
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/000b0e7b-afe6-3c46-a731-42662fdc95f2.roa
File: 000b0e7b-afe6-3c46-a731-42662fdc95f2.roa (raw, json)
Hash identifier: 2RgjQkrHUtWad0fgm+FYzm4oXW3E3eiITey0aHuX5r0=
Subject key identifier: 20:C3:77:5D:6C:E7:A4:E6:4D:6D:C3:5D:9C:6A:0E:C3:F2:2E:5C:B8
Certificate issuer: /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial: 010D0C9F4328584BBB758740F333CACC09478A80
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/000b0e7b-afe6-3c46-a731-42662fdc95f2.roa
Signing time: Mon 03 Nov 2025 02:00:31 +0000
ROA not before: Mon 03 Nov 2025 02:00:31 +0000
ROA not after: Sun 01 Feb 2026 02:00:31 +0000
asID: 31867
IP address blocks: 23.191.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bb:75:87:40:f3:33:ca:cc:09:47:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Validity
Not Before: Nov 3 02:00:31 2025 GMT
Not After : Feb 1 02:00:31 2026 GMT
Subject: CN=d297202b-fa37-4822-8f75-4b35b38b3bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:93:84:ac:4d:c2:29:91:a8:52:f2:c2:c2:
e2:d6:4f:9d:2b:24:6c:d2:7b:94:4e:be:9c:d2:e1:
da:75:3b:db:f5:39:e2:6f:17:3f:11:92:f3:29:1d:
ee:9d:56:fe:1b:12:3d:37:34:47:37:c3:2f:64:6f:
98:1f:af:f7:79:a3:73:17:c9:13:05:2c:bd:bf:d8:
8b:58:e2:03:cc:d0:f1:84:93:46:cc:84:f9:33:d3:
6d:79:dd:a5:29:ea:0e:d4:b4:6e:a8:65:e7:8f:83:
75:32:d0:a0:69:aa:6d:29:58:82:2e:eb:28:78:7e:
39:94:57:2d:d4:ef:0e:e4:f9:46:9d:68:6b:2a:7b:
64:bb:f2:b5:96:62:30:c7:1b:d4:db:22:87:f7:b4:
42:15:af:56:f4:89:b4:1c:67:dc:47:94:cc:e9:4b:
90:25:d4:6a:c4:e7:f5:dc:df:fa:da:a8:84:58:71:
49:da:9c:66:bb:62:04:bd:2b:85:20:43:85:d0:1a:
97:5e:90:a6:8f:03:ae:d1:3f:3a:3f:cd:f4:c9:14:
d4:fe:4b:e4:8c:64:23:42:87:d7:6c:f6:b3:e0:c0:
d7:fd:13:ae:94:78:14:76:76:40:07:32:22:13:55:
4b:42:85:03:87:a3:60:84:77:1e:ac:6f:0b:cd:27:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:77:5D:6C:E7:A4:E6:4D:6D:C3:5D:9C:6A:0E:C3:F2:2E:5C:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/000b0e7b-afe6-3c46-a731-42662fdc95f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
X509v3 Authority Key Identifier:
keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:4a:e4:90:50:a3:4d:f5:b6:cf:42:04:08:0d:3e:c5:10:65:
a1:b4:19:78:c3:6b:1a:dc:63:f6:bb:65:95:95:24:12:c8:53:
ad:f0:94:34:e1:85:77:f7:ba:7a:5f:b7:ab:fe:6e:6a:b4:bf:
f7:7f:63:c1:89:b2:2d:03:01:d9:ca:5a:54:f6:3c:7f:df:46:
d6:25:a2:d9:86:d4:ad:2e:8d:ea:5c:3a:9f:02:60:ed:14:4a:
e5:ac:c4:50:09:96:c6:a6:e2:6f:f2:51:75:01:8a:b9:06:17:
3c:a4:08:c2:29:8e:9b:e8:ac:e7:62:78:dd:9d:4c:c8:22:75:
f7:dc:97:9a:a1:60:86:69:ff:75:89:19:c5:3b:5a:60:75:d4:
69:e8:aa:fd:e5:80:ae:35:1e:17:12:94:d2:35:65:8b:13:2c:
b2:3a:90:4d:1e:48:9e:b0:a9:ee:66:a4:10:10:fa:62:e4:4b:
29:ea:9b:24:a6:48:be:05:93:40:f7:f9:f6:61:bd:2e:05:ff:
3b:7d:e3:4d:be:9c:a9:c6:be:16:cb:cb:b9:89:97:d1:64:75:
26:57:bf:2b:ae:40:00:da:2f:bb:4c:fb:a4:79:0b:93:cf:04:
36:3d:b1:20:00:e5:73:7d:e6:fc:61:54:68:ed:4d:4d:ba:43:
c4:6b:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:55 2025 by rpki-client