
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa
File: 5c92f33f-ed63-3965-921b-f63d669ebe20.roa (raw, json)
Hash identifier: h6KlR/qBH20LP+yGqbXHgveUEPgNsbATJsJV06a+FAY=
Subject key identifier: F3:01:6E:98:C6:66:65:41:EB:DA:83:C8:F2:FD:6E:64:F7:69:7F:E6
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584BA0D25CE584D06FF41C203C80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 6649
IP address blocks: 199.193.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:5c:e5:84:d0:6f:f4:1c:20:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=d208cd01-6e88-4096-b50b-141b491067cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:16:e3:33:9e:83:64:ed:f9:1e:08:6e:f0:
29:99:9c:e5:af:1f:d2:f0:b6:81:c5:2c:d9:74:c6:
43:a3:b7:0a:33:18:5a:57:a5:e8:f3:90:f7:2b:23:
40:44:89:a9:54:64:d0:a3:13:10:24:59:50:c1:08:
da:0e:81:49:e5:d8:55:0d:e5:4b:17:a8:65:fb:a8:
1f:1f:6c:bf:57:76:72:c7:5d:8c:b2:d4:ab:10:45:
75:c6:71:a5:82:6e:11:0d:b9:9a:1b:fa:da:f9:2b:
01:55:c3:40:a3:4c:6f:35:05:9d:d7:d5:ad:ef:25:
29:92:96:75:c5:3d:95:4b:a8:5b:92:39:a9:0e:15:
40:89:b1:88:08:a4:43:07:4c:cc:32:f5:49:54:fa:
94:d7:82:4b:ce:1f:b0:a7:4b:19:df:1d:26:d8:20:
52:1c:e5:3c:de:31:33:6c:a7:66:89:af:ab:79:86:
4b:cc:b1:cc:f8:d8:fd:43:d8:6b:5a:c0:ef:8e:c0:
0f:ba:b2:ae:81:95:f0:0e:69:60:7a:4b:da:84:87:
51:6e:62:13:f3:48:92:da:5f:a2:bb:fe:90:30:48:
45:dd:82:01:d9:c7:d2:af:76:d4:f6:58:98:8f:33:
43:cc:db:4a:47:9a:f9:58:97:8e:09:bb:85:5c:26:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:01:6E:98:C6:66:65:41:EB:DA:83:C8:F2:FD:6E:64:F7:69:7F:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6e:b0:ca:3f:33:ed:1c:43:16:dd:c7:f4:92:a6:44:d4:f4:
67:c2:80:ef:1f:38:dd:7f:51:e1:01:f4:f3:b7:a8:c1:e5:4a:
6a:65:23:58:c1:21:e0:1c:73:dc:75:e0:14:30:e9:c5:12:24:
4c:7d:35:f1:1b:2e:cf:83:55:17:86:1b:fb:23:ca:eb:41:b1:
f0:33:e9:a4:ee:90:23:80:61:46:0a:83:10:e9:8b:8b:29:b2:
58:e4:63:07:39:82:4c:22:5d:95:84:df:2c:8b:08:62:b0:fa:
77:b4:d1:10:66:93:e3:c1:64:03:d8:c3:87:1f:65:73:67:0e:
89:47:58:79:14:b6:78:36:18:fe:5a:5d:6a:ce:b8:f0:cc:1c:
37:0f:7a:97:ec:ba:7b:24:7b:fe:e7:98:d2:d6:38:8d:e4:59:
01:3d:9f:4e:3a:02:5f:54:77:c6:9a:26:58:44:cd:b5:fc:59:
14:25:dd:29:0a:4a:53:60:82:97:f5:31:6c:1e:d1:28:8e:fb:
56:a0:2e:b9:e7:7b:7d:72:af:11:03:8c:01:9a:b7:d1:5d:7a:
b3:29:6e:12:97:88:57:0c:24:6b:46:30:02:e6:c7:91:f1:08:
9c:e3:2e:c4:9d:0a:75:30:e6:a3:50:20:dd:43:bd:54:79:6d:
45:f4:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:03:50 2025 by rpki-client