
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82fbdc3f-c87d-3405-8de1-8b7281435450.roa
File: 82fbdc3f-c87d-3405-8de1-8b7281435450.roa (raw, json)
Hash identifier: MeiofLwHLkXuxm0cEvRJbtBUjag1mVC4qO2VVkZYHmA=
Subject key identifier: C3:6B:BF:60:97:9E:B8:1A:B1:5D:2E:E4:F1:21:91:03:6E:BB:96:B2
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584B3748BA1FBE1E6E538E887BC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82fbdc3f-c87d-3405-8de1-8b7281435450.roa
Signing time: Tue 16 Sep 2025 17:43:42 +0000
ROA not before: Tue 16 Sep 2025 17:43:42 +0000
ROA not after: Mon 15 Dec 2025 18:43:42 +0000
asID: 23473
IP address blocks: 68.234.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:37:48:ba:1f:be:1e:6e:53:8e:88:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Sep 16 17:43:42 2025 GMT
Not After : Dec 15 18:43:42 2025 GMT
Subject: CN=151dabb4-da61-4348-b4f5-865df2ff017d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:3f:b7:0d:34:bb:23:85:17:dd:3b:a1:64:
1c:85:9b:8c:38:52:fd:24:e0:e8:5d:1b:36:71:b9:
91:c0:5e:a5:f4:2b:4d:46:9e:b6:4d:84:d5:1e:f4:
d4:98:62:07:66:bc:e2:c0:4c:69:88:87:ea:48:6a:
ad:a2:26:9a:5c:f1:b1:af:46:ab:31:ff:42:87:65:
d0:b7:4e:d2:0f:0f:9c:84:a8:79:f1:99:7a:77:e3:
db:7d:c4:95:cc:c7:76:81:bb:9a:1a:f4:1a:4a:65:
4c:d7:61:cc:0e:2c:f9:d1:4b:63:8c:08:25:20:d2:
ee:27:f6:06:f2:2b:ad:cc:07:8a:08:d3:95:c1:b2:
d9:18:11:7a:3e:bb:e3:30:7d:f3:80:09:b3:e6:40:
a4:b7:63:e8:60:9a:92:09:b6:4e:ca:e8:61:6c:e2:
75:b3:66:47:79:3d:f6:40:8e:bb:4f:4b:1c:47:90:
44:02:3a:13:ab:e1:ed:a7:93:8b:b0:08:29:ed:7a:
7b:97:e4:aa:58:4f:03:ba:ef:a8:e6:b5:ee:5e:15:
b1:87:86:5f:74:a8:e5:a5:95:12:90:2a:4e:09:e0:
b7:db:39:2e:05:bb:26:f0:84:99:ec:19:cf:24:88:
d6:67:51:6b:26:a8:dc:e4:ae:73:3f:ee:56:85:0b:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6B:BF:60:97:9E:B8:1A:B1:5D:2E:E4:F1:21:91:03:6E:BB:96:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82fbdc3f-c87d-3405-8de1-8b7281435450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c6:62:d6:dc:43:97:ea:24:1b:10:8b:a2:b6:10:8e:01:e9:
15:4a:b7:eb:bd:98:88:c6:da:2a:36:2d:96:f4:73:14:e0:47:
38:df:d7:83:c8:62:ca:30:c2:2e:c7:4b:f2:c1:78:66:cb:ef:
48:c8:3a:20:74:94:df:be:89:6e:b8:07:36:7f:e5:4f:f2:c7:
44:0e:f8:de:a1:a2:b3:2b:8c:bd:f5:bc:e5:09:94:36:b5:a6:
29:b6:d2:e8:1a:14:a4:d4:db:83:f5:d3:3a:2a:05:27:e5:12:
de:77:5d:25:25:6e:72:93:c3:f5:f0:1d:4e:89:c3:42:6c:7e:
ba:f0:62:5e:95:b8:40:f2:0c:79:4a:6d:a1:74:e6:af:5c:8b:
e1:54:7a:25:eb:84:ee:9e:1e:cd:d6:32:80:9b:6e:60:f0:68:
18:18:73:ac:61:6a:51:95:96:d9:3f:c3:24:69:58:85:b5:ef:
46:be:ad:be:29:4e:9f:9d:ab:11:95:1d:11:d1:51:4a:21:bb:
91:94:6e:5f:43:34:38:21:51:9c:57:02:4e:a4:94:0a:54:a5:
0d:22:c4:bb:81:da:7e:36:2e:63:7e:2e:10:93:5e:37:cf:27:
ee:4a:4b:06:e4:d6:c1:10:d4:e8:02:15:29:49:8b:41:bd:e0:
a1:7d:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:33 2025 by rpki-client