
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
File: 7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa (raw, json)
Hash identifier: Lv6XTJ/q8T2vANG8WYQcvMSmBUyREPkIdiFu+8huDxM=
Subject key identifier: 68:C3:FF:99:A9:80:95:8E:14:E2:B0:E9:30:93:0D:5F:42:DF:77:7C
Certificate issuer: /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Certificate serial: 010D0C9F4328584BAEC7B056436AEB8A1192C2FC
Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
Signing time: Wed 29 Oct 2025 13:00:39 +0000
ROA not before: Wed 29 Oct 2025 13:00:39 +0000
ROA not after: Tue 27 Jan 2026 14:00:39 +0000
asID: 53667
IP address blocks: 23.186.113.0/24 maxlen: 24
2602:fc41::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ae:c7:b0:56:43:6a:eb:8a:11:92:c2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Validity
Not Before: Oct 29 13:00:39 2025 GMT
Not After : Jan 27 14:00:39 2026 GMT
Subject: CN=71ee5194-f2ef-4977-9a7e-aebd1b2def6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:c1:19:9c:8c:9d:67:58:c6:7c:85:32:d4:
f2:eb:2c:f3:8c:9e:f6:34:72:74:8e:14:14:de:f2:
f5:f5:21:13:61:e4:e6:85:cf:2f:58:b1:75:a8:53:
49:4b:24:16:6d:e6:bb:6c:8c:10:03:dd:d4:0e:a7:
88:f4:d7:32:4a:41:be:12:54:34:03:68:db:60:f9:
b8:26:4e:4b:47:10:04:57:64:80:6f:06:e8:f2:f0:
8c:df:12:43:52:c8:7c:d6:e2:3a:24:67:ca:91:e6:
56:5c:41:9b:54:b4:ea:05:08:e0:38:a3:43:74:0a:
5b:d6:14:42:97:a6:96:50:56:c0:e0:39:c2:72:6b:
82:d2:76:ec:9a:aa:92:92:34:dc:b8:57:d3:0b:67:
eb:14:36:f6:85:79:12:35:3d:b1:83:9c:47:17:1d:
b5:94:ed:ae:b0:9b:cb:57:16:13:53:49:1d:fa:36:
61:a3:8b:71:eb:b4:00:3f:b8:25:b5:20:b5:b8:0d:
0f:b1:ef:d6:e1:9b:2d:10:25:ab:a1:af:d7:d1:e5:
f2:9a:87:eb:d5:17:2b:29:d4:56:e1:6b:bc:35:44:
a2:a1:50:c3:69:a0:ed:46:3c:6a:b2:fa:a9:35:9d:
c9:0d:8f:23:6b:56:25:8d:e2:5b:ca:04:78:52:da:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:FF:99:A9:80:95:8E:14:E2:B0:E9:30:93:0D:5F:42:DF:77:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
X509v3 Authority Key Identifier:
keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.113.0/24
IPv6:
2602:fc41::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:3d:24:9a:54:e0:f4:14:62:1f:46:e2:3a:a3:3c:7d:3d:51:
ea:3c:68:7d:a7:0d:72:0d:45:46:e6:8b:f4:54:11:1f:c6:81:
c0:2f:dc:26:61:5d:c7:34:9d:d8:64:76:65:cf:9a:43:f0:59:
46:cd:5a:04:12:dc:37:d1:b4:ce:3c:e2:17:77:d6:24:b6:32:
fe:ea:e4:63:4f:db:f9:cc:f9:c2:98:b9:d2:e1:f7:25:00:46:
96:3b:6c:29:cf:60:d6:c1:4b:de:41:7b:c5:0c:01:5c:c8:f9:
9b:e4:c8:b0:c9:69:9e:1d:c6:78:ff:97:76:c7:b9:8b:4a:5b:
11:f2:7e:86:f3:33:8f:13:c6:99:98:c4:52:e1:db:29:4e:24:
c7:c6:fe:2a:63:94:1c:65:a6:dc:bf:cc:a8:7e:6f:4a:3f:01:
29:b2:3f:f7:fd:40:1d:b9:f0:ab:7b:77:54:8c:2b:95:85:e0:
ae:48:9b:01:60:4c:09:26:59:87:2d:ae:89:24:49:fb:be:46:
2b:a5:17:38:fd:92:4b:49:75:ae:59:2a:ba:0b:1f:ec:c1:53:
63:7f:29:b5:1b:e6:09:ff:8a:a1:b3:43:1c:8f:2f:2c:a4:ca:
b7:c3:56:d8:1e:41:10:96:61:59:1d:f4:78:df:10:ef:20:ae:
44:cd:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:41 2025 by rpki-client