qYt+jLy6HhhJIRCiPvYWoELg08f/WfTTCeKBg=
Subject key identifier: 0F:9E:48:82:24:BF:A9:A5:8A:61:7D:7B:AA:E6:53:C5:A8:40:4B:5A
Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial: 010D0C9F4328584B6BC74CDD8458D1971AE82740
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
Signing time: Sun 05 Oct 2025 13:00:40 +0000
ROA not before: Sun 05 Oct 2025 13:00:40 +0000
ROA not after: Sat 03 Jan 2026 14:00:40 +0000
asID: 16729
IP address blocks: 159.55.213.0/24 maxlen: 24
159.55.214.0/23 maxlen: 24
159.55.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6b:c7:4c:dd:84:58:d1:97:1a:e8:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Validity
Not Before: Oct 5 13:00:40 2025 GMT
Not After : Jan 3 14:00:40 2026 GMT
Subject: CN=0babb439-98d5-4f38-8fd1-79c70a5276b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:2d:5c:f9:9b:d9:89:16:d2:c8:55:ef:57:
32:59:1d:8a:fd:12:41:dc:a0:e2:8d:49:a3:2f:27:
5b:9a:21:ed:25:ec:c3:28:54:08:61:0b:45:8c:2f:
c5:b6:9b:55:e0:55:ce:16:b3:d5:bd:23:5e:54:99:
4d:3a:fa:22:9d:6c:44:f6:44:9e:a3:d5:2d:9b:01:
86:0b:03:e9:5d:5f:83:e5:75:57:43:33:ff:21:05:
9a:3a:ff:b8:c5:9f:28:9f:5b:27:1e:d7:07:02:32:
a2:11:1c:67:bd:2c:5e:c7:45:3b:43:a4:a6:bc:06:
e0:bf:a7:6f:cc:b9:46:ae:64:e3:60:35:fe:24:93:
7a:66:86:1b:48:98:ad:01:70:68:a7:90:0b:e6:34:
8f:9f:82:e4:be:2c:8b:91:e1:07:a3:e5:7e:ce:c6:
d8:a6:35:e7:22:36:2a:68:04:5a:68:4b:15:43:7f:
8a:bb:ea:30:45:cd:51:6c:33:3e:18:71:ed:44:4f:
ba:90:86:fb:c7:ab:e1:e0:b2:5c:b4:ec:b0:da:66:
74:0e:83:8b:7e:3b:eb:96:f8:85:34:a5:70:cf:b6:
3b:26:74:f1:a9:48:06:7f:81:b6:d1:a5:40:67:75:
69:77:bb:bc:5e:74:eb:3e:d4:6b:05:89:4b:17:21:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:48:82:24:BF:A9:A5:8A:61:7D:7B:AA:E6:53:C5:A8:40:4B:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
X509v3 Authority Key Identifier:
keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
sbgp-ipAddrBlock: critical
IPv4:
159.55.213.0-159.55.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:21:a0:54:96:4a:6a:ee:3a:fe:99:13:5a:64:93:4c:76:6f:
f4:80:34:cf:0f:85:5b:8a:b2:72:99:87:42:50:9f:9e:fa:db:
13:47:ca:a0:98:83:c6:38:47:bd:b5:38:aa:31:02:b0:7e:a1:
88:ae:42:8e:3b:d1:ff:a9:d7:6b:d8:1a:1b:eb:e7:73:e2:73:
f1:bb:cf:5b:36:8e:9f:e0:94:ef:3f:98:99:0b:4e:35:d2:d8:
df:a1:c3:3a:79:d6:62:86:a1:86:2f:f6:e3:14:c6:e0:05:50:
e5:fb:a9:e8:45:4e:05:f2:38:0d:e4:b9:1c:69:2c:d6:15:43:
8a:e0:f1:76:04:75:c0:79:9f:b5:78:67:cc:9d:fb:12:6b:58:
8f:bb:bb:bb:8a:72:d9:df:d0:8e:c7:97:63:05:ff:34:88:89:
79:c6:10:27:0b:39:f1:88:78:69:b5:da:df:87:db:a5:8b:bd:
1f:7b:be:45:52:c0:bc:a7:1c:6e:91:85:2f:7e:f1:03:51:1b:
8d:4c:c4:46:76:a5:5f:9f:d1:99:65:3c:93:65:50:7d:e3:60:
52:d2:a2:e5:7f:f9:30:c7:9e:3c:ac:d9:af:b9:41:41:cd:46:
0b:ee:35:80:fe:07:72:f0:05:76:07:a8:60:ae:60:c8:30:8a:
8b:de:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:54 2025 by rpki-client