
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
File: 5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa (raw, json)
Hash identifier: H2a+ct6/LjnPLLo1JxYGmhwSIzAoNTthVzKuEQx5MKU=
Subject key identifier: F4:2E:C1:C3:18:8B:B4:2F:AE:D0:48:9E:74:E5:F1:B1:B5:56:CD:D0
Certificate issuer: /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial: 010D0C9F4328584B78574A3089E86BA227C7D000
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
Signing time: Fri 10 Oct 2025 01:00:30 +0000
ROA not before: Fri 10 Oct 2025 01:00:30 +0000
ROA not after: Thu 08 Jan 2026 02:00:30 +0000
asID: 398700
IP address blocks: 216.98.224.0/23 maxlen: 23
216.98.236.0/22 maxlen: 22
216.98.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:78:57:4a:30:89:e8:6b:a2:27:c7:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Validity
Not Before: Oct 10 01:00:30 2025 GMT
Not After : Jan 8 02:00:30 2026 GMT
Subject: CN=7db31b6f-286e-4c3c-a4fc-a9e4a533a1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:a6:0e:bf:78:26:c4:95:dd:b9:e5:a9:35:
46:40:e7:38:af:7d:b3:ec:2a:22:cc:b3:90:0c:af:
22:be:3e:5d:25:75:6d:fb:76:fd:05:9a:e0:86:02:
4c:fe:f9:b1:20:3a:b2:2f:be:33:b9:38:22:87:b1:
6d:ba:62:76:90:24:bc:24:03:9f:ec:ba:14:f1:33:
7e:3b:46:63:f9:0f:0e:0b:5d:14:ce:41:5b:57:29:
fe:11:e7:d0:c2:67:d4:bd:df:c1:c3:4a:24:bb:75:
d6:dc:d7:f3:51:85:bc:00:84:62:af:40:b3:e6:4e:
89:04:1f:cd:65:71:ef:62:fe:00:e7:f1:12:41:32:
ef:7f:2c:68:a1:66:8c:f1:63:50:71:c9:23:9b:94:
b8:be:2d:f7:e5:ac:0f:38:59:08:25:7d:f2:a4:cf:
8f:f9:e1:0d:d7:be:bb:11:94:56:4c:a9:1d:3c:8b:
f2:10:11:1a:92:4b:4d:56:07:65:a0:a4:ad:3a:43:
cd:41:f5:5d:df:39:41:08:b5:14:93:e1:82:98:59:
48:de:58:63:aa:c4:d0:26:14:a1:89:84:41:eb:b8:
20:61:26:b1:56:90:b7:54:33:5e:85:49:8e:73:10:
12:9e:2b:84:a7:fc:4b:7d:bb:99:18:2e:f8:c6:7b:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:C1:C3:18:8B:B4:2F:AE:D0:48:9E:74:E5:F1:B1:B5:56:CD:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
X509v3 Authority Key Identifier:
keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
sbgp-ipAddrBlock: critical
IPv4:
216.98.224.0/23
216.98.236.0-216.98.241.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:dc:10:4a:5a:22:4a:a7:b1:70:53:35:b6:ad:04:6d:57:a2:
f4:14:2f:09:98:1e:99:7d:f2:1c:3b:d8:c5:99:9a:93:a2:00:
87:83:aa:b6:0a:2d:c1:1e:7a:f4:d3:a4:15:7a:03:00:6f:7b:
d0:84:da:39:c1:c1:27:97:4f:9d:63:cf:b6:fb:87:66:42:74:
11:26:61:fd:e6:59:67:fd:41:83:ea:37:dc:ce:7e:8e:8d:af:
c5:2a:df:fe:d0:a5:b9:2b:8c:42:d9:00:0f:b6:07:e9:42:6f:
73:6d:fb:f8:ed:55:f5:1b:04:3d:b6:c8:d0:aa:18:35:ee:b5:
89:06:bf:f4:78:df:d2:8b:e5:47:b3:ee:7d:9e:3d:1c:5e:63:
ae:c4:79:68:8e:7d:9a:49:35:a9:94:ce:e9:74:a9:e3:b3:dd:
f2:39:b0:81:cd:71:87:e5:e7:4e:d9:2c:a8:dd:f8:88:39:2a:
c7:c7:94:13:d1:b6:df:04:9f:eb:8c:bd:94:39:bd:d1:cf:06:
cc:af:bb:d6:6a:ab:f0:1d:64:5d:86:af:5d:90:a3:e1:8b:8b:
81:23:8a:e4:e7:be:bc:98:8f:b2:db:c2:c7:2e:89:cd:ba:c7:
11:77:55:bf:35:e6:5e:bb:8d:18:9e:be:b2:8d:49:46:2d:33:
6f:00:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:16 2025 by rpki-client