
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
File: 0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa (raw, json)
Hash identifier: Wb28ZdAm3ranKVIx1LxfQVAA79YbmRupD6qAUaGdwKk=
Subject key identifier: 0B:E3:DF:EE:7A:4C:36:B6:8D:81:2A:BA:D6:60:EE:0F:89:F3:61:BE
Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial: 010D0C9F4328584BBE40309DEB93CAC9DF07B680
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 16509
IP address blocks: 72.18.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:30:9d:eb:93:ca:c9:df:07:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=bd6a7859-b062-4504-b72e-14ed5eee39ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:80:11:58:eb:95:26:33:68:40:29:30:c6:
c6:14:d4:88:7b:1b:a5:41:0b:88:e6:15:33:79:9d:
7d:0a:94:c4:5e:66:cc:d4:6d:4d:99:43:80:c0:b5:
e7:27:c6:e8:18:99:d0:32:db:3b:4b:b9:8f:b7:07:
56:c4:3f:d4:c4:e3:e7:9e:4f:29:b9:22:21:fa:b9:
71:03:eb:97:8c:23:83:b2:b5:7c:cc:e4:35:e7:63:
2d:dd:30:e3:2d:b2:b7:33:9b:55:4b:f0:ed:61:91:
3e:41:b9:a1:9a:ad:ee:dd:e7:56:29:34:c6:8d:91:
57:f0:05:6a:8f:2d:23:54:24:2f:ea:55:ff:b4:d4:
b0:ac:45:9a:d9:4b:97:f1:06:2b:b3:de:78:c4:51:
c9:0a:b0:5c:69:41:3e:d1:8d:67:ec:f3:40:38:36:
f0:a1:ce:65:49:41:bc:37:a0:04:37:86:53:43:7d:
bf:7f:91:44:95:ce:b9:98:92:cf:a9:85:77:7b:ed:
11:6e:a5:0d:9a:b0:7b:ff:8d:01:c4:3e:06:9b:8e:
2f:1f:3f:1b:64:db:4d:d7:65:7b:25:f1:eb:dd:2b:
4d:41:91:8c:3d:63:a3:80:de:7b:9d:55:c0:18:6e:
cb:90:d6:23:cd:53:ff:60:22:b1:92:de:62:c7:8e:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E3:DF:EE:7A:4C:36:B6:8D:81:2A:BA:D6:60:EE:0F:89:F3:61:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
X509v3 Authority Key Identifier:
keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:a6:e4:a0:80:78:20:31:bf:02:93:87:cf:c6:76:b1:fc:ff:
35:23:a1:e6:e4:5c:6d:46:7a:a1:4e:2b:03:cd:9b:12:d4:45:
b8:53:e7:81:74:e6:a5:0a:14:33:ea:a4:56:3a:85:85:5e:f6:
a8:5b:c0:83:18:ed:46:98:94:70:18:90:43:b2:fc:21:c4:f1:
7d:f3:63:a6:ae:31:bc:73:35:4f:08:80:3e:23:b0:00:1d:df:
3b:34:09:6f:4b:70:0d:2e:1f:ce:f8:81:0a:b2:53:d7:d9:81:
3a:c4:78:90:b8:90:ea:4e:d4:0c:2d:93:6d:80:37:d0:f3:21:
34:91:97:06:ac:1f:c7:69:50:90:90:e8:4f:b6:8a:7c:d7:91:
85:5c:1e:8b:d0:5b:32:a3:88:9d:0f:67:50:21:61:5b:09:49:
14:e6:2d:f6:e2:82:6e:15:97:3a:74:94:20:d7:cc:d9:73:1c:
1a:67:47:0d:d6:a9:87:09:56:0e:c8:e6:be:ae:9d:eb:64:8d:
37:d7:13:32:da:da:73:e7:36:0f:55:a0:dd:fe:7b:eb:2a:d3:
52:a1:72:0e:a2:12:22:1a:f0:75:3e:39:b9:fb:f8:dc:33:71:
37:74:d6:85:12:6e:d3:1e:2b:81:ff:05:42:db:67:9f:8f:ee:
d8:4a:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:13 2025 by rpki-client