
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
File: 5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json)
Hash identifier: Pfp3YdjbiwjfgxXTVS5a0JfOb8e+PHgJQHTHZ606yXA=
Subject key identifier: CA:2D:0B:B3:C3:3B:0D:86:62:AF:41:A9:EA:48:C1:1E:CF:B8:03:9A
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584B5B0744FDB3F3EB54D41CB680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
Signing time: Mon 29 Sep 2025 13:00:41 +0000
ROA not before: Mon 29 Sep 2025 13:00:41 +0000
ROA not after: Sun 28 Dec 2025 14:00:41 +0000
asID: 64267
IP address blocks: 199.250.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:5b:07:44:fd:b3:f3:eb:54:d4:1c:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Sep 29 13:00:41 2025 GMT
Not After : Dec 28 14:00:41 2025 GMT
Subject: CN=866a2f10-4c98-4389-871b-9f8376af200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:51:24:48:20:a5:47:c1:aa:35:89:7d:53:9f:
65:d3:91:b0:6c:b6:21:77:bf:31:3d:2e:8a:3b:2f:
47:72:43:aa:00:d3:49:e6:c2:15:76:e7:ca:5a:f1:
27:ee:ca:e1:36:2e:82:ef:0c:c4:44:6c:6e:57:0e:
12:46:7a:e0:ca:01:f1:99:a8:d3:bb:af:56:06:a2:
c2:ea:f6:4e:b2:52:a8:23:64:23:10:b7:53:a7:ff:
a5:d2:fd:d1:a0:d6:f8:f2:cc:01:91:11:f7:78:0a:
6f:2e:52:5e:b0:22:d9:45:a6:e2:30:2f:ac:ec:5a:
93:6d:68:d4:46:ec:a6:c8:bf:e4:67:d1:16:0b:69:
ef:30:11:9a:51:2c:3d:4c:47:c2:99:8d:6b:ac:fc:
43:0c:e4:3e:f3:7e:c1:50:f2:d1:14:1d:1b:aa:2d:
21:ae:19:34:50:be:55:ad:47:b7:f9:b9:ba:40:c9:
0d:8b:d1:a0:fa:58:eb:c1:2e:78:3a:b7:88:e5:01:
02:d4:63:b3:d7:e5:ec:b8:62:3b:53:0b:b9:70:98:
37:ed:b2:78:b9:fa:78:d7:6f:2b:66:e1:62:40:6f:
37:40:ea:ab:f3:2d:de:08:6b:bd:b1:be:d2:51:c5:
3b:b6:fd:a6:b0:65:46:b3:ab:2d:9e:62:15:f9:24:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:0B:B3:C3:3B:0D:86:62:AF:41:A9:EA:48:C1:1E:CF:B8:03:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:52:8e:99:4b:5b:08:ce:ca:94:95:28:f7:12:32:8e:8b:24:
2f:28:ff:05:1a:db:04:f0:a8:cc:93:ff:cc:75:55:3d:14:ca:
27:92:22:28:40:3f:95:25:c0:23:13:5e:8a:3b:33:96:7c:dc:
b0:6b:b7:3e:6c:89:3c:ce:96:b4:5c:f8:50:32:a0:53:fd:7e:
01:5d:2f:3f:77:ab:a4:12:9b:3a:57:19:49:e1:6d:3d:bd:c0:
cd:2d:35:ef:cc:2a:f6:bd:7b:16:8e:a3:88:af:45:25:7f:e9:
e1:28:4e:ea:e8:b3:c2:e5:b9:36:14:09:e9:ad:89:84:38:a2:
14:9e:34:d8:2d:e0:0b:80:73:b1:1f:85:71:06:cf:28:a2:84:
31:a2:e2:10:da:63:d3:7f:de:ba:98:bb:4e:9b:1f:8e:3f:34:
f8:f2:48:46:d6:b2:cf:08:1b:d4:f3:39:10:f0:a0:84:8e:80:
83:89:af:d1:bc:2b:ed:af:25:17:2b:f7:a1:68:59:59:9f:52:
5d:3c:59:39:c2:9b:02:61:26:61:df:ce:3c:a4:75:31:b8:ea:
16:c5:13:99:49:d8:75:73:e6:3c:e2:7c:99:b4:ed:3e:7e:ec:
62:3f:d7:88:d2:81:00:0e:07:22:66:8c:46:31:96:06:ef:2b:
a0:4b:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:29:04 2025 by rpki-client