
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
File: 9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa (raw, json)
Hash identifier: Nbz4pvXmVPh6oVXirtSqKFWd/uI6Gfq2LBEBImcm9l4=
Subject key identifier: 88:DF:15:3B:CD:D8:E9:7B:3B:6A:2D:AB:CB:C6:CC:19:13:08:4E:DE
Certificate issuer: /CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Certificate serial: 010D0C9F4328584B987240901793CF960A47A100
Authority key identifier: 91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 401207
IP address blocks: 198.133.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:40:90:17:93:cf:96:0a:47:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=89d8c907-b6a8-4bfe-9e3c-f8cb493f37da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:7b:04:29:e7:ab:6b:54:ca:83:fb:42:5b:
cd:16:44:ad:51:f8:14:b5:83:49:63:36:5d:3b:c5:
a9:8b:b4:51:49:19:8c:2d:21:04:a0:8c:8c:75:98:
20:ed:6d:a0:55:cc:bc:f2:29:49:e7:80:eb:9b:ba:
48:2f:06:93:86:8c:41:e2:00:8f:a5:b7:8d:f8:91:
69:e4:6d:4c:b8:7a:6d:8b:15:c8:0f:fc:83:7a:78:
a0:43:58:24:90:ed:34:3f:7e:2c:74:aa:65:5c:45:
91:f1:15:4a:6e:bf:58:4f:3a:74:66:66:7c:e9:2e:
a2:d5:1a:d5:36:08:b4:a9:a2:3d:3c:14:e3:e0:11:
88:49:3f:ab:80:53:80:fa:0f:44:c7:63:81:59:48:
2f:a9:ce:32:58:b8:da:d9:1e:0b:4d:7a:8b:4f:e5:
46:ed:ad:38:64:7a:4b:ab:1f:5d:9b:20:1b:c3:e8:
b6:1e:83:a7:e5:cd:1d:c0:67:8e:65:c2:57:6e:84:
78:b4:22:72:8f:45:1a:23:3e:dc:3c:d4:96:2d:91:
6c:d5:0c:35:00:f8:3b:9b:00:a1:6d:c6:29:b1:c5:
0b:65:c6:ba:77:45:4a:6f:80:be:b2:57:76:0f:9f:
64:61:fd:ae:b3:1d:88:8a:81:cd:ec:02:51:a6:14:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:15:3B:CD:D8:E9:7B:3B:6A:2D:AB:CB:C6:CC:19:13:08:4E:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl
X509v3 Authority Key Identifier:
keyid:91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:e4:07:2b:b4:c9:49:6c:01:fd:d4:c1:d0:bd:a8:09:fe:01:
af:d6:8f:0c:91:6a:b7:63:e9:af:56:1b:1a:f4:d8:dc:79:18:
88:49:98:e7:f6:39:60:76:8a:15:5c:6f:f0:b0:20:5f:5a:99:
b9:e2:20:f4:cb:78:9f:de:21:db:fa:ad:11:2d:4c:24:03:29:
b2:58:e2:26:aa:9d:5a:9d:fa:07:08:ad:1a:7e:14:ac:9e:37:
0a:6b:db:06:25:23:86:38:d7:f7:67:58:52:50:7e:16:af:9d:
2b:b2:ef:ac:eb:31:f9:5e:e3:e2:80:c9:ad:2f:e8:48:59:99:
5f:90:de:75:9b:d4:ba:98:2b:c9:22:a4:06:ac:7a:87:13:58:
91:4e:30:fb:67:7d:72:df:ac:9c:e4:b7:dd:95:f4:a7:6b:1f:
0f:f0:58:ed:50:15:c4:a4:30:d1:ff:e2:5d:f2:69:d3:1b:31:
a0:7a:35:b3:88:fb:2d:b9:ed:48:3a:b2:fb:7b:1a:f1:ad:3e:
37:c5:8e:a1:2c:85:ca:05:12:31:39:96:33:a6:42:ec:2b:99:
b2:2c:3e:02:4b:a6:07:f4:c6:40:e3:e4:3f:c5:97:18:4b:7c:
5c:e8:2e:ff:e3:4f:d1:af:fc:fa:d4:2b:00:95:7c:81:c2:79:
48:c0:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:48 2025 by rpki-client