
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/4c9d9c45-fb56-3842-9c19-4c0cc559ee2c.roa
File: 4c9d9c45-fb56-3842-9c19-4c0cc559ee2c.roa (raw, json)
Hash identifier: zdYOtdhQevIyJRBzD/Pu4K7ZQZKT4EGzc71so4ScnY0=
Subject key identifier: 21:0C:58:37:A0:37:2C:3C:F2:89:01:14:BF:86:30:00:28:F8:24:37
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F4328584BB88D11265CE7AFD55A43E980
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/4c9d9c45-fb56-3842-9c19-4c0cc559ee2c.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 38622
IP address blocks: 69.28.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:11:26:5c:e7:af:d5:5a:43:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=4ede67b0-6006-479e-b54f-7192ba188f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:bc:f4:97:59:01:3b:90:68:9c:ac:80:a2:
a3:1e:4c:c5:07:61:1d:1e:37:e6:06:91:d1:d8:3f:
ad:42:64:ca:a1:1f:c6:32:a4:1e:d2:08:0a:07:24:
43:e4:b7:bc:1b:06:8d:77:f0:71:8b:99:3b:d2:42:
f3:bb:2a:27:b0:89:95:8c:fe:91:28:5c:b1:2f:57:
8e:b3:1b:ff:c8:e5:a3:8c:cf:a9:cd:79:1b:58:f0:
29:e5:65:41:7f:9e:a6:e0:67:fd:8f:3a:bf:0f:4f:
47:28:94:e0:6c:cf:ee:f2:5e:48:03:6a:ce:8f:df:
d2:72:0c:1c:a7:35:57:16:79:74:ad:9d:96:fa:ad:
1c:cc:2a:fc:5e:c7:f0:53:dc:76:2e:a3:a0:47:e9:
dc:de:00:9d:ae:33:30:50:08:92:38:76:4b:f2:e6:
76:b4:5f:c7:e6:c9:c5:f6:b4:fc:73:f7:ad:0b:ca:
17:49:7f:b0:46:bd:8b:4b:d8:2d:28:d3:0e:52:f4:
82:db:77:80:94:61:c0:7a:61:a0:db:df:6f:fe:85:
0b:d6:03:6d:bc:83:1e:6a:a0:d5:cf:e1:75:d4:2f:
08:42:fa:19:1a:76:a1:1b:1a:70:79:e3:79:32:de:
ae:f5:21:97:05:ff:d8:6f:af:54:38:c8:a3:e4:d4:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:58:37:A0:37:2C:3C:F2:89:01:14:BF:86:30:00:28:F8:24:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/4c9d9c45-fb56-3842-9c19-4c0cc559ee2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv4:
69.28.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:bb:e3:f5:50:3f:f5:cb:2a:7e:d9:60:9c:08:13:83:06:ea:
69:a9:0b:68:2d:d4:35:44:08:c3:f1:93:7f:ff:5e:c1:2c:b1:
19:14:df:4f:d0:6f:b2:4f:bf:3c:e6:1e:44:7c:4c:8a:8c:6f:
01:25:a9:6e:dc:9f:a2:f0:5a:b5:56:81:b8:cb:62:cd:46:a2:
dd:33:89:c3:1f:5b:e3:93:4d:1c:47:67:92:f9:bc:79:f1:d2:
1f:90:d7:d4:7c:66:ca:ae:b1:85:0c:4a:c5:aa:ed:29:30:45:
61:8b:08:3b:39:e0:9d:4d:e3:ee:a4:9f:ba:2d:0d:06:f0:ce:
35:ae:f9:c8:1b:d6:67:12:a1:76:80:b9:6f:ee:0c:b1:97:7d:
ec:11:62:aa:91:78:2b:41:3d:5c:92:9f:4f:39:e7:78:12:0a:
88:82:26:97:7a:07:ac:10:56:1c:f6:61:96:52:d6:8a:b9:9e:
7f:b7:94:57:39:ca:79:5c:2f:f1:b2:56:c3:ae:85:7d:73:6c:
f3:e1:68:d2:bf:43:3b:9b:60:3f:86:a7:17:c7:7d:1f:f4:5d:
d9:61:51:e6:58:f5:cb:a2:4c:a2:42:66:ed:77:1f:81:8f:4f:
c4:91:f1:1b:29:fd:7d:8f:12:b2:a4:20:45:19:2b:be:5f:e6:
73:3b:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:14:41 2025 by rpki-client