
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
File: ad8a621a-0483-3ee0-899d-6e930c92bb98.roa (raw, json)
Hash identifier: yy6fobE3iAaftcgx8S9I+p5q42W2joXnK2ip4KpZrvk=
Subject key identifier: 6C:D4:30:E1:34:AB:AA:6D:34:E2:CD:45:8A:E4:F9:A9:26:F5:30:4E
Certificate issuer: /CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938
Certificate serial: 010D0C9F4328584BA39D022E686165DD52E66400
Authority key identifier: C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 14618
IP address blocks: 192.30.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:02:2e:68:61:65:dd:52:e6:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=07b559ac-6306-4516-a2ae-0ae9af716041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:3b:0d:c8:74:13:62:e5:58:2f:2f:3b:c9:
27:a0:2c:c9:fa:0c:1c:97:a1:fa:3b:e9:ee:01:c7:
65:63:34:d0:45:c2:1a:c9:7f:d0:a3:32:63:0e:b9:
6b:75:18:4e:ce:a5:8f:54:58:8d:6d:8a:65:49:36:
71:5e:34:6c:77:81:8a:02:73:5e:8a:79:76:68:0e:
d9:4f:3b:1e:d5:df:f5:4b:a2:71:23:12:b3:f8:f5:
37:17:d6:d6:40:a4:20:d7:83:12:34:cc:6d:0c:bb:
98:66:44:de:5f:90:15:bc:57:ff:46:87:80:6f:ed:
3f:77:7e:ba:18:5a:fb:04:ec:db:5e:d3:70:69:f3:
ed:5c:3b:73:89:9a:0f:60:00:b0:7d:aa:e9:5f:8c:
bd:cf:e9:09:4b:12:d8:ce:4a:2d:05:b0:99:c2:96:
29:81:ba:36:40:f5:20:85:0e:99:c7:54:40:1a:18:
fc:11:46:40:7f:91:89:e0:a6:00:46:6f:5d:b9:66:
d1:cf:f3:c0:f2:23:ab:79:e9:12:b5:2f:64:ee:13:
a6:3f:45:34:5a:f3:95:86:44:83:a1:18:f8:c8:73:
44:25:82:b9:ad:22:05:43:6b:76:7c:ea:7d:5a:e5:
cc:24:1b:4e:57:89:94:4d:60:1a:23:c0:19:39:57:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:30:E1:34:AB:AA:6D:34:E2:CD:45:8A:E4:F9:A9:26:F5:30:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl
X509v3 Authority Key Identifier:
keyid:C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:33:56:19:90:a5:8e:ac:a0:c0:e0:99:f5:d0:4f:b8:e0:f6:
5e:4e:1c:55:c3:f8:8e:6e:cf:9d:07:48:d7:03:ea:94:88:d6:
ec:00:5a:0c:bb:a0:c2:09:59:c1:aa:6e:70:df:36:46:1c:be:
00:21:df:f3:f2:df:69:0f:e8:84:4d:69:2e:86:9f:6e:0f:71:
fa:92:6c:c3:63:95:0e:e6:6f:6f:0b:84:1c:14:b6:38:07:95:
12:0f:36:5e:f2:31:83:0c:9c:b3:70:36:3c:4d:a2:74:39:6b:
b8:09:0e:af:a7:e8:50:43:8b:89:aa:26:76:f3:fb:54:f7:ae:
80:d0:40:6b:b4:69:cc:17:44:32:27:29:f5:61:d8:0f:bd:b5:
43:31:e6:ab:44:63:19:b3:22:80:ff:79:ac:de:9a:33:6f:e5:
38:60:c8:0a:b1:a7:20:cf:d7:1d:ea:39:a1:05:89:a3:94:a0:
0e:18:f6:9d:8c:46:df:98:05:95:e0:eb:83:81:e9:50:b1:f4:
f9:a2:10:07:15:e6:c7:dc:35:99:32:d5:77:e4:b3:b3:ff:e2:
1a:f7:b1:93:65:6b:ba:72:f2:71:56:8b:26:04:75:7a:20:1d:
93:db:72:6c:88:4a:b3:6e:bf:74:28:f8:be:3a:2a:f2:78:7c:
1e:62:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:20 2025 by rpki-client