
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa
File: 9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa (raw, json)
Hash identifier: /vNVHjTNP4LpCFX9kXBe19EIxnIvx/KNIvHNgERadLc=
Subject key identifier: 79:75:B0:06:0D:79:14:B6:66:7F:A8:7E:A2:8B:94:DB:57:24:11:99
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584BA39D2A246574F5B6BF109F00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 33598
IP address blocks: 138.8.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:2a:24:65:74:f5:b6:bf:10:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=a649a433-1c05-4cbd-9083-78cfd2ea3be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:75:01:65:16:9c:25:03:0d:9b:2b:61:98:
f4:0f:7d:07:bf:03:2d:bc:b4:18:04:b1:f7:fa:b8:
f4:e6:61:3e:2b:ce:f1:6a:f3:eb:67:5a:9e:cf:ec:
e6:e1:66:29:b3:f5:c2:b2:40:4c:d1:cc:4b:3a:93:
03:e3:57:5b:b3:9f:c6:83:57:e3:8e:32:f0:1d:05:
d0:07:e3:48:1c:6f:09:36:63:ca:b2:6c:11:fa:a4:
c3:c5:7e:e2:c1:b1:74:72:b1:d4:63:57:7a:24:c7:
18:b2:4b:d6:e5:5d:9d:01:f5:74:e9:6c:4c:7b:23:
1e:13:f3:9e:1d:42:4c:68:bd:3c:88:7f:69:84:99:
78:c6:25:e4:5a:78:f6:ad:68:dc:18:29:9f:52:5c:
65:cb:9c:1b:3d:d8:a1:0c:7b:9f:6c:6c:52:1b:79:
45:95:5c:57:76:1b:d8:03:d5:0d:74:07:5d:3a:f7:
9e:67:8a:5e:ed:9b:e3:47:60:6d:fe:c8:87:57:5f:
78:10:4f:27:9a:66:5b:ea:26:75:15:63:6f:63:2b:
ec:ce:45:30:9f:ba:dd:14:c8:fc:c4:66:c1:51:5a:
b9:fb:ac:aa:45:32:21:fd:9e:5f:a9:7e:8b:09:97:
fc:c7:d0:20:ff:02:e6:5d:31:5c:dd:2a:91:53:ab:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:B0:06:0D:79:14:B6:66:7F:A8:7E:A2:8B:94:DB:57:24:11:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:77:29:32:4d:42:e0:c8:68:fc:16:6f:26:ec:49:22:46:55:
ec:1b:cb:f9:87:1a:9f:26:12:9f:17:2b:09:ee:c9:ef:01:e0:
5d:13:c8:4d:35:9b:84:ae:ca:5e:c8:88:13:71:be:d7:c3:83:
7d:1b:e0:ca:44:96:16:8f:f0:fa:b3:a8:2a:f5:7c:a8:8f:23:
27:c3:b7:f6:e5:e9:08:dd:aa:bf:25:d1:71:d8:df:7d:b7:0f:
58:7d:41:d2:dd:00:6f:d8:ed:65:6b:d2:2c:11:55:22:c4:37:
a2:90:d9:d5:90:b4:8f:73:6a:7c:a4:15:1f:78:b2:8e:28:b4:
79:d4:c2:75:75:04:e3:ac:66:61:a7:bb:68:39:6d:74:92:52:
dd:ca:37:cf:68:10:af:6b:5c:28:d0:1e:7c:51:49:b7:f3:ea:
fb:36:ad:7d:fb:64:bc:01:a7:27:c2:2d:98:65:21:9a:47:3a:
ad:c9:40:57:77:f9:65:5e:d7:f2:c2:7c:bf:a1:b7:8c:52:e4:
05:74:88:5d:0e:2f:c7:6b:83:d7:10:2b:49:bd:f3:b1:5b:7f:
5c:ba:5d:c5:fb:49:6c:b0:cf:f7:86:42:53:25:b9:ef:46:33:
cf:0a:61:9c:21:47:75:52:5f:9a:d0:d6:48:3f:b9:1d:84:70:
f0:56:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:54:56 2025 by rpki-client