
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/75b9bee0-580e-30d5-89a2-a8001a569e60.roa
File: 75b9bee0-580e-30d5-89a2-a8001a569e60.roa (raw, json)
Hash identifier: 268EDuxrWNIRMkwNDzucXE8Ar+v7seuYgq4QNt9wMq4=
Subject key identifier: 62:A9:88:66:09:A5:04:32:D7:AF:B4:FB:81:BE:7C:24:DE:87:DB:1F
Certificate issuer: /CN=0d2ebf92-acd0-4b14-a67d-e7a909997e7e
Certificate serial: 010D0C9F4328584BBDB11B9FA8A0F4C4C1890800
Authority key identifier: 5D:83:33:DD:1D:16:CC:71:56:EE:F9:75:CC:8B:13:1E:6B:7C:E8:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/75b9bee0-580e-30d5-89a2-a8001a569e60.roa
Signing time: Mon 03 Nov 2025 21:12:20 +0000
ROA not before: Mon 03 Nov 2025 21:12:20 +0000
ROA not after: Sun 01 Feb 2026 21:12:20 +0000
asID: 36593
IP address blocks: 167.94.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bd:b1:1b:9f:a8:a0:f4:c4:c1:89:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2ebf92-acd0-4b14-a67d-e7a909997e7e
Validity
Not Before: Nov 3 21:12:20 2025 GMT
Not After : Feb 1 21:12:20 2026 GMT
Subject: CN=352b4b37-0cdf-464b-90aa-003f41d623c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:52:a3:1a:e1:06:4d:9e:bb:6d:16:0c:6b:
71:be:ae:a9:f9:e8:aa:38:6b:d7:3a:8c:d4:c6:88:
33:30:43:a9:17:34:25:f2:dd:00:48:81:cf:d7:ef:
29:af:ef:ae:3e:71:42:a9:62:ea:2a:3b:5b:50:0b:
12:29:99:3a:9f:03:d1:8a:b1:fc:c3:f0:7f:91:26:
fd:1a:c6:93:84:b2:ed:7f:30:12:3e:33:68:b2:f2:
59:59:23:ec:b1:a3:b2:fe:d2:4e:aa:b4:a4:a2:10:
97:a8:b0:53:5e:d5:69:f6:57:3a:ee:be:dc:df:0b:
66:a3:82:1d:d3:22:0d:cb:d9:69:3c:05:9c:69:06:
0a:44:b1:fd:e3:71:61:bf:93:6d:f0:5f:25:24:96:
a9:5a:71:7b:72:5a:ff:70:71:72:77:b2:e5:d4:e3:
8f:5e:21:bd:ef:bb:f6:04:52:ba:40:43:3e:fc:13:
24:6a:98:a5:a7:c8:44:e9:d6:b2:c6:e3:cf:06:6c:
1a:fb:01:4f:bc:cc:15:77:63:ba:48:d9:04:7b:42:
63:ae:88:6f:9c:68:a2:fd:4d:3f:c4:5a:01:23:ab:
e8:0a:bf:74:a9:0c:4a:b8:94:b3:8f:a7:83:fb:be:
09:72:bc:8c:33:d9:07:be:50:33:bf:2a:10:27:ea:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:88:66:09:A5:04:32:D7:AF:B4:FB:81:BE:7C:24:DE:87:DB:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/75b9bee0-580e-30d5-89a2-a8001a569e60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.crl
X509v3 Authority Key Identifier:
keyid:5D:83:33:DD:1D:16:CC:71:56:EE:F9:75:CC:8B:13:1E:6B:7C:E8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:1e:e6:6f:9c:28:0f:89:69:c2:21:60:ef:9a:4d:59:12:39:
e3:bc:07:f7:aa:ae:c4:ab:e0:52:b9:c7:ad:aa:3f:14:87:0d:
5b:00:54:9f:bc:30:fb:eb:2a:eb:d1:62:98:06:4a:8b:7f:fb:
af:76:da:55:68:52:02:f7:99:e2:d2:09:63:12:c3:dd:7f:ae:
26:28:7f:6e:81:91:90:65:19:a1:d8:96:f0:45:bd:1f:18:65:
35:87:fa:63:a8:5b:ad:6c:ee:39:62:b7:79:ae:e1:92:60:69:
9e:3e:f6:26:77:7e:a4:6a:7b:1f:e1:f1:71:d2:c0:c7:c6:c5:
ad:33:b6:cf:a1:c7:b1:e6:38:b8:dc:7b:4b:ac:4c:46:c1:af:
71:bd:3b:59:58:eb:e2:3d:6b:28:88:2e:4e:4f:09:fa:9a:47:
28:c0:12:72:f6:e1:8a:4f:02:a4:2a:86:a8:6b:b7:19:4a:aa:
1b:6e:25:04:11:a2:c7:9f:14:08:ac:87:63:90:dd:2f:9d:20:
35:eb:98:ba:e1:88:f1:2e:18:ba:3b:e8:81:1b:49:7a:ba:47:
9d:5c:b1:31:59:25:98:04:b8:85:f6:f1:f8:63:28:23:a4:51:
2c:ef:a2:61:17:d6:12:fd:2c:02:07:0b:d5:7d:8b:b9:e7:62:
f2:54:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:19 2025 by rpki-client