
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa
File: f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa (raw, json)
Hash identifier: kKKos5Pc3o+1vAwdxvtcj9g9HxxYVCpiImaRoWpWLn8=
Subject key identifier: 9E:DA:9D:32:32:1C:E1:7D:66:7D:9D:2B:72:8D:1E:47:C3:41:EB:5B
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F4328584B328C43BB144C8BFF7852F000
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa
Signing time: Mon 15 Sep 2025 01:00:33 +0000
ROA not before: Mon 15 Sep 2025 01:00:33 +0000
ROA not after: Sun 14 Dec 2025 02:00:33 +0000
asID: 63178
IP address blocks: 67.22.208.0/21 maxlen: 24
67.22.216.0/22 maxlen: 24
67.22.220.0/24 maxlen: 24
209.51.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:32:8c:43:bb:14:4c:8b:ff:78:52:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Sep 15 01:00:33 2025 GMT
Not After : Dec 14 02:00:33 2025 GMT
Subject: CN=0d5aaaa0-f248-43ad-97dc-c1ff6daf3cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:db:0a:f4:46:19:96:97:72:6d:bd:47:b0:
9a:a6:d6:d6:d7:62:31:1f:bf:41:c4:e3:27:2e:7a:
28:9d:82:8a:1f:2d:8f:ec:e8:d6:d1:70:e9:d0:39:
1f:3e:8b:71:1e:73:f7:64:60:ca:0f:ee:4d:17:d7:
f3:33:4b:ef:5e:05:47:41:35:b7:fe:06:19:ad:1f:
dd:40:a1:a5:58:3f:09:ff:01:9a:06:dd:44:5b:a1:
cf:0f:d7:72:51:d2:aa:c3:29:1f:0b:33:72:1c:ce:
44:01:fb:e7:bd:cd:ea:56:b7:45:53:8e:51:3e:87:
07:12:eb:27:cb:20:ea:0f:4d:0e:20:e1:10:fa:51:
2b:32:e6:f0:a1:4d:c2:9f:cc:b0:62:7c:f7:7a:dd:
fd:2f:0d:86:3b:86:fc:65:24:4b:a7:79:69:54:51:
e7:fc:af:a8:4b:dc:72:22:5e:43:33:97:62:3c:2b:
1c:1c:94:34:b1:f3:e9:73:72:b7:cf:de:89:ff:51:
c2:c2:7f:7d:c9:37:18:69:e2:6e:16:ed:3f:f3:7d:
2c:c9:d2:ec:6f:c8:a9:ba:b9:62:aa:f9:0f:60:41:
c7:c5:ce:61:2b:16:11:3a:23:5d:6b:2a:e0:07:4f:
5e:10:f6:34:d4:77:b2:91:81:72:eb:a4:e0:d1:55:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:9D:32:32:1C:E1:7D:66:7D:9D:2B:72:8D:1E:47:C3:41:EB:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
67.22.208.0-67.22.220.255
209.51.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:74:c6:8c:0d:b2:32:42:b3:ea:e8:87:4c:35:b8:48:e1:10:
e8:3b:f3:a0:a0:59:ca:aa:a3:73:1d:64:f7:a3:3b:2a:36:20:
93:b8:31:c7:6c:9f:a7:7f:68:5c:a7:ba:ee:60:7c:e5:81:e0:
10:fd:ae:ec:7f:97:04:18:6c:11:81:d3:1f:f6:5c:6c:61:99:
8e:d4:be:03:4c:dd:60:c9:52:f8:da:ef:94:5c:70:71:58:6a:
1a:0f:2f:4b:ba:2f:48:0b:12:47:93:07:d9:da:09:af:df:28:
c5:e4:0d:03:fe:c8:37:fc:44:5b:d5:25:e3:1f:df:53:ba:15:
ed:c5:d0:a8:f3:ec:ba:45:6c:a0:af:a1:57:57:1a:52:98:ce:
4f:34:32:0a:d1:db:cc:55:cf:42:f8:ed:bd:d4:3a:5f:46:f1:
b9:17:6e:00:14:b3:d0:4a:08:e2:05:3d:28:63:d1:6c:09:fc:
d8:52:3a:12:c2:d6:1d:30:dc:cb:a7:a8:a8:5a:0a:d6:6b:f4:
aa:7d:02:a6:56:de:da:fc:40:e8:fa:32:08:97:2f:e0:53:79:
f5:8f:a9:c4:98:9c:93:9c:11:68:e8:af:64:40:16:9c:0d:88:
4b:8a:33:34:b8:32:c5:c8:dc:25:15:11:a8:d9:f5:9f:6a:45:
39:7c:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:34:27 2025 by rpki-client