
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/d8245dfd-03d6-3032-84b2-33440c1495df.roa
File: d8245dfd-03d6-3032-84b2-33440c1495df.roa (raw, json)
Hash identifier: kh9FEgIwbPLNO8LrK8gk1IjpQ6Gevzm5KDdS+JOLHzs=
Subject key identifier: 10:6B:A7:2D:C7:51:1C:EB:A1:4A:B4:A9:13:96:2B:32:A3:E3:FC:FD
Certificate issuer: /CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Certificate serial: 010D0C9F4328584B110C0ED0FEB2FE35C6C451C0
Authority key identifier: 99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/d8245dfd-03d6-3032-84b2-33440c1495df.roa
Signing time: Wed 03 Sep 2025 01:00:33 +0000
ROA not before: Wed 03 Sep 2025 01:00:33 +0000
ROA not after: Tue 02 Dec 2025 02:00:33 +0000
asID: 216030
IP address blocks: 192.41.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:11:0c:0e:d0:fe:b2:fe:35:c6:c4:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Validity
Not Before: Sep 3 01:00:33 2025 GMT
Not After : Dec 2 02:00:33 2025 GMT
Subject: CN=12dd8530-3d93-40f8-a4ea-d9187feec3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:b1:3d:1b:5f:98:28:54:1d:72:3a:8b:7e:
a1:02:5f:b3:17:7f:3c:2c:09:d4:00:33:ce:8b:74:
09:db:ad:38:65:9e:81:af:77:28:b9:26:45:b4:e7:
94:15:5d:76:09:7d:f1:18:19:7e:8e:0d:3b:67:da:
8a:36:39:79:05:db:45:ec:5d:ee:89:04:ac:97:3d:
26:26:d4:55:22:2a:e0:4f:be:77:a6:5d:1f:0d:90:
dc:b5:85:2d:2f:3b:38:9b:e4:04:84:1e:eb:77:f7:
48:d4:f7:05:fc:d5:44:07:95:78:69:92:6b:a5:c7:
e4:00:b9:26:4b:6d:46:09:0f:d0:68:87:bc:fc:be:
f9:a1:5c:c1:fe:1b:7e:20:fc:07:16:94:f7:32:83:
0f:66:28:fb:38:81:5a:36:87:bd:f4:77:91:1c:89:
ff:f1:eb:09:c1:ef:e5:65:a1:bc:31:6a:36:e2:bf:
3b:72:b5:99:0a:0d:d3:12:af:97:1e:c1:ed:62:b9:
e4:77:ff:01:91:52:51:ef:40:51:36:51:6e:43:43:
f5:07:50:0d:5d:1e:5d:17:1b:63:bd:e0:2d:3d:c0:
06:f4:77:6b:54:24:e8:bb:f3:79:00:0b:88:89:4d:
8a:5f:10:2a:4e:1f:5f:d0:72:0e:22:5c:ec:4f:11:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:A7:2D:C7:51:1C:EB:A1:4A:B4:A9:13:96:2B:32:A3:E3:FC:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/d8245dfd-03d6-3032-84b2-33440c1495df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl
X509v3 Authority Key Identifier:
keyid:99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:26:86:6e:6d:e7:89:bc:69:91:6a:18:70:f9:8a:9f:6a:42:
3b:cd:32:f6:16:bc:c1:e9:bb:35:9f:1b:58:4a:d9:aa:a0:73:
86:df:e9:da:91:30:81:74:3c:18:cd:db:05:54:96:c5:05:4e:
c5:f9:56:8e:5a:b8:4f:74:db:73:ce:41:e3:81:2b:ca:35:df:
46:5c:be:47:03:15:e7:7a:57:96:b2:25:7e:41:19:1d:29:a8:
62:c8:67:36:fc:57:e1:6f:40:6a:b6:fc:17:4c:a7:a1:a4:2e:
12:5e:b5:3f:cb:dc:6f:23:31:4d:01:61:87:20:54:4f:62:18:
e0:35:df:2b:04:b5:75:27:7e:68:86:29:b7:44:2c:c4:0c:6d:
9c:b6:0b:00:85:31:45:25:40:95:9b:61:8f:52:fb:d1:93:c8:
58:bf:b0:47:24:e8:56:aa:20:12:ea:c8:71:86:e4:b7:0d:e9:
20:81:27:c6:65:de:d8:99:79:ca:07:66:e7:25:e0:68:78:b5:
e3:6b:e1:f8:b3:49:23:c6:18:22:d8:ef:2e:56:e9:55:8b:ec:
eb:ec:c7:47:60:6b:5b:f4:b2:8c:ef:e4:2d:67:98:a8:4d:73:
d0:9b:b0:f7:32:25:75:1f:28:9b:ff:13:25:86:3d:41:37:b8:
ef:6d:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:51:56 2025 by rpki-client