
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa
File: 21c8994c-b7a9-3921-a776-411828754690.roa (raw, json)
Hash identifier: k91l/QEOHUjgmR+kIGhNHBSqs3aeB522yR/NKPBCnVY=
Subject key identifier: 4B:7C:D7:78:51:1E:D1:6F:3F:31:DE:B7:F7:AF:49:27:DA:4C:1D:AB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584B7F523A599ECF07E17C1E1460
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 396614
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:3a:59:9e:cf:07:e1:7c:1e:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=f4a67c73-60d2-4891-933e-b1aa9bda928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:86:0e:c5:79:fb:77:99:76:c0:8d:1d:73:
34:15:94:4d:63:08:18:7a:30:b8:1f:fb:79:18:6c:
a0:a3:5b:52:1e:66:70:3f:82:54:2d:c9:61:bc:71:
77:4b:2b:90:75:1c:69:87:9a:12:80:79:09:84:68:
7d:4d:aa:7e:f5:e1:de:08:42:49:c8:48:04:b4:05:
27:04:d9:17:13:c4:92:92:ba:8e:e4:0c:d5:e6:61:
af:77:70:eb:e0:5d:41:c5:2e:1f:19:89:07:ff:f5:
3e:8b:9b:cd:50:91:51:24:1a:85:f1:74:5c:48:d5:
c9:e7:f1:56:85:da:e6:ac:52:19:58:c7:c8:90:55:
26:06:73:b8:7a:3f:31:23:44:c1:fe:36:45:c8:c3:
da:8e:3d:c5:ba:82:f8:f4:10:f2:38:d7:0e:22:a8:
07:56:52:72:9d:0a:e5:ac:bf:1e:b5:e5:60:dd:0b:
81:5b:27:61:c0:cd:a1:27:d0:bc:9f:92:f7:e2:da:
88:b7:ff:4b:a7:44:f2:9b:13:90:0d:bb:c2:53:c4:
aa:42:41:43:16:38:cd:b1:c5:90:d4:ec:f9:94:7d:
e3:25:6c:11:c3:f4:84:d5:96:f2:54:81:92:8a:5b:
4a:a9:7e:a1:28:bd:39:c3:10:ab:d7:65:d0:0c:5d:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:D7:78:51:1E:D1:6F:3F:31:DE:B7:F7:AF:49:27:DA:4C:1D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:00:b3:ce:9a:d6:97:28:5f:39:e9:ff:06:40:d3:18:cd:da:
97:05:cf:cb:9e:c5:5a:66:f6:22:7c:d7:64:96:6c:5a:8d:53:
35:39:9e:d8:c3:30:4b:e3:1d:54:f4:8b:c6:17:2c:09:c3:d0:
c8:05:d6:07:71:b7:4d:e6:f1:fd:2d:a0:94:e9:c2:06:41:43:
6a:61:87:30:73:0f:2d:2f:2f:35:dd:9e:d5:b5:20:48:45:54:
e3:65:a7:1a:d1:23:2a:fc:cd:87:b7:57:40:2c:c9:ff:1b:84:
ed:09:d3:77:df:28:93:cb:72:b0:94:cf:08:d2:22:08:a9:44:
7d:b1:48:fd:ee:b5:ea:27:45:88:24:a4:b1:57:4b:7b:d4:3d:
2c:2e:65:8b:db:20:fb:9f:41:08:05:41:e1:af:7d:b4:fd:f8:
b2:f2:40:81:fd:8b:54:a1:c0:0d:25:84:68:ec:d1:28:2c:b6:
a5:3e:e5:ca:ac:96:ce:8d:1c:00:ac:23:8d:e8:75:4b:38:6c:
fa:2c:20:be:b5:60:a4:62:51:d4:bc:60:14:3f:30:7d:12:98:
5a:10:99:82:d0:c0:cf:50:db:6b:d5:f2:18:06:21:ca:bd:7c:
a0:78:a7:a8:4f:88:23:a7:62:7f:c5:84:39:2c:58:fb:5b:e7:
bc:69:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:14 2025 by rpki-client