
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa
File: d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa (raw, json)
Hash identifier: 3WiTtbXyMYcOR+eC3i2NuAzEULLDVUwWakBLsKBFhFw=
Subject key identifier: 0E:38:82:43:DE:EE:9C:6C:65:0E:C4:FF:59:20:41:58:F3:E2:09:11
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584B64CE71394CEE9D4245D51E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 44559
IP address blocks: 23.230.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:ce:71:39:4c:ee:9d:42:45:d5:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=1bc26f9d-08ba-4e52-ab2a-dce8cdabb435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:bc:83:14:60:cc:ba:df:81:32:ef:8f:e1:
72:94:c8:ec:27:bb:18:69:9a:80:ad:09:6f:1b:3b:
ed:43:76:77:77:84:01:73:ea:14:b3:2d:52:f1:49:
b5:f0:8d:14:23:f9:30:b2:b0:31:5c:fd:f5:26:2c:
cd:74:15:34:09:ba:65:69:3f:74:30:01:89:02:60:
3b:c3:3c:e3:2b:d1:ab:26:88:60:f7:25:5b:35:ab:
a1:fe:63:20:f8:96:a2:10:16:4b:ee:e5:02:9e:df:
6a:0a:e8:03:16:42:f8:b8:9a:5f:e8:f2:07:49:88:
78:13:28:3a:a6:dc:89:84:e5:33:67:41:b1:e8:0c:
90:25:2e:83:9e:ed:07:1d:60:b1:f6:77:e3:7c:a9:
a6:7a:87:86:e6:b4:30:02:11:e5:59:ae:fe:16:1e:
b5:e6:47:a3:b3:60:eb:cd:34:b9:e0:7c:86:32:15:
f9:b6:dc:13:f6:76:d9:21:b0:8b:3e:c1:cd:48:87:
e2:b1:46:69:17:5d:63:d0:8c:1a:f7:cc:74:8f:80:
27:f8:d4:4a:0c:e6:0d:09:d2:e2:20:1f:84:b2:c0:
d3:bf:f1:83:00:4b:29:fc:17:50:0d:3d:56:a0:78:
cb:7d:e7:12:be:7b:fa:f1:58:fb:4b:e4:e2:64:1f:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:82:43:DE:EE:9C:6C:65:0E:C4:FF:59:20:41:58:F3:E2:09:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:49:e6:46:2c:d2:1d:c4:f2:df:24:2e:81:66:c6:e5:05:fa:
4f:18:ff:ba:35:86:1b:1f:b2:bc:d2:7d:ed:fd:ef:63:79:e8:
4a:b9:05:ab:e5:20:d8:09:1f:f0:54:a4:a6:c9:8d:dd:46:f0:
6d:98:91:3d:74:c0:3f:94:1d:a7:1d:bd:5a:f0:47:2c:82:13:
58:34:d8:4a:1c:cb:5f:fd:ac:fd:fd:85:ae:ce:ba:65:6f:c0:
05:05:45:49:bb:c8:8e:56:ca:94:a7:cd:e5:7d:e1:78:47:84:
55:49:a1:6a:a5:e1:01:ae:9e:cb:b0:b4:37:16:6f:31:24:15:
1a:81:7f:d7:02:ae:7d:07:7a:78:3c:e5:91:fc:13:16:d8:3a:
a5:70:df:57:e3:fb:51:74:d2:45:a6:fd:0a:30:e8:fb:6f:2f:
ca:62:8c:20:2e:88:14:23:af:a9:ca:47:20:45:fa:7a:7b:78:
e8:95:a3:ff:63:22:f4:18:64:89:c4:e5:b0:c4:50:ae:61:11:
48:57:5f:4f:dd:e6:1a:2c:f1:06:31:16:a5:1e:ae:69:46:c8:
a9:b4:1a:ff:fa:71:51:af:09:e4:a2:4d:c5:53:45:53:b4:9a:
aa:af:ad:0f:d7:78:20:b1:88:bb:7f:80:e6:1a:ac:9e:74:b6:
9c:cb:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:17:24 2025 by rpki-client