
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/c75c7c85-138e-385b-b1c1-05714b607ace.roa
File: c75c7c85-138e-385b-b1c1-05714b607ace.roa (raw, json)
Hash identifier: FHeFlFNUZiQWpHo7shniq/+fqD8nXqCudEEpfVutoLE=
Subject key identifier: F2:54:92:AD:A4:B6:4B:48:26:D6:4F:E3:63:F1:8A:2A:92:5E:CB:F9
Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial: 010D0C9F4328584BBE404607A3A400AC98E8CB00
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/c75c7c85-138e-385b-b1c1-05714b607ace.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 18888
IP address blocks: 64.42.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:46:07:a3:a4:00:ac:98:e8:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=54b7a750-8736-422f-bd71-50ed45f0947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:23:15:dc:0d:00:3c:f3:19:95:c9:16:79:
7c:44:23:7d:69:c6:57:25:57:18:bd:76:82:04:ef:
bd:ac:38:67:e5:20:e5:da:ea:23:47:c0:5b:d4:b2:
06:73:81:b4:ef:5e:49:c4:9e:fb:c9:71:51:e5:d9:
ec:58:07:79:2e:be:05:4c:5c:b8:e9:ce:7a:47:16:
13:15:52:e6:d0:c6:2d:44:f1:59:21:76:84:0d:ce:
85:e2:d9:ff:3b:e2:4b:d3:0f:98:81:c0:7b:94:22:
96:5b:65:b1:27:d6:f7:01:28:f5:2a:3f:92:fb:82:
0d:68:dd:d3:64:d5:25:c6:27:8b:94:6d:cb:5b:ae:
6b:a7:f7:b5:ca:ba:91:c9:da:3f:b9:6e:6f:73:eb:
2c:0b:68:9f:70:6d:c0:c4:75:67:ab:b7:9e:10:21:
ff:c5:25:a4:2e:41:90:ee:2d:8a:91:b4:ca:da:80:
46:60:34:2e:05:37:d2:08:cb:6e:ee:fa:22:91:07:
7a:ff:4c:51:96:91:b3:12:44:54:b0:5a:5c:cb:74:
29:be:d9:9a:0a:a1:97:2b:30:b6:1b:6a:6b:b8:08:
73:4b:be:52:e7:32:1d:3f:75:67:c9:da:44:b5:c3:
6b:5c:8f:75:87:27:43:e7:60:65:bf:0d:65:7c:6d:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:92:AD:A4:B6:4B:48:26:D6:4F:E3:63:F1:8A:2A:92:5E:CB:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/c75c7c85-138e-385b-b1c1-05714b607ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
X509v3 Authority Key Identifier:
keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.42.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:39:4c:ea:46:32:5e:c4:cc:ed:d3:a7:a6:cc:c4:61:d4:f0:
c2:c7:23:9f:5f:da:ea:08:fe:54:7e:d9:e2:f0:31:c5:c3:ae:
65:4a:ef:00:b4:c6:e0:da:e8:40:d7:5a:8b:32:f3:0a:e4:46:
a7:84:47:a7:52:b4:28:d8:8b:16:20:cd:46:08:9a:05:22:aa:
d7:4e:c6:01:b0:7c:a9:7e:e6:4a:8f:5e:f0:bf:44:ab:7a:51:
16:43:c5:a7:5b:b0:0e:80:b1:f5:da:09:8d:e6:28:61:eb:af:
1f:df:46:6e:96:4b:c8:98:f9:22:21:6d:dc:a2:62:77:db:df:
aa:b5:2c:ab:f6:c8:bd:4c:76:f5:0f:55:b4:5c:5c:00:1a:f4:
b3:a6:9a:21:07:fe:ac:23:41:30:9f:51:c4:73:b8:63:f6:aa:
e3:18:e9:c4:2f:d8:3d:cd:ea:57:49:a2:8d:6a:aa:59:c5:93:
93:37:d3:89:dc:ee:c6:13:ba:01:af:d2:fb:7d:11:17:7f:ca:
22:8e:26:04:3c:8d:9b:80:68:69:a6:b6:99:c4:1d:6b:1a:81:
53:a0:a2:eb:50:7b:fc:8a:f1:4c:2e:bf:de:dd:fb:13:57:7e:
a2:92:31:c9:71:df:07:1b:7c:24:64:0b:92:5f:3e:79:d7:76:
9b:c9:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:50 2025 by rpki-client