
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa
File: f6a4375e-a838-3d6a-b830-213e7dc77aec.roa (raw, json)
Hash identifier: f2hbYwoiaSM2yMCa+ONAVKhmLktkbkWPo/Xz/BHLM44=
Subject key identifier: D1:E7:36:43:87:77:21:D7:7B:A2:DB:E4:3F:F6:CA:57:A8:53:93:CC
Certificate issuer: /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Certificate serial: 010D0C9F4328584BAEC7B6EE5DC313DB14EB10AE
Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa
Signing time: Wed 29 Oct 2025 13:00:39 +0000
ROA not before: Wed 29 Oct 2025 13:00:39 +0000
ROA not after: Tue 27 Jan 2026 14:00:39 +0000
asID: 20278
IP address blocks: 23.186.112.0/24 maxlen: 24
2602:fc41::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ae:c7:b6:ee:5d:c3:13:db:14:eb:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Validity
Not Before: Oct 29 13:00:39 2025 GMT
Not After : Jan 27 14:00:39 2026 GMT
Subject: CN=ed96df60-90ec-4eba-a460-a84940100e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:ab:40:a1:37:91:39:d0:5a:90:fb:e0:e9:
a8:99:41:42:2a:ad:d7:24:6c:3f:fd:6b:7f:53:63:
57:26:e4:aa:de:0e:e7:ed:82:2b:78:fc:a6:81:41:
80:cc:94:ec:2a:9f:13:bf:ad:45:86:86:82:6b:b6:
aa:12:88:e4:55:74:17:a9:34:32:9b:ec:23:b1:e6:
93:2e:8d:e7:d1:c3:7e:55:ae:a6:ee:be:a0:03:c6:
9c:b6:c4:4b:8f:e4:46:be:46:f6:70:e7:4a:bc:4c:
8e:5f:e1:86:c7:13:2d:47:a9:d7:bc:c3:90:c8:40:
0f:07:96:fd:d7:3d:8e:f6:5d:da:47:9f:a3:a5:62:
d4:1b:cc:a3:66:5e:51:10:25:a3:89:30:64:e3:01:
2f:22:85:3a:ba:d7:4d:65:8e:0b:53:42:41:f0:cd:
ea:1c:e4:f5:9d:9b:aa:80:09:f6:48:83:0b:7e:27:
77:27:9f:1f:e7:9d:df:aa:6a:1c:c9:4c:e0:f9:ac:
6e:01:81:c3:71:8c:e7:8f:e6:e2:cb:1a:21:a7:57:
86:be:37:2d:4e:37:55:bd:66:93:38:d8:ba:bf:b8:
b3:8e:92:cd:d0:0a:b2:df:84:e0:92:2b:40:d8:79:
d7:33:df:62:54:03:92:17:91:bb:21:97:ec:5f:f2:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:36:43:87:77:21:D7:7B:A2:DB:E4:3F:F6:CA:57:A8:53:93:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
X509v3 Authority Key Identifier:
keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.112.0/24
IPv6:
2602:fc41::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:bd:1d:2e:f8:e8:96:27:6e:ea:09:96:6a:39:f8:69:e0:5c:
6d:c1:49:2a:ba:20:0c:c7:e4:5d:a4:6c:a8:27:29:15:b7:5a:
ce:86:b3:fd:3a:82:f5:ba:94:ad:bf:6b:73:71:9e:c0:8d:8a:
52:30:cf:82:7e:b7:03:7f:ae:50:bc:8c:8c:e0:25:58:09:cf:
31:23:bb:a0:b8:89:2c:2f:90:ae:46:aa:d4:85:9c:ce:fe:0f:
19:96:8b:f6:d3:51:71:ca:01:01:f5:47:6a:cd:4f:c6:46:ae:
04:9a:7a:31:ee:6a:83:fb:05:91:8e:d0:02:c9:df:cf:d1:37:
be:e8:e0:c9:d3:2b:4b:d5:cc:5b:ff:e4:db:cb:e9:3e:40:03:
90:58:f9:5a:65:a8:1f:5d:b8:d9:9e:a4:38:cd:16:21:3f:b5:
c4:f7:b2:9a:7e:7a:31:85:eb:ea:0b:d8:12:25:73:ae:23:54:
fe:a2:5a:a4:f0:ca:d6:7f:fe:a0:7f:b4:d3:7f:41:21:fb:af:
cd:2f:f9:ff:c8:01:1d:9f:76:c8:8f:ef:e0:b1:2a:0d:46:4f:
07:ed:49:6c:3e:3b:6c:ca:b4:c5:ff:58:5a:93:37:7e:07:da:
33:71:10:15:b7:e2:21:92:ca:3a:e0:2f:fe:54:de:b1:4e:da:
81:c9:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:49 2025 by rpki-client