
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
File: 484e3031-ebe0-3e55-a672-ef11f402ca1f.roa (raw, json)
Hash identifier: dxXA3h4OyMiX/vdYbMlRWx/MEOkb6hu5FYIltsR5AJw=
Subject key identifier: 15:E0:74:24:B3:81:80:31:B2:8A:06:4F:4B:8B:B8:DA:99:6F:B7:38
Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial: 010D0C9F4328584B21CC31C64C265F5926202780
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
Signing time: Tue 09 Sep 2025 01:00:33 +0000
ROA not before: Tue 09 Sep 2025 01:00:33 +0000
ROA not after: Mon 08 Dec 2025 02:00:33 +0000
asID: 26703
IP address blocks: 66.102.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:21:cc:31:c6:4c:26:5f:59:26:20:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Validity
Not Before: Sep 9 01:00:33 2025 GMT
Not After : Dec 8 02:00:33 2025 GMT
Subject: CN=d88bc692-391f-46d3-bc30-d31c346c4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:9b:e9:c1:87:32:2a:ee:d6:62:9a:ad:a9:
ce:8e:f3:d9:59:0d:3f:fa:55:3a:99:fa:e1:a4:a3:
19:66:b7:bb:73:df:fd:d9:37:bd:d1:78:9b:68:78:
d3:f4:39:f6:e0:8f:75:f0:f2:4b:1b:89:eb:f4:c1:
f6:e7:4a:50:55:ed:3c:31:a4:49:95:1b:44:2a:17:
ac:44:0a:b4:66:36:ab:22:dc:9e:2e:73:01:01:d2:
12:43:69:90:5d:5e:1b:54:fe:c3:fe:6f:98:a6:f2:
7c:5a:97:71:bb:ef:4b:e6:5b:09:c3:64:c5:b7:49:
d2:d6:76:c9:2f:23:72:6c:6a:54:27:ff:41:bc:74:
6d:3d:cc:2e:dd:41:39:e5:e2:58:aa:5b:80:7e:cc:
85:3e:41:b9:5a:31:73:60:c7:d0:a0:97:9b:08:9f:
6c:4c:6a:50:1f:1a:35:db:ef:a3:8c:9b:c4:f3:cb:
25:62:91:40:42:ae:09:89:55:98:dc:20:77:cf:19:
b5:67:41:f1:3a:be:9b:91:6d:2a:26:f9:e5:11:76:
3c:b3:af:02:b0:15:f0:57:c3:2e:6b:7f:c5:56:e5:
bd:48:49:00:a7:01:5a:0b:52:89:e7:f3:69:65:62:
24:8d:28:d6:0b:4b:08:b1:cc:06:19:6c:ca:70:30:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:74:24:B3:81:80:31:B2:8A:06:4F:4B:8B:B8:DA:99:6F:B7:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
X509v3 Authority Key Identifier:
keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:21:4d:82:0d:a7:5d:66:74:2e:24:11:48:1f:13:29:96:1d:
33:84:d7:35:e8:e0:b5:94:8a:aa:d8:7c:5c:df:fa:29:93:e6:
a0:bc:77:ad:86:b5:85:f1:07:96:85:62:c1:22:0e:4f:94:50:
38:60:e2:7e:94:1e:ea:d5:bb:0a:fc:48:37:ae:2f:46:3a:dc:
eb:50:e6:33:3a:6b:0b:f9:75:92:af:ee:7b:cb:62:f1:9b:00:
1e:ba:fe:26:3f:04:b5:11:f0:f3:b4:7f:e1:4b:55:61:0c:f8:
e2:f2:f1:81:ac:21:dd:6f:4a:0e:12:d0:e2:4c:13:2b:a0:17:
00:2d:90:8d:39:23:01:f0:fd:06:86:b4:6c:fe:ac:2f:93:80:
a1:80:39:5a:99:ca:a7:2e:3e:38:5b:ed:80:74:f0:4c:3d:93:
e1:15:bf:cf:40:70:26:e5:d5:d2:9b:e5:ae:f9:a2:4b:86:77:
4d:e5:16:89:ef:1f:37:b1:79:10:7a:3d:0c:73:f2:7a:77:29:
81:0d:99:47:56:00:89:31:2a:97:fd:74:c4:7a:5a:3e:8f:a7:
31:5a:68:00:27:6f:45:a1:39:ba:52:8e:6f:7d:1a:86:d0:b5:
b3:6e:39:02:0f:23:fc:41:3b:3e:d0:08:c2:1f:fe:d8:60:41:
76:f0:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:38:47 2025 by rpki-client