
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
File: b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json)
Hash identifier: uKXguR/rg23nFfIjNZC9yr+CtMmyunUDJ6aCinC27fA=
Subject key identifier: 64:49:36:48:9D:85:73:D4:8D:BE:94:DA:36:5D:8D:AE:0A:4B:53:7B
Certificate issuer: /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial: 010D0C9F4328584B6D2C90D34DDB58449C92D780
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
Signing time: Mon 06 Oct 2025 01:00:33 +0000
ROA not before: Mon 06 Oct 2025 01:00:33 +0000
ROA not after: Sun 04 Jan 2026 02:00:33 +0000
asID: 36222
IP address blocks: 23.138.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6d:2c:90:d3:4d:db:58:44:9c:92:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Validity
Not Before: Oct 6 01:00:33 2025 GMT
Not After : Jan 4 02:00:33 2026 GMT
Subject: CN=9f630ec0-2df1-49c8-8c29-51037dc6b070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:27:15:10:d8:96:0c:74:65:c9:36:82:b3:
b6:76:4e:06:83:f4:a7:a0:3f:39:fc:e7:ec:21:e7:
f5:8e:25:75:82:d6:30:38:25:2f:62:0d:aa:d4:c7:
77:ac:83:89:17:e7:08:ac:43:bf:c1:f5:ba:e9:a8:
28:26:4d:67:e4:a2:df:70:23:bb:e0:d1:d0:4d:2b:
8f:c0:20:70:62:4d:a8:7d:5f:74:71:ae:c9:0b:0a:
4c:e7:a8:56:6e:70:a9:a7:29:f8:94:b0:58:86:30:
ed:20:ab:41:09:17:8e:9d:2e:24:1b:77:36:d4:b1:
04:2f:1a:99:e7:cf:32:d8:39:43:00:63:76:d6:b2:
b0:85:d7:bc:de:77:5e:bb:20:cb:ac:90:8e:f9:2a:
b5:d8:bc:27:0e:f7:c1:f7:1d:d5:a6:02:e7:03:12:
0e:59:0a:d2:bf:1c:01:80:ad:bb:d4:31:e2:29:07:
50:cd:11:a2:15:36:27:dc:b0:3f:de:99:15:a9:73:
e5:3f:03:d7:ac:93:0d:08:fd:7a:52:24:5b:ff:09:
ec:e3:66:6d:f2:d4:19:a8:30:de:33:14:8f:6a:92:
bb:0c:d1:bd:8b:f3:90:3c:55:b2:1a:11:75:29:8d:
6e:1b:01:e4:08:01:52:e0:36:d5:bb:92:96:a2:ec:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:36:48:9D:85:73:D4:8D:BE:94:DA:36:5D:8D:AE:0A:4B:53:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
X509v3 Authority Key Identifier:
keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:8a:33:90:a2:39:37:a6:5a:76:ef:82:e0:86:9d:2b:69:d5:
b1:3c:c0:40:de:35:21:f0:1c:44:69:00:fe:95:10:e1:9c:59:
a4:3c:f7:82:d7:31:b2:5c:bb:6f:0a:94:5f:c8:54:43:18:b6:
20:bf:77:36:b6:cb:4f:0f:ec:77:43:7c:37:6b:3b:7b:60:68:
12:78:93:91:23:8b:b7:1b:95:be:fb:f5:bc:98:92:12:dc:38:
d0:4c:17:83:51:66:04:e7:d0:89:8c:36:8d:1f:0a:c8:e7:d3:
be:fa:df:f2:0b:fd:a1:0c:db:6a:68:60:54:ae:9a:de:65:17:
39:81:6f:73:ed:5b:37:e8:12:76:49:2a:a0:04:64:a5:4c:39:
e5:eb:4c:f6:09:fc:ac:5f:68:5c:d7:b2:5f:1c:2f:dc:ce:aa:
65:1d:2c:11:69:60:96:90:de:b9:9a:db:ac:9f:0e:ee:61:05:
ef:82:e4:2c:5f:d0:9c:da:ef:46:98:e7:44:d0:7a:dc:e9:b5:
c0:1d:fc:07:db:79:22:98:50:d6:d0:79:69:b9:5f:1f:0e:f8:
f4:1e:ee:ac:61:52:15:c9:5c:40:03:09:d2:b1:6d:86:5e:c1:
24:a8:c6:a7:c8:99:8e:7b:8d:48:8e:0b:96:2c:55:37:06:a9:
bf:90:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:49:09 2025 by rpki-client