
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
File: c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json)
Hash identifier: iffEEDlHPXZBVLOkxbyzO2kvAPU+8IyBiec/mWLjcg8=
Subject key identifier: 7E:5C:31:32:65:41:84:0D:0C:02:12:2C:29:77:3A:E0:10:B4:AF:10
Certificate issuer: /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial: 010D0C9F4328584B0CDC1C5BAD5C38596FB0EB80
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
Signing time: Mon 01 Sep 2025 13:00:40 +0000
ROA not before: Mon 01 Sep 2025 13:00:40 +0000
ROA not after: Sun 30 Nov 2025 14:00:40 +0000
asID: 400655
IP address blocks: 23.191.184.0/24 maxlen: 24
2602:f7e4::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0c:dc:1c:5b:ad:5c:38:59:6f:b0:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Validity
Not Before: Sep 1 13:00:40 2025 GMT
Not After : Nov 30 14:00:40 2025 GMT
Subject: CN=c6436527-4d36-4c6d-b195-4cbde5ec8e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:02:f1:42:2f:b8:a7:74:03:d6:88:55:67:
84:bd:a8:32:02:aa:08:cb:aa:b6:df:7b:0c:ce:27:
3f:b6:9d:79:f7:59:6e:ec:ad:f3:8f:a3:0f:86:1b:
45:a5:55:9c:39:8e:4a:4a:18:03:ce:84:f2:ae:e4:
04:7f:49:f9:21:90:3a:8d:4c:bb:a2:70:01:0a:14:
cb:c2:ab:53:20:cc:21:9c:50:4f:c8:01:9d:99:56:
6a:01:6b:a0:ed:bd:5c:43:c3:56:3a:be:da:50:39:
1c:db:c4:5b:07:01:8b:24:5b:bd:59:a7:4c:b3:be:
ab:c1:fe:78:9d:e3:96:29:d1:ec:96:d0:0d:44:eb:
da:1a:e7:f5:d1:98:c3:d6:56:b4:ea:fb:0f:9f:f0:
f2:2e:4e:dc:85:dc:2f:b2:07:79:27:01:a1:22:14:
e2:1f:5a:86:44:1c:5c:40:61:af:89:f6:26:08:cb:
f5:7d:de:db:6c:62:4e:c8:19:1e:94:d1:a0:cd:7b:
ff:0e:81:64:45:20:cb:e2:d2:c6:47:77:e1:e2:b2:
93:52:e6:47:4a:cc:52:c0:c6:03:be:a4:af:40:37:
a1:10:af:1d:65:ff:7e:d5:25:73:ee:39:81:ed:17:
80:4f:3c:b6:77:88:54:3d:80:fe:df:47:47:b4:ff:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:31:32:65:41:84:0D:0C:02:12:2C:29:77:3A:E0:10:B4:AF:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
X509v3 Authority Key Identifier:
keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.184.0/24
IPv6:
2602:f7e4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:45:b7:0b:eb:d5:85:ee:62:20:ee:48:30:37:64:bb:55:e0:
26:8d:0f:60:f0:4c:aa:a3:7a:f3:94:61:8d:6c:36:95:ad:cf:
79:ee:40:55:ab:39:15:bd:86:06:34:34:76:b7:2c:6e:71:5c:
c9:57:98:89:1b:7a:ae:9e:13:1b:3f:41:8b:95:3d:46:3b:87:
4c:91:1f:5b:8f:38:73:cf:7d:de:56:d7:0b:28:b1:64:c3:15:
d5:c8:26:0a:09:0a:85:1b:65:e1:93:b5:e6:43:57:54:82:ce:
50:c3:ab:9f:b5:d5:9d:39:67:65:fb:35:bf:c2:a4:3f:39:37:
b8:a8:2d:ce:d7:64:cb:87:8c:20:ee:37:41:e3:b9:8c:13:5b:
0d:bc:2d:b0:c6:07:83:75:c5:85:b5:2e:c8:39:0c:93:4a:37:
3f:57:8b:65:42:81:65:60:a3:95:48:c1:c3:37:77:b1:b3:24:
dd:85:d1:81:85:3c:26:da:f7:58:13:5b:64:a1:f9:69:67:fa:
81:36:45:a2:f1:af:8e:06:ac:80:34:f8:7b:74:93:03:99:c2:
aa:1a:63:15:2e:89:8b:44:ac:ba:c0:1b:ef:6e:44:7a:4d:c6:
f5:5f:da:cb:34:34:38:de:51:d8:11:48:b2:68:d9:bd:9e:aa:
48:39:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:23 2025 by rpki-client