
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
File: a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json)
Hash identifier: zKQhjG6PXGp+j30BbjE099EWdc/TEHVp0IpJ623j0YI=
Subject key identifier: BA:CB:2D:3D:F6:00:E5:90:C3:ED:AF:8A:2E:00:78:C4:84:58:99:ED
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F4328584BBA1045EC7D014134BC019A80
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
Signing time: Sun 02 Nov 2025 14:00:38 +0000
ROA not before: Sun 02 Nov 2025 14:00:38 +0000
ROA not after: Sat 31 Jan 2026 14:00:38 +0000
asID: 16509
IP address blocks: 68.71.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ba:10:45:ec:7d:01:41:34:bc:01:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Nov 2 14:00:38 2025 GMT
Not After : Jan 31 14:00:38 2026 GMT
Subject: CN=cfc92016-7ec7-4a8b-ac96-acb9f2a8f8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:3c:c0:74:92:31:29:e1:4d:73:e3:e0:45:
fc:9d:c3:37:35:8c:ba:d5:70:df:9b:3f:51:36:0b:
d0:73:88:0f:25:a2:0e:70:13:9d:12:21:9a:b6:de:
21:93:67:ab:77:1f:f1:df:f4:a4:78:fe:49:5e:08:
08:6e:65:e3:c4:77:06:f8:d2:13:3b:c7:15:11:73:
c1:19:b4:a7:c7:d3:85:75:06:df:ad:33:24:03:fa:
7a:1e:4a:e5:74:ca:ba:0c:dd:6d:a5:52:45:23:d6:
9d:96:b1:e6:b8:7f:c3:ab:c1:dd:26:c1:2a:8e:57:
b8:51:f3:ee:78:a1:7d:3e:5a:1b:73:7a:e5:bb:2c:
27:96:28:98:28:09:a8:84:b5:c9:8a:e1:05:73:03:
9c:05:16:72:a3:b1:b9:6b:68:3f:81:08:ae:b7:6f:
b7:ba:14:7c:fd:3b:a6:88:f5:dc:e0:a3:6d:b0:66:
78:be:b1:49:69:6f:59:7d:73:81:75:4a:9f:49:6a:
e7:32:58:2b:22:9f:5b:8f:70:9f:e1:cd:f4:bb:39:
83:a8:89:ec:3f:f7:4b:a6:5a:ea:13:92:9a:5c:ae:
7d:06:e4:5c:ad:8c:84:bc:db:31:26:dc:1b:76:f5:
e4:3c:60:7d:98:37:f5:d0:73:de:49:06:6e:54:c2:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:2D:3D:F6:00:E5:90:C3:ED:AF:8A:2E:00:78:C4:84:58:99:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:48:ef:13:2e:f2:f2:9e:64:6d:57:35:9e:69:98:55:cf:05:
4b:9e:0b:7a:f1:31:05:3b:51:f1:d3:41:dd:58:92:86:cc:15:
5c:d2:31:df:1b:19:ba:4c:77:dd:bd:54:36:17:09:20:bb:e7:
3f:6e:98:92:3e:30:99:74:78:93:d8:3e:a4:dc:3b:f9:0a:37:
95:7d:8b:e4:ee:05:6f:8d:52:40:aa:b7:67:22:41:78:e5:eb:
3d:fa:29:25:dc:d6:1e:a6:99:1b:ba:b3:56:70:06:37:8a:94:
e7:0b:cd:94:c9:30:47:aa:dc:30:9b:6c:2c:e6:02:67:3c:d7:
85:b8:08:c9:77:47:19:2e:32:0f:c7:b4:58:1c:9a:21:fe:19:
ac:f0:4c:7d:de:db:1f:b6:f4:63:20:40:99:a6:52:42:f7:ca:
f8:cb:62:cf:88:2e:5a:ed:aa:6c:c6:3c:87:14:9c:7d:9c:4c:
66:c8:c4:ea:4a:31:04:08:1f:e0:1c:99:ba:e8:31:a1:e3:16:
98:05:ec:5b:a6:18:7b:95:aa:fe:c7:fb:d0:0b:ff:d3:eb:ec:
2a:f1:85:e3:6f:01:39:f9:c4:4c:7f:47:23:e9:42:96:0a:bf:
8f:ca:0b:96:05:da:f9:3e:0d:53:97:83:82:2d:df:de:c6:9e:
87:53:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:25 2025 by rpki-client