
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
File: f5e69843-5c54-3803-8848-2695037a74aa.roa (raw, json)
Hash identifier: Ket5KsI8DQC+cMgSfEpLnTn6sIaaAMIo49IzUrHzqr8=
Subject key identifier: CF:56:84:30:D8:9A:08:9C:6C:4A:8D:9B:A0:8C:29:28:15:BC:AC:C6
Certificate issuer: /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial: 010D0C9F4328584BB88D0DC1EA6C353AC83F7680
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 62958
IP address blocks: 168.100.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:0d:c1:ea:6c:35:3a:c8:3f:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=621131aa-954a-4c64-b2e6-9b4ce66b40ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:52:1e:6e:ff:51:87:5a:d9:d8:38:12:9e:14:
45:28:db:9d:29:d0:2d:c0:dc:67:82:89:3d:a5:46:
2f:78:56:4e:98:e2:18:f7:b8:e8:88:d0:24:dd:89:
31:ca:bc:25:eb:6a:af:40:c3:f0:62:0c:ac:22:65:
aa:cf:78:1a:f3:86:50:6b:35:e7:7b:08:e0:b3:07:
42:c6:be:9d:91:c2:6b:3b:de:32:3c:4e:94:ed:df:
a4:76:97:d0:94:3b:42:db:5b:39:46:49:aa:3b:ff:
40:28:1d:81:1c:5a:3e:c3:b7:37:f2:75:54:d6:16:
35:9f:72:58:15:b3:33:07:2d:11:85:71:66:69:dc:
15:0e:a9:47:18:d1:62:3e:42:be:2c:e7:25:9a:ad:
ff:cd:43:fe:a0:ce:da:b2:12:55:8c:73:98:c5:21:
56:70:be:0a:0a:f0:9c:49:3f:5b:03:61:9a:cb:5e:
7d:7e:95:b1:1a:7c:0e:90:11:9e:dc:30:94:c0:8a:
07:7e:f6:1f:fc:12:18:e0:55:c9:50:be:b0:b2:59:
aa:43:af:04:c8:66:df:1d:b5:06:61:62:5c:00:e6:
ff:91:8b:d7:7f:56:24:82:a1:86:2e:9a:b6:f0:af:
b7:3b:90:97:07:73:a1:99:3e:83:01:9e:da:94:f2:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:56:84:30:D8:9A:08:9C:6C:4A:8D:9B:A0:8C:29:28:15:BC:AC:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
X509v3 Authority Key Identifier:
keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e4:b3:eb:e3:74:b8:f9:c8:09:35:6f:af:1e:f2:59:e8:ea:
1d:55:52:eb:2c:ed:f7:e3:3b:75:1a:d5:36:b2:da:df:67:1b:
1c:e5:d3:45:cd:c2:94:09:7d:6c:51:72:f8:9d:fb:03:97:0f:
6d:46:3e:ee:88:c2:b9:24:ec:fe:b4:2b:b8:7a:07:b7:99:90:
8d:5a:81:c7:3c:2d:55:be:22:a3:7e:10:49:57:78:3e:9e:ea:
5c:fa:5a:a0:8d:f6:19:82:58:ea:21:32:4d:36:f1:07:be:30:
7d:8f:0d:46:7f:59:03:fc:27:a1:40:95:58:55:4e:be:45:07:
1b:14:36:fa:30:20:bd:2c:f9:0c:6f:e7:34:be:a3:6f:c1:db:
3b:96:2a:79:99:67:a2:84:89:bf:8f:6d:10:a2:56:c6:c6:d0:
f3:11:71:5a:5b:34:75:e4:40:19:5d:97:5f:44:cf:0a:1e:ff:
54:80:8e:15:83:80:22:f2:64:7d:d9:89:1a:d5:37:7e:30:b3:
54:fd:36:c6:56:52:89:e4:25:40:8d:b4:aa:af:fb:0f:0c:ee:
b5:82:10:c9:20:d7:d7:80:d3:6b:94:2a:bc:d1:92:d0:f7:d0:
0c:de:68:a3:a5:72:ef:f5:d3:87:64:26:7b:63:5f:d7:62:31:
8d:c9:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:22 2025 by rpki-client