
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa
File: d1a16e87-19b9-34cb-80f5-b2cd02650049.roa (raw, json)
Hash identifier: r34HbtvWf/nouTLjxCKgogN99UVC9yZNtybOroFQkRA=
Subject key identifier: CC:E2:57:6A:5E:3C:A0:F5:FF:E0:81:E5:CC:74:B6:B1:9B:E9:D7:BD
Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial: 010D0C9F4328584B99D78ADC5A0FEC6EC7DEB000
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 398960
IP address blocks: 23.168.145.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:8a:dc:5a:0f:ec:6e:c7:de:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=a1c296c9-cd7f-4d6f-812f-7bb8401b12ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:45:74:5e:f3:78:63:ff:f1:0e:f0:f2:e5:
bb:68:b4:b4:5c:37:8e:b7:4e:f3:8a:de:dc:4c:bf:
f9:35:5b:2f:d0:c5:30:38:92:26:9e:d3:34:e2:20:
1c:8c:26:28:07:b6:34:f7:66:26:fb:64:0e:58:4e:
3a:2f:29:eb:51:a3:8e:b9:01:18:4a:b9:91:39:5f:
1a:ca:99:88:39:f7:98:60:e1:7e:3d:86:1f:25:dd:
d1:bd:58:20:c6:6f:30:7f:2d:f4:98:78:b3:b2:14:
11:09:f9:e6:ee:e6:ac:47:aa:1f:81:59:cd:da:77:
d2:03:97:78:d3:4e:1e:3e:2a:93:0e:84:f4:dc:d6:
ee:f2:6c:bf:e1:f1:ee:59:25:f2:b2:07:af:79:26:
a8:ad:07:12:3d:61:9e:ef:0b:9c:c5:04:47:8e:67:
f9:c6:51:78:42:a2:89:52:69:83:ee:9a:ff:e9:a8:
b3:cd:3c:fc:d6:fd:68:aa:31:a5:2b:0e:fe:fe:53:
c0:fe:3c:d0:58:82:61:ca:76:bd:fc:b6:48:00:03:
44:58:ee:0e:4d:cb:a8:70:ab:e6:15:ff:9b:ec:9d:
fc:39:84:19:87:ac:b7:bf:8e:98:d1:fd:a0:6f:1a:
fb:24:25:68:fc:52:f9:2d:3d:94:3e:05:5a:7b:a3:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:57:6A:5E:3C:A0:F5:FF:E0:81:E5:CC:74:B6:B1:9B:E9:D7:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/d1a16e87-19b9-34cb-80f5-b2cd02650049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
X509v3 Authority Key Identifier:
keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:4c:2b:b7:c3:92:62:27:44:28:4d:20:c0:de:37:0f:d9:31:
7e:02:6d:82:f0:7c:9e:3c:ad:28:43:92:cd:20:98:6d:c0:4b:
c3:0b:7a:52:a0:1e:40:aa:c0:ac:3e:62:4a:da:8d:cb:7c:11:
2a:5d:48:d4:72:6a:f1:c2:e5:a3:6a:9e:c9:62:e1:78:d5:5e:
ab:7d:85:a3:62:7b:49:b7:fc:23:7d:ba:09:dc:9f:93:bd:af:
ca:01:f9:3c:c0:d7:dc:42:8a:43:17:b4:fb:ec:16:f1:8d:41:
78:8e:1c:93:88:b3:ff:31:19:eb:89:82:86:31:b2:57:b3:97:
7b:6a:22:30:5b:4e:12:ac:cd:9d:ad:96:35:5c:bb:ed:9e:b0:
dc:b5:be:7f:ea:2d:1a:cf:c6:fb:95:af:95:2c:38:83:58:df:
52:dc:f0:5e:53:29:54:9a:7e:af:0b:45:d7:ee:51:da:27:f1:
f1:1f:a6:78:cf:ea:7b:28:9c:02:7d:4b:2c:aa:ba:61:c1:f0:
e6:c4:69:fb:fa:b4:dd:e9:2a:2a:2e:d1:3f:cb:e1:98:1b:80:
db:ed:98:39:59:cc:37:a0:bc:6e:72:3d:89:b4:39:36:2d:d1:
8a:19:6d:cb:6b:ff:35:3c:52:4d:a6:55:8a:3e:a9:9c:27:2b:
65:5e:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:25 2025 by rpki-client