
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
File: 98ea8d1f-6d28-3754-8463-218ef6072d68.roa (raw, json)
Hash identifier: 2qMs3gZ0ciRcrEa3IwytfD+z/qhvOM/eZmfYr9rKFMA=
Subject key identifier: 05:AC:5C:83:48:2E:8C:F3:7F:D2:C0:2A:92:7F:76:AB:13:6E:C9:FD
Certificate issuer: /CN=6205d76d-4f52-4364-a347-5456e5513fc3
Certificate serial: 010D0C9F4328584B92DCFA7ED58AB35435E2E300
Authority key identifier: 51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
Signing time: Sun 19 Oct 2025 13:00:39 +0000
ROA not before: Sun 19 Oct 2025 13:00:39 +0000
ROA not after: Sat 17 Jan 2026 14:00:39 +0000
asID: 7029
IP address blocks: 23.189.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:92:dc:fa:7e:d5:8a:b3:54:35:e2:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6205d76d-4f52-4364-a347-5456e5513fc3
Validity
Not Before: Oct 19 13:00:39 2025 GMT
Not After : Jan 17 14:00:39 2026 GMT
Subject: CN=9cdc4b0d-a364-452e-964e-e2be63ebfa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:1b:30:27:af:b5:5b:35:3f:85:82:cf:31:
74:e2:77:9f:30:9f:22:bf:57:68:69:6c:95:dc:ea:
45:1d:7a:97:09:1e:3e:1c:3d:97:59:ca:13:39:01:
0c:69:cd:a6:b0:93:00:5c:0c:05:11:6a:3e:d6:fa:
5c:b1:f6:15:b6:03:91:62:e2:67:a1:8e:95:b3:06:
e2:01:37:03:b6:29:5b:d3:6b:2f:59:25:6c:cf:d0:
be:84:c5:00:2e:1e:ce:f8:da:e4:da:f8:ed:03:e2:
71:3c:63:dc:b6:ef:23:c6:73:71:57:b0:e6:9b:30:
85:1b:82:8c:d2:90:30:b1:e6:b0:f2:a8:ba:b4:df:
4d:fe:1f:0d:61:c7:30:40:1b:74:0e:61:e6:6d:9f:
76:a5:83:60:d1:8e:d7:3c:87:3c:6a:82:d3:50:06:
51:41:4e:64:b9:e6:e9:4b:15:28:57:80:f9:a0:5c:
34:2d:06:0b:59:53:7a:4a:4d:9a:4a:1f:5d:01:a1:
08:62:e8:71:3f:b3:86:e1:b1:ec:ba:3c:17:63:1c:
7c:a6:eb:da:0b:66:d4:0a:52:de:a9:ce:95:86:51:
5e:4e:a5:b2:3f:20:b9:ed:b6:c3:f4:bf:65:b8:d2:
47:ac:94:5f:28:55:dc:84:7a:89:28:3d:86:07:e2:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:5C:83:48:2E:8C:F3:7F:D2:C0:2A:92:7F:76:AB:13:6E:C9:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl
X509v3 Authority Key Identifier:
keyid:51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:78:45:ef:42:b5:e9:b8:7a:11:43:c8:fa:38:ec:db:08:55:
7d:99:e1:f0:87:1a:c1:16:e6:32:e9:29:17:a0:a9:ce:49:ba:
da:bb:61:2a:4a:27:2f:14:00:49:5c:ed:aa:32:6f:cc:5c:c0:
23:20:89:f4:73:60:11:ef:2f:5a:ee:ed:b2:d2:22:c3:68:0c:
65:b2:58:d9:56:ca:17:78:e4:e0:91:5a:22:09:f4:97:c4:bd:
7b:4e:b9:11:59:70:71:11:d5:f2:9b:7d:93:a4:48:d2:1e:0b:
47:a1:47:e8:e2:66:11:59:b3:eb:bc:63:5f:72:18:23:f2:1f:
06:f6:4a:30:bb:58:83:d7:1c:da:91:ce:2d:eb:81:f3:3c:27:
47:6b:77:bd:9d:38:eb:50:8d:fb:41:fc:99:4e:f5:7d:14:be:
ea:2f:91:30:17:76:18:d2:e8:56:a1:76:84:53:ca:28:c3:31:
8c:78:55:a0:4b:63:16:c6:5d:65:7b:e0:75:74:64:94:b7:58:
f2:c7:c2:0f:63:0e:72:a1:15:4d:f4:4b:6c:32:89:f9:be:d5:
e5:f5:9e:e6:83:23:74:04:00:0c:ca:f5:c2:11:e5:d1:96:d8:
77:4b:14:f7:d9:dc:f0:a7:db:01:8c:4a:27:63:71:05:e9:4a:
90:a2:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:00:11 2025 by rpki-client