
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/dd7132e7-ed6f-397c-94c8-b875d4492b10.roa
File: dd7132e7-ed6f-397c-94c8-b875d4492b10.roa (raw, json)
Hash identifier: 1ZeSNOEh2Y0jb9x/8qLEr4BtxfmmFkTezJRxjBZCAaA=
Subject key identifier: 34:51:92:96:6C:A2:9A:3E:E4:84:0A:69:C8:79:9F:63:B0:7B:17:0C
Certificate issuer: /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial: 010D0C9F4328584BB88D2C942B526FF502188100
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/dd7132e7-ed6f-397c-94c8-b875d4492b10.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 198100
IP address blocks: 23.175.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:2c:94:2b:52:6f:f5:02:18:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=72f2fb2a-4722-4737-80d3-9a670d9cb0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:ea:d6:af:c7:d7:97:4c:dc:45:a3:2a:92:
f6:fb:44:16:c9:bf:62:ad:4d:35:45:2c:9c:9f:86:
fa:97:ec:23:7e:50:63:70:c5:28:9d:92:47:4e:19:
5e:a0:c5:9a:68:83:a1:0b:e1:77:2e:44:5d:a3:38:
60:70:3a:53:72:c2:5d:4f:d0:1f:a5:22:1e:70:83:
93:7d:33:ff:10:62:e2:3e:3f:45:2e:1f:3c:4e:73:
8d:a5:7e:be:bb:45:4b:89:d5:28:0e:16:ce:d7:60:
7c:1c:9c:02:57:41:2f:c2:b6:ef:89:68:af:90:c4:
e3:44:7a:75:4c:c7:41:bd:33:06:8b:93:ab:82:bd:
e3:75:b0:b2:e3:a0:02:a7:45:45:01:52:3c:1e:f9:
6d:26:0f:a4:a8:8b:a7:df:58:05:d6:94:d6:1d:c0:
9b:45:8f:ff:da:bb:2f:33:c7:51:6b:f0:69:a2:23:
26:df:97:32:cc:91:a6:28:d4:58:ab:76:29:61:ce:
1f:2e:87:e2:bb:70:6a:59:5d:56:3b:cf:87:61:1a:
99:9a:e6:3e:7f:5f:c6:ef:b5:0e:4b:71:39:1c:81:
b3:cf:b9:35:d7:7c:45:aa:8b:9f:a8:61:7b:28:06:
e5:35:67:53:e3:bd:8b:32:55:46:1a:3d:ef:a5:72:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:92:96:6C:A2:9A:3E:E4:84:0A:69:C8:79:9F:63:B0:7B:17:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/dd7132e7-ed6f-397c-94c8-b875d4492b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
X509v3 Authority Key Identifier:
keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:71:fe:8c:f0:46:6d:34:74:e3:07:8b:2f:9f:1d:a1:8c:18:
92:9a:d3:e6:7b:1d:85:a2:0d:d4:b6:b6:8f:ba:94:68:7d:76:
a5:a4:14:00:15:49:da:c0:44:92:37:8c:59:b1:8c:4e:1f:04:
69:35:7d:58:61:7a:9c:40:12:18:d4:c7:af:ef:35:3c:8e:d2:
62:2d:a5:60:84:cd:8e:21:e3:45:ec:a4:9a:8a:31:e4:dc:26:
b5:32:36:d2:65:6c:36:06:15:de:36:92:79:3b:47:97:59:8d:
72:15:30:c0:05:c5:03:33:16:e3:7f:54:bc:09:6d:05:29:f2:
78:ca:1e:32:c4:f6:61:4f:71:18:b4:1c:2f:b5:b7:53:6c:6d:
37:b6:a1:9f:17:82:c8:17:fc:30:95:ef:fe:08:2d:f6:82:a4:
45:3d:58:4b:bc:eb:ee:08:e6:2c:11:2d:3f:28:40:49:f4:9b:
ef:52:e3:c6:4f:52:02:3b:ef:7d:8d:0e:0e:73:56:fa:b7:41:
39:54:6c:eb:6b:ea:af:e9:52:ba:65:57:60:00:9f:02:5b:65:
f0:cf:6d:9b:3c:47:94:41:3c:36:2b:a4:a4:1d:fa:ac:50:5d:
86:4f:8d:ae:ad:01:d2:5d:8b:31:03:f2:a9:16:df:89:35:3e:
68:de:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:52 2025 by rpki-client