
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa
File: 06774f75-4e9d-33b3-9002-846b6551e953.roa (raw, json)
Hash identifier: SK95wR/6YjSHJKK9MVAC7WpVoWV+CSURTjNitxJUbYo=
Subject key identifier: F9:41:6D:D5:61:CE:A4:8C:B4:F8:B5:53:F8:4A:C9:0E:25:ED:8D:B2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584B715CD168EAB360619CF5B040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa
Signing time: Tue 07 Oct 2025 13:00:37 +0000
ROA not before: Tue 07 Oct 2025 13:00:37 +0000
ROA not after: Mon 05 Jan 2026 14:00:37 +0000
asID: 22944
IP address blocks: 67.140.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:71:5c:d1:68:ea:b3:60:61:9c:f5:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Oct 7 13:00:37 2025 GMT
Not After : Jan 5 14:00:37 2026 GMT
Subject: CN=a96a9ade-a467-464f-a3ba-7a0c115ce95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:45:23:42:7e:46:3e:33:0d:32:27:ac:06:
7a:64:c5:b8:0f:0f:33:cf:f4:0e:a2:b1:18:29:bf:
c8:7d:9d:78:2a:18:16:a7:14:9a:82:78:f5:18:71:
1d:a6:13:9f:a2:22:6b:61:6d:7e:79:49:81:0d:23:
81:6f:0c:a8:9a:24:fe:4f:b4:05:1c:aa:51:b1:0f:
0e:77:ca:38:e6:84:98:28:28:06:b8:f7:9a:c9:56:
3c:cb:51:a8:8f:29:4c:32:9f:1e:5a:17:d9:be:38:
75:26:ee:58:d6:aa:81:e3:9b:05:c0:57:d8:56:76:
94:d0:df:d7:c0:67:bf:5e:fa:b2:4a:eb:15:e4:3b:
78:7b:9f:3c:d3:24:1f:aa:1a:5b:83:03:9e:19:0d:
b3:a6:22:a5:de:9f:66:c2:c0:66:a0:65:fa:66:75:
88:71:77:f0:03:b7:ce:ae:13:04:0e:77:bb:70:fb:
31:a4:ba:60:f9:82:6b:23:8b:4a:69:82:a5:89:e9:
5a:0f:fd:41:e5:ec:33:03:e1:a0:91:68:13:ca:68:
5b:5e:f0:9d:b9:ca:0a:e5:94:a0:be:ce:07:0f:e5:
56:91:4c:94:a0:64:8c:16:33:e8:f1:3e:2b:eb:8b:
4f:03:9b:c0:20:f1:6b:60:1e:e9:9f:9f:fc:85:9e:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:6D:D5:61:CE:A4:8C:B4:F8:B5:53:F8:4A:C9:0E:25:ED:8D:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:92:77:47:18:3b:37:59:ae:03:3f:42:00:ea:7a:5e:c5:d4:
4a:ce:38:0d:5a:5c:77:76:f4:af:eb:c0:fc:83:bb:b5:8b:3a:
90:06:0b:72:19:9d:bf:26:0b:48:9b:b5:64:b8:59:ed:93:65:
e7:df:9f:8b:b5:af:8b:b2:78:05:bc:f0:37:d6:31:89:7c:82:
ca:96:a0:dd:90:aa:bc:cf:6e:11:5e:96:2a:2b:e5:a7:08:08:
72:70:21:ab:7c:af:fb:b5:fb:f0:f2:f7:ed:06:8f:b5:52:08:
fb:95:a0:17:d3:fd:b1:f3:be:5d:5e:7c:46:99:13:a2:a5:4f:
8f:0a:cc:53:f7:de:47:3f:ab:6e:be:36:a7:7c:ab:d2:22:55:
85:ab:df:29:b4:a2:e7:f6:b9:cd:0f:b8:8c:db:3a:71:37:4c:
6e:3c:5c:bb:e4:5e:9a:e7:c1:6a:69:a1:b4:59:41:ab:e0:13:
8e:f7:6b:df:63:6e:7c:18:70:16:cb:31:cd:37:ad:40:93:8d:
34:8c:0a:c6:b7:b3:25:f1:c2:95:a3:91:06:cb:7c:c9:02:63:
35:3e:1d:e6:e8:79:d7:a4:be:8b:fb:03:6a:49:21:08:a3:35:
e3:cd:44:a0:b3:37:a1:d0:54:1c:70:ae:ef:db:5c:64:0f:c2:
24:e2:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:54 2025 by rpki-client