
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa
File: b514e4ac-e068-395d-9028-7ae737863cd7.roa (raw, json)
Hash identifier: tsf2pXaGZJLvpU6K1OQtevXKwpEtwyom97LYA++h8Ec=
Subject key identifier: 90:62:BA:CC:F8:F1:E7:D6:44:06:34:48:C9:01:48:34:6C:37:66:D2
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F4328584BBFA5A5B2D2B54A9DE331E840
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 9009
IP address blocks: 45.59.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:a5:b2:d2:b5:4a:9d:e3:31:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=00eca5b1-713a-42f2-9abf-7f3e21ede85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:21:56:9c:40:9d:1a:88:f7:61:07:d2:40:
67:56:94:e8:d3:b7:c2:d9:7b:09:c2:81:29:2a:bd:
84:5c:ff:55:2d:3b:0b:8f:d7:29:96:19:27:43:20:
ee:5c:a8:c6:4f:7e:ef:cd:79:d6:8d:aa:0d:38:39:
e9:50:18:e3:ba:0d:0b:44:ab:65:0c:d8:75:4e:21:
4d:6b:1f:2b:3c:33:ee:49:00:e6:ea:5d:d5:04:1b:
7d:af:43:aa:3c:be:bf:cf:d4:f6:ae:ed:4e:d5:4b:
8b:c6:e5:18:51:b2:19:49:8a:b5:4c:86:c4:ce:6e:
29:08:8e:86:ec:86:da:41:fe:33:ec:ab:0d:f7:13:
b0:ab:6a:8d:ad:49:de:4a:4a:c1:c8:40:69:78:85:
8d:7c:95:e8:c0:f7:9d:76:e1:a1:42:b1:e9:c7:f9:
ff:e4:a3:e6:3a:6b:e6:30:55:b2:28:d3:a9:88:3e:
a9:41:b5:37:d5:52:4c:e2:85:28:aa:07:97:cb:7e:
16:d4:8a:a4:21:44:7c:e8:1f:10:62:d9:e6:54:d1:
77:2d:88:1f:be:d4:c0:dc:30:c1:d5:47:2a:a2:e5:
3d:d2:a0:6a:52:41:c6:f7:6f:7d:82:33:c5:03:76:
9f:8e:f0:9f:44:24:72:0e:24:e0:21:57:90:6c:00:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:BA:CC:F8:F1:E7:D6:44:06:34:48:C9:01:48:34:6C:37:66:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b514e4ac-e068-395d-9028-7ae737863cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:87:0a:c2:54:e3:5b:b7:48:99:05:7d:ee:04:4a:2a:92:cb:
38:1a:e2:2b:0f:8c:fc:fa:ca:df:0d:7c:49:fb:b8:99:6a:c1:
e8:aa:e7:ed:83:9e:96:d3:01:78:d4:81:32:e0:01:32:cf:a5:
7b:24:32:7c:6c:7e:ad:c0:80:d7:06:9d:0e:26:2a:e9:f5:ab:
7c:98:08:88:d1:cc:3e:d9:17:f0:10:a4:54:dd:88:24:cf:ff:
5a:0a:a2:f6:f9:97:81:34:8b:53:2b:00:62:13:b5:db:24:d3:
63:6f:b0:17:19:06:5e:8a:17:ff:f2:de:98:b2:44:7e:c2:36:
b9:90:50:9d:28:9c:b5:11:ed:fa:ff:48:3a:60:14:35:34:a6:
0b:ed:31:af:48:4b:74:5f:28:5b:dc:e8:d4:df:3a:4d:8b:8e:
95:96:e7:79:66:cc:46:39:f1:b4:21:c0:48:e7:52:86:89:2d:
99:b1:29:78:f2:c0:fc:92:b0:3b:45:39:ee:2a:12:78:f4:6a:
0a:31:f6:f2:8e:55:e0:22:54:8a:ad:b6:07:1c:57:e3:42:ea:
6f:ed:9d:19:f2:94:f9:62:c5:78:96:3a:20:69:79:82:88:36:
f2:12:b8:91:90:b6:31:52:6e:79:06:a9:ba:40:a3:20:33:22:
ee:57:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:13 2025 by rpki-client