
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
File: 79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa (raw, json)
Hash identifier: MUeCK8HHMbRPkyHf1NS41vO73vXEweV8L1B6w1sSuvE=
Subject key identifier: 5C:85:CD:8D:13:F8:FC:82:BD:36:3E:A5:92:5D:A0:4A:BB:2A:E6:DA
Certificate issuer: /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Certificate serial: 010D0C9F4328584B3DB7002BFCCD7E875DEA8900
Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
Signing time: Fri 19 Sep 2025 01:00:33 +0000
ROA not before: Fri 19 Sep 2025 01:00:33 +0000
ROA not after: Thu 18 Dec 2025 02:00:33 +0000
asID: 14749
IP address blocks: 199.242.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3d:b7:00:2b:fc:cd:7e:87:5d:ea:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Validity
Not Before: Sep 19 01:00:33 2025 GMT
Not After : Dec 18 02:00:33 2025 GMT
Subject: CN=8670433f-5b0d-475a-92e6-11b262659b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:be:51:1f:6b:0a:d5:af:1a:c6:f4:7f:8f:
e8:a8:1d:44:71:9e:b2:b0:09:40:2c:0c:d3:7f:b1:
86:34:a0:46:ae:6c:45:64:d6:a2:3a:ef:2e:7b:57:
fa:61:51:96:92:15:24:7d:b1:5a:35:2d:62:5b:54:
a8:15:9b:dc:ba:29:18:92:e1:11:58:7d:61:26:18:
ac:44:94:c7:53:09:4b:df:fa:a7:de:40:ce:4e:d4:
00:ca:6e:bd:39:7b:27:e8:f6:d3:e3:a1:71:12:e7:
07:22:ef:64:4f:d9:de:12:88:53:72:d9:2c:73:3e:
9d:26:e6:1b:2c:3c:a4:33:d1:25:1b:d3:76:62:be:
28:d0:6d:b5:3f:4b:39:c2:7e:5d:cb:52:68:2c:1a:
e4:31:df:46:62:9c:82:2f:02:f0:cc:09:01:e7:3c:
bc:28:f5:5c:40:2a:ca:57:58:c3:5b:9d:e1:d2:4f:
fc:ba:12:4f:0e:07:e0:66:b5:d5:81:dc:84:c3:09:
71:0d:d9:db:13:ae:a2:f8:b3:f0:11:b9:ed:28:c2:
91:3b:12:ca:5f:98:fb:ce:bb:9f:ff:01:22:ea:e4:
43:0f:22:83:66:ca:75:69:bd:d3:55:47:23:8f:78:
8e:2e:75:6d:36:ca:2f:9c:9b:ac:0b:53:db:c8:5d:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:CD:8D:13:F8:FC:82:BD:36:3E:A5:92:5D:A0:4A:BB:2A:E6:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
X509v3 Authority Key Identifier:
keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.242.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:6f:52:6f:a1:2d:47:0e:ca:42:df:16:7b:c8:67:fd:86:45:
19:06:67:a2:87:a9:30:43:54:4f:9f:6d:c4:b1:0b:d8:53:d1:
13:b8:c9:87:56:0a:e0:9c:14:7d:92:f7:48:10:9c:56:78:de:
93:6c:a9:34:5a:eb:3c:f8:0a:e8:dc:32:f5:bb:08:57:91:2a:
4c:b0:f2:20:06:36:68:7c:97:93:03:21:21:e0:05:2d:f3:ca:
b4:ba:d0:13:c0:f0:37:55:54:50:3d:27:72:84:cc:fd:17:02:
a4:5b:6b:8f:e4:a3:96:df:cd:53:f8:e8:23:92:ec:e9:c6:17:
d7:18:1a:38:33:ff:ab:c5:12:70:2d:46:ac:bf:38:85:23:16:
67:d7:d9:8a:7c:7f:52:ba:6c:7c:2c:c3:5d:06:49:ba:f1:8a:
5f:97:5e:94:76:ec:cc:05:44:ee:97:f8:0b:8d:85:e0:51:5e:
5d:9b:d5:88:da:ab:fe:35:a5:75:99:56:cd:f2:c9:5d:60:70:
90:f4:f5:cc:02:76:a9:57:21:2d:bb:51:28:7f:ac:32:38:a8:
72:cc:b5:eb:80:41:ce:d1:a0:8d:cb:23:56:79:12:37:bf:3b:
9e:de:18:e1:77:2e:aa:e2:a3:8c:b9:e0:5e:5a:f6:20:81:d8:
04:a9:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:39:16 2025 by rpki-client