
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
File: 0aace9ba-23a4-31b7-b17e-fca13712192f.roa (raw, json)
Hash identifier: J/fWLzf4QtpuVsAczTHIErVnHgOSWdWBvf6d+j0u2xY=
Subject key identifier: 42:75:FC:62:48:9F:D4:27:6E:5C:27:32:66:E5:19:37:B9:E4:D3:EA
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584B64CE1CFA572D0973291ACF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 36492
IP address blocks: 136.22.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:ce:1c:fa:57:2d:09:73:29:1a:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=5dd12406-6de8-40ef-b4d5-e506772e4f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:a3:d2:90:07:9c:b9:d4:28:dc:9e:5f:e3:
b6:95:09:34:3c:b3:ae:45:2c:31:41:ff:66:2b:07:
39:2f:0a:ae:94:0f:a3:50:2d:6e:b6:36:a2:c3:58:
61:f5:44:b8:c7:f8:93:d5:ab:ab:0b:d4:66:9f:e6:
bc:76:12:84:4b:e8:42:cf:56:7f:74:41:96:8c:61:
e7:5d:18:b4:72:67:f7:2e:e0:50:de:20:be:86:55:
45:06:c2:c0:da:cf:14:00:72:36:58:cb:18:65:ac:
af:cd:37:6d:d6:29:56:ac:28:0c:e2:2c:77:ec:a9:
42:d1:36:76:0d:44:53:0c:45:f5:d9:9b:5f:ac:9e:
0d:55:7c:85:a6:15:2e:9d:0c:f2:7c:de:00:33:87:
b3:0a:60:51:05:b1:d3:48:69:2b:78:3d:4d:e5:63:
ca:65:e2:70:82:a7:4b:a1:14:96:91:59:bf:d5:a3:
40:97:e0:85:c5:a7:f7:67:56:30:c1:d1:c9:d2:77:
c3:f6:e7:b3:8d:e4:0a:4a:ba:90:cc:5b:ea:f3:29:
fe:d8:24:76:b2:8a:df:72:58:24:92:18:a4:7d:dc:
6b:2b:44:0c:01:5f:49:db:78:3c:04:11:cb:d7:62:
61:33:8b:8c:ff:7e:95:30:2b:b4:00:6b:1f:3c:6d:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:75:FC:62:48:9F:D4:27:6E:5C:27:32:66:E5:19:37:B9:E4:D3:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b0:a9:55:39:44:63:d5:c6:07:8f:47:6b:15:cc:26:83:17:
1e:ed:6a:62:2c:d3:1d:23:44:4a:30:8f:aa:73:c1:c8:f7:e7:
14:9b:7d:d5:38:6c:04:66:1b:3b:f3:f5:32:85:30:97:23:80:
c4:bc:05:43:bc:5f:45:b4:9d:d5:25:90:00:cb:dd:03:19:a5:
a1:ce:3d:a2:a4:53:62:f0:7a:ed:e6:7e:1c:90:25:c3:41:6d:
41:22:22:39:84:98:8b:38:b2:4b:6a:af:e1:89:ac:1a:3b:26:
c0:e9:19:a9:1d:e6:86:96:2a:2b:b4:37:7d:76:e0:a4:ab:92:
27:29:ec:ea:7e:18:bc:d9:3c:b0:03:c8:54:20:3c:7f:e5:a6:
91:d7:9c:a2:46:cc:1b:84:bf:9d:9c:1e:ed:a9:6a:d8:31:b4:
7d:17:01:27:e6:18:b7:7e:c9:ec:e6:b2:ce:67:9d:78:b5:15:
41:8e:eb:32:29:25:e4:10:e0:7c:63:c4:20:81:00:26:54:ec:
af:28:c2:5b:63:ed:df:d1:8a:ad:df:da:92:49:ed:de:d5:da:
35:40:27:0b:db:7f:5a:46:b1:f3:6f:b3:e9:81:01:3c:bd:3f:
bd:f9:d0:fc:de:fe:07:02:2d:ed:68:9a:77:5d:57:bd:ca:7a:
67:ca:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:59:21 2025 by rpki-client