
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
File: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json)
Hash identifier: RmRJbyfcRPrm0ZfHAXGhOHCh6rMJz2lwpKEwp2JnRBY=
Subject key identifier: AB:55:DF:63:5E:13:A6:29:EE:AA:61:FD:36:9D:1B:D1:AF:1B:80:C0
Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Certificate serial: 010D0C9F4328584BBB7595E25ADC09540CC8E880
Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
Signing time: Mon 03 Nov 2025 02:00:31 +0000
ROA not before: Mon 03 Nov 2025 02:00:31 +0000
ROA not after: Sun 01 Feb 2026 02:00:31 +0000
asID: 54579
IP address blocks: 65.255.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bb:75:95:e2:5a:dc:09:54:0c:c8:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Validity
Not Before: Nov 3 02:00:31 2025 GMT
Not After : Feb 1 02:00:31 2026 GMT
Subject: CN=57e225b7-d5d8-47a3-aa53-74bf322c16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:b5:7f:94:7b:0c:68:db:76:c8:99:5f:69:
90:4e:96:98:36:2f:66:02:c0:cc:e1:4c:a0:e5:67:
92:35:eb:27:13:c1:e8:9f:54:81:ed:e0:b0:3f:45:
68:da:3a:63:6f:a9:74:46:5b:63:64:a9:d6:9c:a3:
60:24:c4:99:e3:21:67:ac:56:93:3e:dc:c8:00:35:
ab:13:21:fc:ee:45:63:ab:cc:f0:f9:8c:09:b7:b1:
9a:58:cf:57:15:55:d7:e4:c8:9e:a1:74:e1:dc:c9:
b0:7c:1c:6e:14:81:c4:6a:56:33:74:17:71:36:46:
86:93:cb:a4:86:d9:5e:cc:1d:94:08:d0:f6:00:a6:
ae:f2:33:fb:3c:f5:25:e6:f1:ac:eb:46:c6:9f:17:
09:53:06:91:9c:2b:23:b6:a2:b8:91:d9:85:e2:ae:
48:45:eb:56:72:82:a5:61:af:9c:e6:2c:09:52:de:
3c:eb:7f:ef:b5:50:6f:5c:4d:96:cb:49:52:67:dc:
57:ad:25:e8:4f:9a:19:1b:36:7e:69:06:34:24:5f:
b1:c2:02:71:97:40:e1:64:8a:ef:29:5d:c8:f7:0e:
dd:f1:e8:96:1e:42:ef:bb:b7:12:05:3f:59:54:b2:
82:b2:40:3a:8c:25:91:b1:b6:ed:eb:bd:21:95:e5:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:DF:63:5E:13:A6:29:EE:AA:61:FD:36:9D:1B:D1:AF:1B:80:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl
X509v3 Authority Key Identifier:
keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.255.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:5e:20:40:cc:4e:b6:76:bf:dc:69:dd:c5:32:03:3c:56:c1:
ef:68:11:f9:b0:55:ca:b0:14:35:1f:9b:bc:b8:51:ab:00:a0:
b0:da:92:ae:56:08:e3:a2:83:ba:1f:fd:f3:e7:18:1f:64:41:
4b:9c:69:5d:2f:f8:5c:55:20:60:5b:5a:53:28:56:90:06:d7:
65:45:47:a3:10:d8:3e:5b:6b:e4:b1:67:9b:c5:86:01:7c:27:
d4:0d:a0:b2:62:26:cd:be:47:18:93:fb:85:b0:3e:7a:90:a2:
05:08:2e:5c:b2:6d:9e:94:7e:71:c2:9d:08:98:c7:03:ff:33:
e4:f0:57:dc:33:37:56:41:4c:c5:ed:47:5d:e1:f0:66:03:9f:
17:b2:f4:93:e7:8e:b5:a9:7c:32:f4:16:13:94:45:0b:ef:54:
4e:d1:04:2b:39:a1:3a:7d:70:cc:cc:ce:bc:97:5f:21:ba:f6:
fa:5d:4d:53:06:13:67:67:d8:3f:73:ee:fb:33:6b:17:27:fb:
b2:9a:eb:eb:82:f4:c8:86:1d:ac:ad:8b:09:8c:c2:cf:d0:2c:
4a:ab:eb:b3:35:32:f3:bd:a6:ef:1f:33:6f:5e:0d:4e:55:72:
10:b5:c0:2e:0e:81:6c:63:db:fc:68:f7:d8:61:9b:c2:8f:8a:
0b:16:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:18:22 2025 by rpki-client