
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/62cddcd9-583d-3131-a99e-4d86b2bd33d7.roa
File: 62cddcd9-583d-3131-a99e-4d86b2bd33d7.roa (raw, json)
Hash identifier: 0nI2O1dqM3SyPYuCFz3zFvUbEeBCMToQiQluI9Kc7iQ=
Subject key identifier: 62:C3:0C:72:6F:73:EF:F6:C8:7E:20:1E:EC:4C:10:7E:B4:7D:C1:DA
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584B99D7FCC251B6C8A9719ACD52
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/62cddcd9-583d-3131-a99e-4d86b2bd33d7.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 14114
IP address blocks: 157.133.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:fc:c2:51:b6:c8:a9:71:9a:cd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=3d3bc2e7-2c96-4669-8e09-aa05a044aada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:d7:9f:d6:48:d0:78:61:c3:76:2b:04:80:
c1:ce:0e:19:df:7e:67:6e:e7:17:d3:0b:ab:c4:45:
7f:3d:eb:58:ea:85:12:f1:2f:df:83:2e:6f:4a:75:
a7:db:fc:45:91:1e:b3:8f:bc:7d:d0:13:a3:6e:50:
f2:11:01:c6:73:ae:ef:2e:87:ce:c5:d8:07:49:30:
23:2f:f4:c9:b4:ae:7d:80:86:16:ad:dd:3f:66:ef:
2e:5f:bc:e2:b7:ad:f0:f1:74:5a:ea:5b:fb:ea:bb:
9d:49:b4:d9:43:82:88:3a:7a:a4:75:2f:74:9c:8b:
ba:f6:16:b2:d4:ed:b2:60:be:f7:62:11:99:bd:6f:
70:17:24:dd:45:18:2a:07:fc:9b:5a:f5:ad:e8:88:
cc:b9:28:2f:22:d7:27:93:90:f5:25:62:7e:93:4b:
75:bb:10:86:76:72:89:92:b1:f1:0f:0d:51:25:e0:
9b:74:d0:8f:b6:89:f5:b0:d7:86:bc:9e:31:e6:d9:
cd:5b:52:88:a5:65:29:c1:16:d2:39:4a:da:4e:5c:
e3:5d:29:77:c2:22:a5:ca:1b:b5:fc:ab:8e:73:8c:
86:8f:40:7a:ca:54:04:a7:ee:84:88:2e:ee:85:85:
af:97:6e:be:47:d2:35:ea:40:c1:1c:ab:f0:6c:dc:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:0C:72:6F:73:EF:F6:C8:7E:20:1E:EC:4C:10:7E:B4:7D:C1:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/62cddcd9-583d-3131-a99e-4d86b2bd33d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:24:9d:ea:44:0d:04:fd:2e:43:13:63:0e:a7:27:a5:08:ef:
0c:d1:45:b7:c4:c9:e1:54:6f:18:fd:fe:75:19:d5:6d:f6:44:
00:d0:2e:14:78:d2:a0:c4:6e:5c:43:8e:a1:25:bd:b5:b8:9f:
5a:e1:2c:ea:22:d0:9d:e3:53:ea:49:fd:92:51:db:67:c0:74:
b2:b7:0a:79:74:eb:e2:00:55:c2:ba:13:cd:8c:5d:ae:73:3e:
e1:88:20:95:e5:d1:30:2a:48:ee:03:09:5a:58:81:1a:c6:1b:
59:34:38:d7:5f:51:a0:3c:fc:5e:b0:3a:ac:79:be:1f:4f:70:
15:4d:eb:c5:78:7f:61:ea:fc:a1:39:9c:67:fe:98:ce:45:5b:
f5:67:ad:fb:ed:8b:db:87:c7:43:9c:00:97:67:f0:b1:62:dc:
6f:30:51:37:3f:12:17:be:1f:8b:32:26:d8:6d:90:98:13:9e:
d1:df:21:74:b6:e0:b5:2a:f8:5b:2c:3b:1e:f8:9f:20:12:9e:
9c:be:e9:05:81:36:70:68:f9:8f:64:72:07:b8:e4:47:65:25:
2b:01:87:ed:07:99:fb:da:5f:8b:57:6d:18:7c:8a:55:58:38:
94:88:58:09:97:ab:41:d0:81:7c:74:6a:5f:a2:e4:71:9a:a0:
81:b5:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:23 2025 by rpki-client