
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
File: a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa (raw, json)
Hash identifier: M6bnCa5ON0HeR2oKEDWmNDu5f4idxYWLAIBBUwFBSl0=
Subject key identifier: 8E:42:6B:3C:FD:00:85:9A:81:F4:95:F4:20:9E:F4:C6:C8:89:AF:06
Certificate issuer: /CN=d2799306-5973-45b1-8828-5797abf141e5
Certificate serial: 010D0C9F4328584BB02D018C8CB08764AC0E6180
Authority key identifier: D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
Signing time: Thu 30 Oct 2025 01:00:30 +0000
ROA not before: Thu 30 Oct 2025 01:00:30 +0000
ROA not after: Wed 28 Jan 2026 02:00:30 +0000
asID: 32281
IP address blocks: 23.159.224.0/24 maxlen: 24
2602:fe31::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b0:2d:01:8c:8c:b0:87:64:ac:0e:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2799306-5973-45b1-8828-5797abf141e5
Validity
Not Before: Oct 30 01:00:30 2025 GMT
Not After : Jan 28 02:00:30 2026 GMT
Subject: CN=151b2264-5c68-4d1b-9a08-26ab94917017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:90:8b:d2:6d:88:de:14:0c:85:8e:23:b2:
54:28:c8:79:09:29:a2:fb:d7:82:6f:1d:2a:63:6d:
70:0f:11:3e:52:4a:e9:4b:da:0d:fe:e3:43:aa:85:
3f:a0:df:b8:2d:11:2a:09:1b:84:9a:74:f7:3c:3e:
e1:73:20:e3:07:56:0b:6d:46:89:2c:5a:21:66:4f:
80:48:0b:fe:ab:ff:1d:76:9f:48:43:3f:f2:71:30:
c8:88:57:64:7d:ee:f8:48:69:ac:20:f5:32:b9:63:
d9:46:19:d8:8b:f7:4d:10:7d:19:1e:b6:ee:5e:dd:
e1:15:18:c4:17:62:75:08:73:41:54:c4:10:ae:8b:
49:7d:98:3f:82:01:1e:2f:3d:3a:eb:8a:5a:28:dc:
d2:23:87:9b:f8:35:d7:1c:cc:fe:90:00:db:ba:98:
fa:a7:a0:d0:94:a8:1b:48:46:24:b5:f3:b9:13:2d:
c9:8f:d5:af:bf:b3:3f:2b:24:8d:49:27:3d:43:aa:
cc:13:f0:14:a4:87:79:88:6d:6d:40:58:41:55:c0:
b2:05:28:df:a1:2b:c3:95:c8:4c:9c:aa:32:6f:28:
9e:b4:8e:99:c2:bb:85:4b:72:ee:57:a9:07:96:91:
6e:89:f4:e3:ee:fa:4b:dd:a5:ea:86:37:ea:73:84:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:6B:3C:FD:00:85:9A:81:F4:95:F4:20:9E:F4:C6:C8:89:AF:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl
X509v3 Authority Key Identifier:
keyid:D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.224.0/24
IPv6:
2602:fe31::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:37:f4:9e:c7:5f:95:37:7b:8c:7d:26:e7:72:1b:b1:8b:84:
56:b3:00:c8:c5:bd:95:e1:de:e1:4a:b6:24:1c:43:fa:49:12:
c2:8d:66:37:29:0b:07:b5:fb:42:fd:23:42:35:9d:19:b9:f8:
70:40:26:ff:1e:81:eb:b2:22:5a:37:67:cf:5d:56:84:8a:18:
45:63:59:c4:81:ad:98:49:8a:b2:b8:76:d0:d1:03:21:ce:13:
0f:87:f8:93:dd:ce:b0:4a:52:91:1e:61:df:19:54:34:c6:c6:
55:34:5e:ce:94:c4:15:0d:44:9c:9f:da:25:3a:89:de:41:81:
97:9e:fa:ba:24:cb:26:58:80:9d:f6:02:ab:6e:3f:28:1a:f1:
80:26:77:be:88:4e:4e:64:b2:89:3c:bf:39:98:92:77:ce:11:
00:15:7b:df:a0:13:1c:f3:79:ed:47:d5:7a:da:42:f5:23:b3:
6d:13:44:40:20:1f:02:19:b6:76:31:e1:f1:6b:78:b2:29:da:
34:10:03:d0:cf:68:19:6a:04:d5:82:cc:e6:0d:07:35:fb:05:
e0:55:21:ee:23:00:4b:80:f1:14:0f:23:9e:a3:a5:14:bd:14:
6e:d2:62:bd:d0:55:cb:d9:3f:36:40:68:b0:25:1e:e1:af:4d:
6d:a5:4d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:27 2025 by rpki-client