
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File: 2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier: Fx/0ddE12i0reN8LD/ibeFU8XKUfLre131oaTzFAyxs=
Subject key identifier: 27:7C:F1:92:FB:90:BB:06:01:F1:A8:2C:75:0C:DD:5E:5E:B2:7E:EE
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F4328584BA0D245FAE9E5253632410C00
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 14618
IP address blocks: 143.220.144.0/23 maxlen: 23
143.220.146.0/23 maxlen: 23
143.220.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:45:fa:e9:e5:25:36:32:41:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=a32d178c-1a30-48a4-96b8-a73afa9865dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fc:f8:88:29:3b:06:ff:77:32:41:32:74:e0:
94:14:1e:3e:9a:d9:61:db:38:a2:70:f8:61:7e:ee:
85:0f:cc:f8:59:ff:de:06:11:86:bb:5f:fe:59:05:
10:61:15:41:00:ca:af:ab:e3:25:ba:26:20:4c:4d:
e6:9b:ca:14:42:9c:fe:2d:0a:29:3d:48:1e:c0:2c:
7f:31:d8:2b:c1:63:6d:9a:c9:29:85:d5:f7:b1:50:
54:ce:59:a5:28:e7:94:ad:6d:f0:57:74:bf:6e:44:
eb:83:7f:1f:85:14:40:1e:e6:ea:42:00:75:a1:e3:
d7:78:19:c2:db:b7:d8:16:6e:79:54:b0:dc:19:e9:
cd:60:67:30:89:e2:76:1e:27:96:6b:de:3b:ff:6e:
a4:d7:72:96:76:9e:04:b8:97:06:53:bc:d7:9b:4a:
ed:7b:d5:16:82:b0:7f:45:0b:47:8a:49:16:4f:62:
7e:ed:d1:97:f7:00:e5:bb:ea:e0:fb:1d:7e:e9:11:
65:08:71:97:03:27:93:0f:66:f4:74:98:5c:43:b1:
0f:1b:c5:96:78:ee:b8:f0:60:ad:06:7f:fa:47:53:
10:95:66:80:0c:a7:cf:61:86:42:b0:f5:f0:c7:36:
eb:fe:32:50:5a:ae:a5:48:fb:9c:05:6e:23:2f:4d:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:F1:92:FB:90:BB:06:01:F1:A8:2C:75:0C:DD:5E:5E:B2:7E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.144.0-143.220.149.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:a3:f9:df:c9:ec:ca:9a:57:9a:4b:d0:2c:e9:02:30:ea:03:
ab:89:a2:77:69:d4:ac:42:ee:f0:9a:7d:c0:7d:5c:9a:85:94:
ba:8c:4c:a4:ce:8a:38:22:ec:2a:1d:38:ed:68:d7:39:31:dd:
6c:b8:03:fd:c0:66:cc:09:0a:69:21:b8:e4:41:af:07:97:71:
3e:29:9b:e7:c3:db:0c:f5:9d:4c:24:41:21:e7:da:1f:81:a5:
d1:7c:62:ee:9c:76:03:c9:29:fc:7f:da:13:4f:08:a8:8d:15:
15:98:13:52:71:d7:d7:1c:ab:3f:f9:bf:00:de:1c:2c:3b:9a:
0a:65:8b:c9:96:9b:7c:52:0a:ca:e0:63:5b:53:35:73:16:2e:
4a:77:1e:8a:60:e6:88:12:c4:e8:7c:5b:b6:e5:43:fa:09:f6:
6b:57:59:22:cd:f8:e6:eb:aa:32:aa:c0:63:5f:52:75:d5:b6:
92:bc:3c:57:00:5a:2e:65:c7:15:db:de:fb:af:60:27:e5:da:
7a:55:fe:11:c2:7b:98:17:a1:0f:87:a8:ac:2f:87:c1:92:04:
45:bd:3b:b1:99:65:6a:23:4f:eb:85:a9:7f:be:94:3e:57:2c:
d6:23:51:c9:89:e1:1b:48:a4:ca:ea:f5:02:84:99:48:c2:ab:
60:c5:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:32:33 2025 by rpki-client