
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
File: 3142ff37-0d80-3fda-bfa7-23a560c639d8.roa (raw, json)
Hash identifier: yFO2CJj3U/Oq2IF8aGg3KCCFbIgC8tu+SWJJZixXCAg=
Subject key identifier: 55:20:CB:42:F5:AA:86:F3:7D:5A:65:74:12:B8:5B:1F:0E:11:81:D6
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F4328584BC10ADF6E3CF430F83E44D820
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 212238
IP address blocks: 216.158.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0a:df:6e:3c:f4:30:f8:3e:44:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=dd29cf39-8cfd-4ad3-a411-67ae1bb61cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:50:6e:4d:c8:10:39:7a:9f:45:1a:77:c9:
bd:52:3e:5a:cc:46:b2:69:96:81:28:7b:c5:aa:24:
55:da:d4:26:26:30:3b:bc:51:c9:d3:83:00:97:b1:
25:61:34:e6:e5:1e:26:48:ac:3f:54:ac:d2:40:c1:
28:0c:79:f0:7c:2e:3e:7d:65:3f:b4:04:22:12:6d:
7c:f0:bc:75:dc:34:6f:00:4e:2d:47:36:a1:7e:de:
0e:db:9c:0c:83:80:2c:db:1a:72:17:5d:79:ec:a6:
3d:78:0c:59:f7:97:a3:60:69:04:65:71:49:bb:d9:
30:e6:6b:52:f5:06:0d:2a:93:00:05:41:a8:6b:fd:
85:4b:98:91:03:23:8c:23:62:05:50:da:0a:6d:d7:
ac:03:1b:82:99:64:b6:bb:92:e3:ad:f2:52:bf:50:
12:8f:c5:48:11:10:11:f3:b0:8b:d0:45:4b:3f:dd:
8b:b9:1b:3a:81:97:a2:60:fd:c1:10:96:25:f6:82:
9b:ee:cd:1d:e1:1d:2a:7e:05:45:43:c2:be:3f:e3:
3d:0d:7c:7e:8d:52:8d:aa:c9:cc:30:38:46:76:fc:
a5:e8:c9:97:04:b3:9c:1c:2a:67:45:36:fa:29:ad:
42:7d:f9:b3:20:6a:9a:d9:5e:23:37:7c:18:23:09:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:CB:42:F5:AA:86:F3:7D:5A:65:74:12:B8:5B:1F:0E:11:81:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.158.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:27:49:ce:51:c7:5a:1b:02:2e:00:18:8b:95:12:10:0a:52:
ca:3a:d6:9e:3b:2f:43:bd:9b:21:75:41:38:5b:06:aa:4c:3f:
02:2e:eb:f1:2c:23:3d:8a:7b:db:49:26:97:e1:08:05:5a:3b:
42:51:f4:6b:8e:e7:b1:28:68:4f:da:c9:3e:b2:f9:32:74:9a:
99:a4:2a:8b:b3:61:22:d5:c0:3c:03:83:7a:9e:01:01:e8:c4:
04:9b:3f:aa:5c:7c:cb:80:2f:ea:4b:3b:bd:23:cf:02:75:85:
81:b2:bd:96:87:85:02:9a:55:86:57:33:a2:c9:c2:85:42:35:
6c:99:04:1b:1e:a7:ca:c3:f4:05:ec:50:51:e8:b0:eb:e1:fd:
a6:e6:fd:14:3e:e0:b7:1e:1d:13:be:fa:a9:01:57:9c:9c:5f:
3d:9d:dc:e6:02:f0:fe:fd:74:e7:0d:e7:2f:40:9a:78:e3:23:
e9:ae:e5:b0:92:8e:2f:39:e6:90:49:b5:27:75:bd:ac:f9:45:
85:55:bf:3c:a2:84:27:49:9a:24:fb:6a:bc:3a:e7:db:10:42:
a5:3c:68:46:7f:2c:71:0d:c4:8e:e9:4d:16:61:44:e1:ae:b0:
c6:ce:c3:16:83:c3:2e:1e:c7:a7:31:82:ff:c4:7f:60:b0:7d:
6e:0a:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:14 2025 by rpki-client