
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
File: 1c2eb888-b2c0-379d-8a77-cc5b58784197.roa (raw, json)
Hash identifier: t+AZDyYASfQN3y63wHY39HQxMTE/Ont+OzaDtDBXQZ8=
Subject key identifier: F6:B1:B6:08:12:3D:16:67:A9:29:8A:71:37:1E:CC:16:AA:F9:FD:1C
Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial: 010D0C9F4328584B9872406311C0A76605E8E900
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 2496
IP address blocks: 129.237.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:40:63:11:c0:a7:66:05:e8:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=ae9df9ad-64c8-4beb-a156-403724155ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:91:c8:c9:91:a0:0a:a2:23:fa:d9:d5:e8:
8b:2a:06:eb:69:a7:6d:7b:1e:16:f5:21:4e:d5:71:
f8:f1:e3:e9:03:5b:39:4d:4d:1a:e1:ed:c3:a3:dc:
58:6c:88:9d:27:4c:d4:ab:21:cf:cd:42:30:40:ae:
60:8b:bb:5d:67:14:9d:5b:60:2b:8f:28:66:b3:85:
c1:b0:83:d0:48:2b:f6:54:d8:b6:fb:b7:84:0a:2f:
36:77:ba:2d:44:d0:e5:31:79:94:ed:be:43:e0:cb:
c3:96:52:8b:f3:7c:41:70:90:d0:5b:1c:c9:cc:c7:
33:16:47:f0:a7:72:57:e9:c1:64:7d:cb:59:5c:15:
78:f2:29:e3:f4:f9:53:ad:2a:38:d5:72:b4:a7:60:
3a:99:dc:2b:d6:85:8e:43:05:9d:2a:77:b3:6c:53:
62:6b:f5:36:3a:25:8f:61:91:e4:95:c5:3e:b8:ce:
2a:38:0c:1c:87:16:91:d4:d8:72:a9:6e:cb:d7:e5:
e0:d4:05:4f:71:cc:f5:fb:c6:bb:1f:81:0e:c2:e4:
03:60:3e:83:9b:53:0e:ac:6d:2c:9d:89:4e:a5:a1:
c6:c3:36:a9:1e:0c:6c:c4:c7:ed:e0:e8:8e:c6:b2:
cd:18:7d:20:e4:93:90:72:f0:e7:90:e0:75:44:6a:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:B6:08:12:3D:16:67:A9:29:8A:71:37:1E:CC:16:AA:F9:FD:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
sbgp-ipAddrBlock: critical
IPv4:
129.237.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:d9:97:c7:cb:72:5e:9d:11:4c:93:56:8f:39:41:75:37:f5:
44:6e:0e:b2:f8:79:b4:2e:c8:03:98:14:20:cd:ba:a2:c8:3e:
f5:cb:d8:2b:b9:52:73:a7:2e:8e:97:e5:d3:35:81:f8:09:f5:
84:8a:5d:b6:e8:33:bc:f8:04:e0:a7:3c:78:da:6e:90:73:05:
91:62:38:86:90:d2:90:51:ea:86:86:a0:5e:32:6f:45:20:ec:
80:89:b5:a2:b7:ee:39:14:e4:c2:99:9e:69:8e:5d:c9:10:32:
d1:e3:43:50:9e:4c:5e:5a:a4:0c:7b:cf:0c:22:4d:6c:10:a7:
f8:7b:2f:76:ac:e5:15:d1:27:a0:b1:0c:fa:c8:77:83:3d:70:
6f:5b:b6:61:65:df:5f:28:30:1e:3a:fd:86:24:fc:b3:18:5c:
ec:74:4b:f3:ef:64:04:65:bb:8c:82:6e:76:cf:a6:74:59:d2:
63:bf:21:c3:17:ba:84:36:a2:a1:3e:25:58:4e:cb:f8:f5:65:
b1:30:6a:87:42:4b:e6:c6:c2:2f:7e:46:93:6d:8c:8e:ed:e2:
e4:00:b8:a8:2f:34:e2:c0:4a:9a:b7:e9:34:82:ea:c9:4b:56:
df:3c:8c:34:79:35:2a:5c:91:93:d1:84:ba:b7:a5:18:91:3c:
bf:1c:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:09:11 2025 by rpki-client