
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
File: 23aa5ada-e8c6-3774-8704-d313c1478c4a.roa (raw, json)
Hash identifier: oIyK9cfiCuzD7hHMb8/udARrK6ypOLxCcOW+Z4SnyFU=
Subject key identifier: 9E:27:76:28:95:EE:C1:49:CD:7A:35:DF:E0:A2:37:6F:D6:46:1B:E4
Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial: 010D0C9F4328584B99D787949DA2E6862476EF18
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 19331
IP address blocks: 192.199.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:87:94:9d:a2:e6:86:24:76:ef:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=a6fb0599-2b0d-4a8d-aff6-52454f9ce72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:d8:cc:92:98:b3:ab:ea:98:11:7d:70:d2:
f1:6e:08:98:cc:a3:6c:1f:c0:05:78:86:e4:49:62:
58:63:83:b7:c0:98:be:aa:a1:01:14:92:7e:41:f5:
eb:bd:50:a3:6e:af:54:cd:7c:3d:28:f9:e2:02:cb:
0e:be:96:c9:36:08:c9:ae:ef:a9:3c:27:98:a8:eb:
d7:41:4a:1b:39:06:b4:62:9c:3b:cc:4f:3b:2b:db:
49:d9:b6:98:03:2c:3d:b0:19:a9:a9:24:d0:d6:e4:
7b:af:b4:4d:9a:13:a1:7c:58:33:a2:22:97:76:c4:
4c:9c:6a:8e:a2:1e:02:f4:c4:05:c5:a3:34:19:4f:
70:e8:46:04:b9:0a:7a:75:16:13:4f:c2:32:b6:37:
7c:62:31:bd:d2:4b:d0:12:2f:f4:bc:be:7f:55:48:
66:5d:5a:4f:15:ec:70:30:11:cf:0f:a2:af:28:d9:
83:81:43:c3:42:31:cc:78:98:c7:2d:8b:e9:07:a1:
ac:b1:1d:6f:a4:48:02:f2:27:aa:40:52:bf:05:c8:
d7:00:3c:0e:83:75:f4:b9:68:13:d9:f5:ec:06:c1:
59:50:ac:22:78:62:2b:63:b7:d1:08:06:c6:72:97:
06:36:f7:0c:99:9d:c7:c7:a8:bb:3a:2f:d7:d2:f5:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:27:76:28:95:EE:C1:49:CD:7A:35:DF:E0:A2:37:6F:D6:46:1B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
X509v3 Authority Key Identifier:
keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.199.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b7:28:51:85:49:ea:a6:50:dc:62:46:73:04:0b:38:d8:b8:
19:77:5a:1c:76:2b:5a:0c:d4:1d:0a:fd:24:cd:9f:a0:b7:7c:
ee:2c:70:ee:ec:fa:e7:83:ea:8e:43:1d:24:76:70:7c:65:93:
78:82:95:12:e0:d5:d6:e5:7a:20:5d:53:cd:5b:8c:29:f0:b6:
ad:2d:b8:f0:4b:2c:10:e7:ef:a6:d0:fe:08:4d:b0:81:64:af:
17:06:54:1c:6b:1b:47:a2:11:af:8e:d7:00:d4:64:4b:7d:78:
8d:21:ec:31:7b:9a:09:f8:3d:0f:c3:48:8a:bc:02:7c:31:99:
bf:3b:4c:b4:31:7c:ca:b1:d7:d1:0e:3b:05:4b:c7:7a:06:61:
b5:b0:19:e7:3e:c7:0d:e4:f0:ba:6e:e8:b9:44:92:f4:22:92:
fe:2c:1f:c7:eb:20:a5:3b:59:58:71:1c:42:19:97:eb:0a:c9:
9c:4e:80:a7:64:0d:ff:37:f2:88:4d:8b:48:69:6d:a6:c9:95:
24:56:7b:c5:4e:85:5a:fd:37:b3:4a:25:52:b0:0b:99:e4:c4:
63:a3:9f:27:77:3c:fc:67:7c:1a:99:1a:4b:fd:7d:65:9c:71:
c9:68:b4:2a:f2:40:a3:97:d0:99:23:9f:d3:8a:45:4d:cc:72:
1e:d0:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:59:19 2025 by rpki-client