
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
File: bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa (raw, json)
Hash identifier: 8B0s5uURRNfJ8/Tnng+uMmz3lIL4WSPdlPtQqIuJ9Og=
Subject key identifier: 69:03:D2:77:32:CD:39:9E:97:BB:54:FA:38:AC:74:0D:32:C1:B5:90
Certificate issuer: /CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Certificate serial: 010D0C9F4328584B715CB3CCBA4B6D8F855F7280
Authority key identifier: FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
Signing time: Tue 07 Oct 2025 13:00:37 +0000
ROA not before: Tue 07 Oct 2025 13:00:37 +0000
ROA not after: Mon 05 Jan 2026 14:00:37 +0000
asID: 400686
IP address blocks: 134.195.19.0/24 maxlen: 24
2602:2d6::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:71:5c:b3:cc:ba:4b:6d:8f:85:5f:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Validity
Not Before: Oct 7 13:00:37 2025 GMT
Not After : Jan 5 14:00:37 2026 GMT
Subject: CN=5706f066-10b4-4a2b-a641-e24a02de5e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:4e:67:72:8e:23:7a:42:de:fd:ec:28:0c:
91:83:df:46:0f:21:fa:e9:55:19:d0:70:53:d2:45:
b5:44:d6:62:46:38:e6:c0:f9:30:73:5f:8a:f2:9e:
47:a2:34:5a:e4:a3:dd:7c:2b:06:3a:af:75:0d:02:
a9:bf:1e:8d:95:90:5a:7d:ee:90:d7:72:2f:b8:d6:
71:bd:74:86:b4:19:ca:c3:fa:0e:c2:f5:1d:9a:a2:
8d:88:36:d8:cf:12:31:49:4b:42:4d:4b:5d:bd:d4:
51:e9:8c:67:be:e6:1e:94:8c:51:4d:71:27:82:44:
5f:6b:e0:8e:ae:14:ad:bb:2d:11:50:ee:4c:05:e4:
a1:02:ab:d0:17:53:d6:81:f8:f4:c4:79:66:7c:68:
99:0b:06:b3:85:33:57:f2:5b:c1:e2:d5:74:89:5c:
5e:8a:29:ea:b9:42:ac:35:74:4d:02:79:aa:2d:9c:
cc:9f:4b:c8:f8:7f:e9:ac:b0:53:96:d4:03:ff:cb:
c4:96:0a:2e:d9:97:af:27:ba:b2:75:ba:0e:f5:da:
0b:e2:41:76:d0:2a:a4:62:05:46:72:a1:9e:f0:ed:
b3:f7:70:fb:35:f0:7e:00:ed:55:ff:97:53:0d:5c:
56:fc:0c:8d:06:7e:f4:63:46:54:71:bf:65:10:82:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:D2:77:32:CD:39:9E:97:BB:54:FA:38:AC:74:0D:32:C1:B5:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl
X509v3 Authority Key Identifier:
keyid:FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.19.0/24
IPv6:
2602:2d6::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:af:fc:13:72:89:4b:f4:b5:d3:a1:3c:c0:18:12:17:0f:9d:
32:44:a9:50:d5:d8:7d:97:33:f0:38:4e:81:94:63:5c:e7:b6:
e7:bd:91:40:e3:88:68:fe:66:75:02:a0:a1:2c:22:1b:6d:4d:
ee:18:3f:d9:e9:f4:9a:7b:34:5e:9f:b3:5a:1b:6e:40:f5:09:
47:10:16:7a:6f:44:11:9e:d9:a0:e5:fb:33:45:17:18:51:71:
76:22:39:b6:78:85:7d:69:11:e3:6c:8a:d7:58:b9:ae:26:56:
32:7c:8d:49:0d:5c:80:e0:90:41:8d:6f:76:9b:07:9f:18:3b:
02:24:8f:1f:dc:e1:d2:b5:57:1c:9f:c7:8b:a6:a6:6b:72:77:
17:9b:c5:5e:33:97:8e:d4:7f:0c:99:f9:5a:97:29:68:93:9e:
5e:02:70:b9:b7:c7:c2:67:87:23:f2:42:82:b7:a5:d7:17:86:
6b:96:a9:07:a2:91:8e:5d:84:cc:df:87:70:74:72:5b:7f:df:
1b:49:86:09:91:38:ed:95:c3:db:ae:b8:c3:7c:8c:88:f0:0a:
23:c4:fe:d3:0b:e2:49:73:96:cb:0b:55:b1:ae:48:bf:85:a3:
28:5a:4f:65:df:88:a7:3a:5f:50:bf:81:61:5d:0e:07:c0:88:
91:fb:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:21:44 2025 by rpki-client