
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa
File: 1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa (raw, json)
Hash identifier: D54gCRM+i119KmWqXqCrbNLZRS/BLbnPAjw9ComLgN4=
Subject key identifier: E0:59:1A:A0:4A:62:65:7E:3B:0D:FD:50:CF:BE:D5:6F:AD:9E:3A:72
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584B94C46441D4CF242FFCCE9B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa
Signing time: Mon 20 Oct 2025 05:23:02 +0000
ROA not before: Mon 20 Oct 2025 05:23:02 +0000
ROA not after: Sun 18 Jan 2026 06:23:02 +0000
asID: 834
IP address blocks: 172.111.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:94:c4:64:41:d4:cf:24:2f:fc:ce:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 20 05:23:02 2025 GMT
Not After : Jan 18 06:23:02 2026 GMT
Subject: CN=a51c7540-54ee-4527-8d92-e13e5f5565bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:27:73:5e:98:3d:8c:fa:c8:32:a2:bf:74:
72:8b:72:8f:4e:21:98:18:d6:8a:76:15:74:4e:c7:
e9:46:e8:67:fd:55:d7:94:c7:02:b9:35:a5:bd:5a:
9a:d3:dc:15:97:43:c9:2b:6b:6a:84:d9:d7:7a:76:
1b:e7:19:7c:df:1a:93:b9:05:87:7d:1b:c1:2f:42:
f6:3a:aa:b5:1b:e1:e5:ce:71:5b:1b:6b:27:b6:db:
fb:f2:e0:98:d8:6b:e7:12:87:f4:08:c2:60:29:f8:
74:a5:7a:76:e6:d0:6a:00:d2:87:f2:4d:bf:07:0b:
bc:09:a9:c5:fa:aa:1d:26:9e:29:58:fd:e4:ea:c2:
bf:2c:a0:b7:d8:41:d2:f1:c7:08:49:bf:30:ef:17:
de:75:20:ad:72:44:b7:5c:d4:1c:b6:8b:30:fe:7e:
f2:59:7e:2f:9b:58:19:6e:c2:53:02:50:c7:0f:2f:
5f:00:4f:ad:59:be:61:74:1a:7d:54:aa:d7:2a:75:
44:c4:06:6d:45:41:43:18:47:7f:f3:76:0b:3c:97:
c5:70:6e:23:b5:0b:52:af:5a:d6:e3:e5:5d:a9:03:
5c:0d:c5:18:36:13:0d:ce:39:b6:e2:9a:c8:02:fc:
f9:7e:42:5b:e6:49:fa:77:3f:71:fa:cd:55:f5:cd:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:1A:A0:4A:62:65:7E:3B:0D:FD:50:CF:BE:D5:6F:AD:9E:3A:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ef67335-eff8-3842-b9ed-0c83ef6fe40f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:17:e2:b9:a0:2e:21:bf:8c:9a:30:9e:92:88:1f:f0:1f:80:
fe:68:23:81:8d:86:07:d3:36:e2:02:96:ef:3a:22:4c:ab:8e:
b4:72:9d:a6:3e:46:20:ca:2a:4a:16:67:91:a2:0d:00:5b:43:
7b:14:9f:c9:dd:8e:02:0f:cf:b2:c9:2c:3b:4e:31:f5:33:3f:
d8:f7:04:09:0d:b7:eb:d2:39:96:52:e2:64:f4:c0:95:f7:f3:
81:07:55:fa:ba:a4:57:f8:d8:47:da:25:da:fd:40:ff:fa:01:
e9:d1:e1:0d:22:86:de:15:2c:7c:35:49:40:ef:77:72:f5:30:
59:dc:ee:a4:4b:5c:17:28:9a:d3:7b:78:b2:80:94:9d:26:c7:
65:92:a0:1f:15:b3:ae:c7:4d:06:f1:9f:11:9a:b1:b3:34:2e:
11:a9:85:8d:40:25:5f:24:e2:cd:ae:c3:a1:c2:f9:f9:35:e7:
b8:04:d1:3f:24:c8:95:77:ad:d4:d9:6b:2f:d9:02:89:55:e8:
a5:63:90:83:0c:06:61:3f:b4:c4:1d:78:c1:76:9a:07:41:3f:
91:2b:02:a7:cb:c4:6a:45:e7:57:b7:a7:d7:81:d1:03:5e:0f:
ed:36:c6:c9:da:a7:f1:cb:86:e2:13:96:0b:d4:a8:0f:55:86:
05:5f:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:04 2025 by rpki-client