
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa
File: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json)
Hash identifier: Vj8LGlIYSQuo1ApdfDnLwLUxOtzLgB/3tdv+1DscPjQ=
Subject key identifier: DA:39:7A:42:95:BC:F6:8C:31:91:80:69:96:1F:A9:6C:37:04:4F:05
Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595
Certificate serial: 010D0C9F4328584B821CCD597C29EAA353BE9180
Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa
Signing time: Mon 13 Oct 2025 13:00:36 +0000
ROA not before: Mon 13 Oct 2025 13:00:36 +0000
ROA not after: Sun 11 Jan 2026 14:00:36 +0000
asID: 16509
IP address blocks: 207.211.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:1c:cd:59:7c:29:ea:a3:53:be:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595
Validity
Not Before: Oct 13 13:00:36 2025 GMT
Not After : Jan 11 14:00:36 2026 GMT
Subject: CN=416638ae-cc41-4697-9a41-226e3d28db75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cc:98:38:36:bc:e9:95:64:3c:fe:e6:08:5e:
1f:91:c7:8f:63:89:7b:96:19:a1:bb:20:13:4f:e8:
1b:cd:6a:41:a4:e4:53:3e:e3:c8:31:e8:c8:f7:78:
69:46:2b:24:bd:26:45:71:a7:dd:bf:78:b2:0a:7c:
29:10:88:a5:77:bc:51:28:d6:fe:ea:20:bf:cb:ca:
6d:e2:50:78:66:09:98:e3:6e:eb:3d:3a:08:93:f1:
9b:6b:15:ac:08:30:a6:06:47:2f:9f:83:a6:27:7a:
fa:50:c5:f6:b4:e2:fb:7b:d0:db:4b:47:22:92:e9:
80:00:f7:6a:c8:cd:32:d1:7b:db:79:dc:a8:32:fb:
b9:a0:2e:38:7c:53:64:72:27:e2:63:11:81:47:60:
7e:3e:cb:fd:52:ec:46:20:d1:d1:6c:09:54:6a:60:
a4:17:67:bb:34:26:9a:f9:2b:f9:d4:b5:94:41:ea:
2b:cc:c1:c7:e8:60:d2:86:60:cc:c6:14:cf:8e:fc:
11:cb:71:d2:f4:a4:bc:dd:bc:ff:87:a8:8f:17:5c:
d6:00:37:e6:23:75:dc:e9:3e:93:f8:12:b1:e9:ee:
c5:b7:3a:86:30:8d:a1:ef:19:92:2b:7e:9a:6c:16:
75:34:2b:3b:6f:bf:62:9c:b7:a1:17:3f:38:8b:2d:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:7A:42:95:BC:F6:8C:31:91:80:69:96:1F:A9:6C:37:04:4F:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl
X509v3 Authority Key Identifier:
keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
sbgp-ipAddrBlock: critical
IPv4:
207.211.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:47:e0:82:89:dc:74:47:c9:2b:b0:05:a7:6d:27:78:ce:38:
19:d5:52:53:a8:31:c7:5e:5d:c4:dc:f8:6e:74:cd:bf:75:ec:
ad:cc:7b:5b:3b:35:c9:3b:4c:af:35:d1:ed:0a:6e:0e:82:3c:
73:40:9c:6f:7a:d7:e6:0c:a7:85:79:2f:e2:7f:9f:c8:0c:05:
06:3c:ad:f2:b7:b4:34:c3:09:89:fc:ed:48:16:df:39:8a:ed:
57:dc:33:15:bb:c6:10:2c:f2:c8:02:84:b5:8a:1f:8f:a3:28:
37:46:28:b9:9a:6c:a0:d3:59:c4:4e:46:9b:4d:9a:73:52:bd:
74:1e:97:0f:6b:7e:ea:20:6f:a6:d2:78:ad:a4:75:1d:56:85:
11:17:37:73:b2:97:f5:06:29:ea:f0:5f:33:d9:05:ca:82:fc:
d3:9c:a3:80:b4:5c:e3:bd:6c:0f:2c:a5:ef:56:ec:1f:fc:02:
69:b7:fa:59:fd:de:8b:6a:8e:95:29:25:1a:71:67:6c:a8:8b:
2a:ed:13:e1:8d:49:2b:fb:24:85:df:49:56:59:78:13:1c:e7:
1a:1a:70:a2:1c:5b:43:a4:07:f5:b0:d8:04:1d:e1:3d:82:89:
08:8f:d7:84:18:0d:8b:6b:1d:6b:af:1a:4d:b8:25:27:45:02:
0a:a7:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:51 2025 by rpki-client