
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
File: 04eca2f6-f0e9-3553-a9ed-47e06df97943.roa (raw, json)
Hash identifier: KLl8Zo4VjAnBRKGClc2KOBoS9S4ruG6XHu5wyVIUD+k=
Subject key identifier: 4B:3D:3A:AC:0A:88:0B:75:79:36:8D:BA:72:D4:D0:88:4A:CE:6A:59
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584B823FC2B5C4405FE57BF37780
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
Signing time: Mon 13 Oct 2025 14:11:15 +0000
ROA not before: Mon 13 Oct 2025 14:11:15 +0000
ROA not after: Sun 11 Jan 2026 15:11:15 +0000
asID: 21433
IP address blocks: 144.36.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:3f:c2:b5:c4:40:5f:e5:7b:f3:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Oct 13 14:11:15 2025 GMT
Not After : Jan 11 15:11:15 2026 GMT
Subject: CN=bd664394-f7aa-4959-98d0-0206613b532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:5d:8c:eb:29:3f:7f:18:2a:d0:f0:d3:42:
24:05:20:42:3e:c9:db:3c:e1:68:ac:d2:a3:14:7b:
c7:c7:6f:8c:6d:39:a8:c0:fd:8b:56:f4:54:91:88:
e6:bb:f2:40:07:b4:4b:a1:38:96:af:b7:d8:a3:91:
e2:12:02:95:cc:6c:a3:fb:8a:93:45:d4:bf:d6:29:
81:24:08:5b:3e:8a:a6:56:d3:7c:20:10:a0:72:29:
58:45:74:ce:d9:e7:1d:8d:27:08:3c:0e:39:8d:6c:
26:2b:c8:bc:4f:d2:24:b9:48:56:b1:8a:40:f2:0e:
f9:24:06:93:b0:fa:4e:73:3c:d5:bd:57:34:54:46:
44:d6:1c:26:e8:ea:f1:80:ec:dd:49:c5:3a:00:90:
a6:04:c2:eb:bc:53:e5:b4:66:15:44:53:50:29:38:
ff:7a:72:a3:98:6d:d6:7c:7f:c2:3e:51:29:27:8b:
9a:8d:aa:5c:c1:1d:12:4e:b7:27:38:bd:a1:2e:10:
ff:f9:41:31:b1:a0:a9:8d:92:9b:9c:0b:b9:68:1f:
c0:90:7e:27:fe:29:b2:92:cf:f7:06:05:a9:ef:f4:
96:2a:84:52:d7:49:e3:69:6b:09:d5:1f:df:38:61:
e5:d1:79:e8:fe:af:ba:64:74:2d:31:2b:9c:4f:85:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:3A:AC:0A:88:0B:75:79:36:8D:BA:72:D4:D0:88:4A:CE:6A:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:df:97:87:42:6a:9a:1c:18:b7:20:42:56:98:a5:31:12:9d:
a2:06:2e:93:e5:51:54:4d:34:60:fa:2e:8e:72:ac:c2:54:ba:
10:89:ba:98:51:ee:5b:e5:70:e2:b2:01:ea:a5:1c:40:06:2c:
39:ca:98:49:d6:47:a2:08:4a:fb:ba:dd:2a:2a:66:40:60:b5:
d0:6c:2c:8a:5a:2e:c4:9e:2b:85:3a:25:71:43:b5:e5:b6:71:
0e:5a:38:3e:eb:1f:60:f9:8e:fd:5c:9d:97:47:1d:38:31:01:
56:94:ed:81:da:5b:fb:e2:81:9c:2c:82:d5:5d:c4:e0:9b:5c:
29:42:f8:ed:45:45:de:61:f0:1d:63:3b:21:28:e5:0e:a2:3a:
b0:0d:d1:91:02:aa:28:8b:44:a9:3b:e0:26:c9:fe:10:b5:bc:
29:a1:9c:59:36:93:22:5a:ba:b1:79:54:da:58:f5:44:56:22:
47:fb:c0:cf:ba:4d:58:67:8e:f2:3b:d3:64:f5:35:f8:a9:d7:
00:ab:00:71:18:0c:0d:1c:73:e1:fb:b4:e5:95:f4:c3:10:29:
01:c6:89:8a:bc:03:09:92:a6:79:bf:de:19:2c:9f:05:ef:0f:
d1:05:39:d0:c8:bf:f7:e0:ba:91:dc:32:25:a1:3f:60:34:c6:
33:0e:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:35:17 2025 by rpki-client