
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360e10fa-f988-3a0a-9f89-c316d0bc3547.roa
File: 360e10fa-f988-3a0a-9f89-c316d0bc3547.roa (raw, json)
Hash identifier: Bj/nYbhTbFS97QnVQvLl/Pd5kPuwar9V52yduvrkF2A=
Subject key identifier: 81:35:B1:A8:81:D5:8F:32:13:4C:39:74:F6:50:1D:14:3C:1C:1B:63
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584BBFA5B24D65E75A905E0835C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360e10fa-f988-3a0a-9f89-c316d0bc3547.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 16839
IP address blocks: 199.91.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:b2:4d:65:e7:5a:90:5e:08:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=fc65d775-c7d0-4b01-93c4-c5bc1f1d8803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:49:5b:42:43:8c:5b:ad:af:12:fd:5d:6f:
0c:e2:ce:2d:e1:8a:33:2a:fa:e5:e7:1a:ee:8b:39:
c0:5a:f2:da:43:70:31:c6:89:15:20:f5:00:5e:60:
79:28:c3:10:cc:03:79:d5:eb:05:6a:ae:b5:61:c6:
c6:5d:42:c4:7d:67:ad:76:85:d0:3b:71:95:27:5d:
79:5f:ea:06:cb:bd:d2:ac:34:17:20:df:31:66:31:
0d:0c:54:a9:67:12:21:44:61:9c:cb:a0:d0:0c:87:
1c:a7:e3:7d:d1:e1:83:c1:bb:c6:a5:7d:53:42:0d:
94:61:fa:51:f1:98:ae:0c:1a:09:7a:08:af:e5:99:
78:83:e6:54:f2:c6:db:a2:f2:1a:de:0f:b8:2c:3b:
84:5c:5c:76:25:30:ee:3e:ba:0d:04:69:ea:90:4d:
2f:2a:35:e8:40:30:2f:27:cd:d0:97:b0:45:73:d8:
50:70:ca:5f:3e:1c:11:d9:ea:26:09:49:3b:ba:37:
aa:65:26:70:cc:9e:f9:e5:f3:90:b7:a4:3d:4b:0c:
b1:64:5f:af:b7:9d:99:0a:61:2b:ab:ae:8b:e8:d1:
af:2e:05:68:cb:2f:75:ba:a0:2d:c2:02:75:55:ee:
56:24:92:91:b3:e1:9e:06:f4:a0:c9:ad:a3:f4:2c:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:B1:A8:81:D5:8F:32:13:4C:39:74:F6:50:1D:14:3C:1C:1B:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360e10fa-f988-3a0a-9f89-c316d0bc3547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:04:f9:c6:c5:f9:05:7e:f1:c4:70:ce:10:ee:45:fd:53:ad:
08:ea:97:47:16:0a:2a:a6:ce:7b:1e:37:73:f7:20:cd:57:6c:
f8:70:00:c9:56:7c:7c:41:7b:2a:3f:86:20:bc:eb:fa:00:e9:
3e:ea:1a:5d:d3:81:b6:e1:80:17:4c:2b:00:2e:5a:1e:24:03:
92:32:6e:bc:f1:20:6a:1b:aa:86:08:e3:d2:5c:69:e8:58:63:
5e:3a:19:66:89:6a:77:31:e7:8a:1b:93:e8:3c:d7:89:7a:f7:
78:c7:a7:b1:67:65:32:0e:ec:2b:02:90:c0:4f:75:1b:7d:ff:
d8:1c:ef:9a:e1:72:7e:be:d7:c6:35:2e:ff:dd:21:47:96:4c:
aa:f8:06:8b:26:77:e1:85:1c:d2:b8:62:36:29:44:dd:04:bf:
b2:ae:ec:58:ce:23:99:1a:f0:c3:25:d4:4d:12:40:3f:c5:90:
25:76:dc:c2:1f:d2:0c:f9:1d:a5:2f:ef:48:81:25:a0:dc:f0:
4b:f2:11:39:8f:a5:70:25:33:3f:0b:cb:b5:ec:4c:3c:8e:23:
99:6a:68:c8:eb:96:77:51:bc:ef:0e:dd:b6:42:c4:fd:28:09:
1b:b6:93:87:58:a3:96:32:0b:61:20:51:82:51:a3:ff:f5:e0:
64:df:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:06 2025 by rpki-client