
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
File: a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json)
Hash identifier: NagURLTg4pv4h+amqf9BDgNJCgBVcqdpysO6JKq837U=
Subject key identifier: 5C:04:F5:2F:41:64:E9:BA:60:C5:15:9D:0E:DA:F5:AE:EB:13:9A:C2
Certificate issuer: /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial: 010D0C9F4328584BAA9799A620F346CD3D716B60
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 16509
IP address blocks: 216.147.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:99:a6:20:f3:46:cd:3d:71:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=e3379ee8-44b9-4425-a111-1bc14eb8725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:1a:24:63:da:d3:85:c6:26:f7:aa:3f:5d:
8a:1f:14:57:75:7c:75:a2:f9:01:17:28:de:7d:e3:
82:7b:07:53:ea:13:f8:f6:20:0b:e5:64:3d:a1:0b:
5e:1e:aa:5f:be:a4:8a:52:b7:0d:44:31:88:3a:b4:
df:3d:1e:20:33:b0:51:d8:80:0d:37:29:9c:5e:f8:
fa:53:f0:6f:a9:a3:d0:b5:38:17:17:02:9d:26:9d:
56:a0:da:de:62:78:7c:e2:9f:8f:9d:a0:fc:9b:1d:
c3:a9:01:b1:18:08:45:7c:97:12:bf:fb:9d:88:d4:
1c:3e:10:e8:45:56:c4:04:f7:ff:c8:d2:0e:76:c2:
f0:0a:bc:49:99:b5:52:c1:cf:42:68:2a:26:7a:5f:
27:d4:06:c9:33:d7:a3:50:0a:54:9f:a9:52:8f:0d:
b9:bc:dd:03:09:7e:f8:f3:d5:a9:10:62:bf:da:1c:
96:8d:3e:4d:80:37:71:8a:b4:aa:ec:32:63:c9:c6:
75:88:80:d6:ac:55:ed:69:02:0d:93:e3:5c:61:51:
51:40:e4:4d:76:26:67:78:6b:d0:78:7e:f8:86:74:
48:3b:8e:b2:c9:43:85:57:56:82:9f:62:3f:fd:e9:
07:69:f6:88:74:52:01:ee:19:5d:dd:e8:36:14:f3:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:04:F5:2F:41:64:E9:BA:60:C5:15:9D:0E:DA:F5:AE:EB:13:9A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
X509v3 Authority Key Identifier:
keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
sbgp-ipAddrBlock: critical
IPv4:
216.147.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b7:02:4a:1c:2b:bf:cd:e8:8a:c0:d6:39:c0:13:9a:d8:b7:
84:62:5b:a9:11:37:68:3f:7d:30:27:26:cf:e7:c5:ac:a5:ee:
50:1f:5f:9e:1b:61:31:62:7b:f6:f9:dc:03:fa:d9:21:11:06:
fe:23:b4:10:97:4f:48:3b:a5:c7:8a:91:68:a9:3b:4e:32:1e:
0d:9b:0e:77:1a:f2:e3:b9:04:5b:f4:66:d1:f1:0e:04:95:5c:
1a:0f:67:a4:2f:d1:3f:f0:e5:1d:3f:53:5b:f6:8f:ca:15:7b:
72:34:0c:72:99:bf:42:40:27:da:12:e6:f6:e2:1f:c1:7f:66:
d3:ad:2b:7e:0e:b8:54:05:2f:6f:30:73:34:f8:ef:87:05:c0:
a1:9c:78:cb:e2:eb:06:d2:89:a5:30:8f:d2:3e:7c:6d:be:69:
f9:fc:95:f8:83:93:20:dc:2a:19:19:20:62:a4:1c:10:74:fb:
60:dc:0a:93:4a:83:7e:7d:f7:83:4d:fe:57:56:b7:d4:b3:a2:
10:f0:86:13:0c:32:a6:a2:50:b9:f4:b3:54:9c:b7:8a:3d:a4:
f4:46:cc:de:f1:6c:21:e6:ef:87:97:79:c5:5d:29:3a:f5:e3:
5f:04:e1:86:fb:19:28:27:84:bf:21:91:b8:53:07:bc:8b:01:
ed:d6:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:58 2025 by rpki-client