
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec772d27-1192-3c18-888b-c12668fb07a2.roa
File: ec772d27-1192-3c18-888b-c12668fb07a2.roa (raw, json)
Hash identifier: UKBdoj9TZWC9VsfCkm/WvVOYJMkzcTY2VB+T25FArdo=
Subject key identifier: 83:BB:A0:08:E0:8B:B2:1A:00:C2:B1:0B:C7:EC:3C:F3:14:A9:73:FE
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584B73C07EE91D16A956F032FD80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec772d27-1192-3c18-888b-c12668fb07a2.roa
Signing time: Wed 08 Oct 2025 09:33:31 +0000
ROA not before: Wed 08 Oct 2025 09:33:31 +0000
ROA not after: Tue 06 Jan 2026 10:33:31 +0000
asID: 23473
IP address blocks: 153.33.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:73:c0:7e:e9:1d:16:a9:56:f0:32:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Oct 8 09:33:31 2025 GMT
Not After : Jan 6 10:33:31 2026 GMT
Subject: CN=e7cde769-d4b5-48a6-92ce-c7055ff38f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:6f:27:ac:df:78:9c:74:0e:c5:ea:b3:f1:
5a:4e:f4:2e:c7:b0:2f:32:c8:53:7d:14:7b:2b:52:
f7:48:8c:e9:c5:5f:bb:47:33:18:b9:f1:00:ee:94:
cf:25:f2:50:f8:42:37:df:1c:58:ad:4e:0c:8c:48:
33:99:6c:2f:57:ed:d3:ae:3d:44:37:24:77:21:17:
5e:35:42:bf:80:67:1a:b4:be:09:23:c0:ec:17:6f:
69:51:47:93:c1:50:4b:e3:4b:d8:06:22:0b:03:59:
ce:7f:38:6f:80:17:3f:69:fe:bb:96:03:81:fb:c1:
56:e8:3d:de:ac:53:a2:20:14:e0:ab:8a:01:1e:cf:
8e:fa:0f:9f:16:38:cc:f5:95:3c:d2:5a:bd:39:ab:
f8:78:92:f2:be:48:bb:5f:06:10:8c:85:61:27:fe:
41:c1:a4:96:b1:d2:e6:fb:d5:ef:c3:4c:8c:f8:43:
ba:01:70:fd:d2:41:f8:7d:3e:41:3e:c2:1e:c1:ec:
f0:db:24:d2:e1:6a:ad:c3:b0:59:22:cf:45:c9:c1:
51:0b:a9:11:97:43:c9:5a:25:be:eb:32:97:62:29:
5d:28:df:c8:11:df:d3:f9:92:10:77:2f:da:4f:50:
34:55:d8:c5:2a:3f:b2:ac:73:86:a8:09:0f:db:62:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:A0:08:E0:8B:B2:1A:00:C2:B1:0B:C7:EC:3C:F3:14:A9:73:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec772d27-1192-3c18-888b-c12668fb07a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:46:ff:2d:c4:73:98:e6:f2:06:91:1c:28:a4:43:7f:02:fb:
32:a2:f2:90:e5:70:98:96:4f:b2:26:be:14:27:55:f2:2d:92:
ce:21:fa:f6:6d:15:8b:59:b1:68:ce:b4:65:9d:39:48:2f:b9:
e1:a5:c1:9a:14:4f:75:2f:30:37:c4:d1:e2:d6:08:05:90:c7:
7c:af:4c:cd:ab:32:3b:fe:bf:27:a1:45:eb:c5:5e:60:53:8d:
a4:30:da:61:c0:4d:de:d6:75:79:73:54:4c:fc:b8:04:77:1a:
a7:56:49:b2:01:c0:8e:46:76:0d:72:58:3b:73:5a:01:16:84:
74:f8:9e:01:ec:dc:a9:5b:23:20:d9:c8:fe:bb:40:8a:79:92:
e8:d3:ca:5b:6a:76:80:74:e2:1d:06:71:7f:27:7b:0f:df:c6:
80:28:e1:20:c6:6d:7d:f3:cd:cc:58:aa:7a:51:6b:45:88:d0:
f7:4e:76:d2:d7:32:56:df:fc:9c:13:fe:dc:77:cc:70:18:3e:
22:76:78:41:cf:4c:ae:84:64:bd:a9:3c:eb:78:c1:05:ac:ef:
b9:93:59:20:33:20:7d:de:e7:78:55:80:22:f9:97:08:40:ea:
ef:96:e2:86:c8:01:45:09:d4:e4:bc:71:09:2c:ce:c1:0c:51:
b0:62:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:29 2025 by rpki-client