
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa
File: 157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa (raw, json)
Hash identifier: FKJo9asPK4W2FMJpo9icDU+ymCrZKXEPEDgpyAHWaC0=
Subject key identifier: D0:CA:1E:70:9F:E6:2B:85:7F:42:DB:3F:EA:01:6D:9E:95:E0:48:DD
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584B9E07C113DE8EDABAAE627580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 7018
IP address blocks: 192.171.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:c1:13:de:8e:da:ba:ae:62:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=40ecafb8-37c5-43ee-afd1-be9559578fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:e2:39:5e:0a:e8:10:c5:24:fe:26:b1:2e:
91:2e:c7:f2:22:6a:c5:55:3b:22:5e:53:a7:7d:1b:
0b:56:c2:08:77:9d:8c:bc:80:99:bc:bf:70:41:f3:
3f:bc:3a:4e:86:f6:b8:f8:a8:14:45:a4:a0:cf:07:
20:29:de:46:2e:2a:ac:d2:0c:34:34:a6:9a:c9:9e:
15:96:03:a7:58:5a:dc:50:30:3c:57:8e:b1:b4:18:
1a:c0:bb:43:c2:84:1a:fb:27:2b:94:f2:46:d1:7f:
de:1c:d5:3f:2e:d3:93:52:cc:f2:10:62:87:c1:08:
b0:a3:7b:17:84:aa:66:f2:26:00:e7:80:15:71:c2:
a5:68:a4:55:50:e5:7d:08:46:ed:48:79:bf:dd:a1:
d5:c9:d7:11:36:5c:84:f2:4b:09:b9:62:cd:3e:6b:
be:85:aa:58:2a:87:8b:b6:3a:9a:d0:f9:7a:65:b2:
eb:0e:a7:0f:b4:12:af:39:f0:eb:d2:66:f2:6b:e4:
a4:85:45:12:3b:0b:26:93:b2:9e:f4:13:de:f7:6b:
5d:58:9e:f8:4c:8d:31:04:9d:6e:be:4d:a1:56:86:
02:5d:6d:d1:58:9b:e7:89:8c:75:e3:06:a1:31:30:
1c:af:c2:bf:34:c2:c7:f4:11:e6:74:26:7b:a2:b5:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:1E:70:9F:E6:2B:85:7F:42:DB:3F:EA:01:6D:9E:95:E0:48:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.171.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:eb:43:b0:3e:84:1a:5e:d0:94:5b:ed:1e:b9:1a:38:c0:9a:
6d:b4:d6:ba:93:9e:47:29:5f:43:a3:f1:4a:f1:df:27:25:4d:
95:2c:e8:97:01:25:a1:86:ff:ce:13:8c:aa:70:69:94:af:bc:
06:de:9f:58:57:a9:40:cd:56:89:6a:d0:66:a7:d6:c2:e3:b5:
f1:d6:d1:0a:3b:14:f9:aa:a3:a9:63:db:0a:5f:92:0a:a6:d6:
ba:39:f5:17:1a:c3:77:d2:b9:26:3f:38:90:cb:43:8b:fc:f2:
83:f3:27:ca:c9:74:02:31:55:a3:8c:ee:73:d8:b9:44:68:79:
eb:29:33:58:d9:c3:c4:8b:78:a5:4d:12:41:55:c4:eb:7a:53:
ba:99:6a:b1:83:86:2f:30:68:b7:e4:56:1a:6c:39:bd:64:8c:
e9:ad:1e:c3:cb:39:94:cf:e1:de:fc:60:ee:5d:da:a9:3f:77:
ae:68:ae:1e:06:32:22:14:18:37:70:c4:8f:20:76:78:f4:60:
f3:f9:09:a9:ca:d7:78:52:c9:71:e5:59:8d:f4:53:f7:db:31:
65:08:46:be:b6:21:0c:8f:79:94:a3:9a:90:57:64:54:cd:d8:
e6:02:c3:e7:9f:b0:97:29:70:b9:54:d3:c4:0c:34:1b:e1:f7:
a3:01:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:58:08 2025 by rpki-client