
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa
File: 4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa (raw, json)
Hash identifier: qF6OcIf6K1wZFQ2knK/fOcvLQO0Ry6PX+gPgeSCd52c=
Subject key identifier: A3:C3:9D:B8:7C:9A:62:DF:5E:83:11:40:5F:98:E0:1E:99:00:A5:C2
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F4328584AF7EBDAEF1833EAE05927E100
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa
Signing time: Mon 25 Aug 2025 01:00:33 +0000
ROA not before: Mon 25 Aug 2025 01:00:33 +0000
ROA not after: Sun 23 Nov 2025 02:00:33 +0000
asID: 30045
IP address blocks: 192.219.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f7:eb:da:ef:18:33:ea:e0:59:27:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Aug 25 01:00:33 2025 GMT
Not After : Nov 23 02:00:33 2025 GMT
Subject: CN=779c3b00-2b2d-4b1b-91eb-be0dd9522a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:7e:4e:9f:de:d2:55:f1:3b:e9:79:0b:ae:
cf:ed:a7:82:b6:22:82:5b:15:c2:83:50:c5:18:80:
20:3f:a9:fc:03:8e:89:58:bd:8a:46:0c:67:a9:16:
a2:4e:01:3e:b8:4a:b7:49:34:17:39:b8:0b:31:e0:
be:22:ee:9f:f4:85:a3:98:43:66:6c:56:ff:21:17:
32:2d:45:74:36:e4:8f:3d:83:14:62:81:22:22:d6:
6c:6d:4c:44:91:6c:82:3b:64:f5:5d:49:f8:77:41:
b5:1d:0c:db:0e:9d:e2:c3:4c:ed:b2:19:20:7e:e5:
6e:3b:52:9b:3b:99:74:b7:d3:5b:3d:b1:7b:0c:5c:
1e:60:73:0c:34:e5:86:e8:2e:11:b3:03:aa:2d:f6:
c3:59:eb:ab:66:96:82:bb:ad:dc:f2:43:d2:d9:90:
c5:4d:8d:e3:40:fa:70:f2:09:80:ee:2b:35:c1:d7:
84:8b:88:a4:ab:c8:cd:88:93:49:cb:c9:96:e4:ef:
90:b1:86:89:99:72:22:ee:78:d7:74:0a:2b:2b:fb:
87:5c:dc:72:b0:9d:4d:73:00:15:d0:9f:61:cc:73:
8f:88:ca:79:06:20:9c:c4:f1:b2:b2:62:5b:39:ce:
44:ae:1e:bf:72:ec:64:9e:43:2e:ff:e3:72:f6:08:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:9D:B8:7C:9A:62:DF:5E:83:11:40:5F:98:E0:1E:99:00:A5:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e8:a5:ff:b4:0f:d8:b0:16:85:dd:49:b5:53:a2:d9:19:4a:
7e:16:69:c6:07:05:99:14:1d:66:ee:c3:db:4e:e4:bf:48:cf:
36:51:b9:88:32:37:62:38:07:f2:51:22:21:f6:b6:1c:14:71:
81:56:5d:89:db:31:f4:0c:ef:61:a1:08:54:c0:65:d1:d3:0e:
c7:47:70:02:e4:78:a3:e4:8f:8a:1b:e3:96:9b:20:56:e5:6f:
68:5e:a1:24:e2:ab:03:c8:8c:ab:1d:6b:2b:c1:f5:ad:51:c0:
7a:2b:dd:ad:cc:b7:cc:21:f7:9f:53:db:0d:61:86:57:fa:10:
bf:8b:bf:f5:74:4e:c0:04:ae:fa:3f:b0:bc:80:8d:34:7b:90:
2b:12:0c:a6:a3:88:18:65:93:b3:38:0f:91:05:02:43:94:5f:
da:11:c4:1a:24:4d:d5:0a:1f:5b:bd:90:12:76:bf:0c:3b:1e:
3a:3d:6e:ae:76:e7:0d:8a:dd:de:45:34:82:80:68:ab:17:0d:
24:ac:61:37:5f:41:71:65:07:1a:2d:01:1e:f9:87:14:8f:aa:
bb:f6:6d:07:43:08:bf:b1:60:bf:d6:1b:3c:ab:c9:90:81:17:
8f:0d:83:31:bd:74:19:09:93:99:18:e0:33:5c:3f:85:7f:36:
57:87:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:14:59 2025 by rpki-client