
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
File: 2253824c-087b-31f9-b1ec-ba694703e8de.roa (raw, json)
Hash identifier: hdSOBPZwe7/XY/XOx+a3y0sSwr0NdReieI2916sdaaU=
Subject key identifier: 7D:E5:F4:DA:FA:B2:D2:E0:9F:5D:24:0F:74:2C:68:CB:BD:B1:64:AF
Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial: 010D0C9F4328584B92DCEA8168679C5206422440
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
Signing time: Sun 19 Oct 2025 13:00:39 +0000
ROA not before: Sun 19 Oct 2025 13:00:39 +0000
ROA not after: Sat 17 Jan 2026 14:00:39 +0000
asID: 11650
IP address blocks: 65.255.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:92:dc:ea:81:68:67:9c:52:06:42:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Validity
Not Before: Oct 19 13:00:39 2025 GMT
Not After : Jan 17 14:00:39 2026 GMT
Subject: CN=bb289887-4204-4589-acb0-1cfeb29d2e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:d1:3e:20:a1:dd:da:75:f6:17:e4:f0:02:
8d:e0:a2:41:66:93:ea:07:b2:4e:0b:e3:2f:87:5b:
a2:b0:f7:2d:7c:8b:f6:3e:24:21:4e:5a:4c:12:c7:
3d:6b:77:12:ad:27:9c:64:1e:00:fb:20:1a:69:53:
44:4c:59:81:9c:f2:95:67:c9:be:83:0d:49:bb:ee:
f8:59:bb:b0:ea:7f:8a:07:60:d1:8d:07:c9:0e:19:
77:b9:d9:d9:4e:98:2c:11:90:b5:fd:4e:fc:5d:e8:
e1:7b:04:01:0d:32:9f:ca:f9:a7:be:d0:47:92:01:
a7:38:a3:61:2b:91:99:8a:0a:f0:f4:55:8b:fa:99:
1f:e4:c9:5a:f5:30:03:a5:83:78:db:1f:17:21:1d:
e5:7a:63:e9:58:4a:aa:36:3a:4c:ea:ee:cb:5b:ed:
4d:48:1f:26:58:1f:7c:93:37:89:82:7a:7d:64:1b:
02:1a:ef:50:a4:3b:19:a5:13:7d:ba:0e:aa:ef:34:
71:36:4c:dd:a6:a7:7c:11:f1:be:40:6b:4d:6a:60:
0f:8d:45:c6:40:c1:94:55:63:8e:46:86:64:f5:d8:
b7:6c:05:87:fb:c1:b6:13:3f:21:01:68:b8:a6:bc:
b0:27:88:8e:7c:6d:c5:1c:d1:d9:47:dd:4a:19:29:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E5:F4:DA:FA:B2:D2:E0:9F:5D:24:0F:74:2C:68:CB:BD:B1:64:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
X509v3 Authority Key Identifier:
keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
sbgp-ipAddrBlock: critical
IPv4:
65.255.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:99:66:8e:bb:4e:e1:6f:ba:35:ac:56:10:27:fa:5b:a7:c4:
ff:2b:12:bf:b9:09:39:21:ba:99:a3:9a:11:bf:04:9c:f0:46:
16:3d:1a:82:95:f6:a9:d6:4d:a1:18:3a:1e:d8:36:93:9b:3b:
df:04:cd:7d:ee:04:8a:16:06:18:85:5a:1a:53:76:66:da:4a:
b7:78:26:6c:e5:43:49:83:c6:9e:87:f5:be:fe:da:91:e1:2d:
16:6c:57:ad:71:ae:27:d4:35:97:f6:b1:4a:9a:c8:36:93:d8:
78:96:d1:d0:46:4d:19:37:d7:bb:74:83:bb:8c:d8:3a:07:62:
22:7d:5a:88:92:fc:63:fc:e1:b3:33:a6:3c:68:a7:84:8b:02:
ad:ee:60:11:ea:54:d0:24:0d:0c:ff:c3:6e:36:15:4c:94:63:
be:da:d7:6c:90:6c:ac:0e:99:30:98:cb:b6:fc:4c:49:89:3b:
77:9f:c0:94:c9:eb:2b:d5:2a:7e:5a:b2:3a:70:5a:4f:d5:71:
a7:91:83:39:d9:25:48:0d:ef:d3:9b:94:8f:ef:35:a9:29:80:
20:64:e2:72:d7:f2:fd:be:7a:0f:c3:9f:ff:79:5e:d0:33:02:
d4:b9:6f:7d:1d:00:19:a5:33:81:85:69:85:ad:d3:68:a9:af:
c9:a4:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:34:21 2025 by rpki-client