
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
File: d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa (raw, json)
Hash identifier: 5+ZGAIxyxae57GQF+IWr4K781wG2tBYhPuXRc9uzn9A=
Subject key identifier: BF:CE:9F:78:B1:55:6A:89:9C:C2:4E:C1:F8:A0:F8:71:A9:94:01:18
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584AE9F66D8828D9DDAE7D0A0080
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
Signing time: Wed 20 Aug 2025 01:00:33 +0000
ROA not before: Wed 20 Aug 2025 01:00:33 +0000
ROA not after: Tue 18 Nov 2025 02:00:33 +0000
asID: 395963
IP address blocks: 198.150.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e9:f6:6d:88:28:d9:dd:ae:7d:0a:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Aug 20 01:00:33 2025 GMT
Not After : Nov 18 02:00:33 2025 GMT
Subject: CN=247f3d48-7c96-466a-8453-e41cb5f2b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:1c:a4:28:27:c4:3e:ad:d1:55:75:5d:2a:
71:53:8f:0a:4a:d7:a9:e2:bf:e9:41:c5:31:53:41:
47:f4:4d:b9:1c:eb:d2:c5:2c:78:17:d9:d3:8f:92:
de:ec:6c:31:f3:ce:31:9f:f3:7f:8c:55:ed:2e:41:
f0:bd:0b:c2:83:1a:41:ff:1d:ba:71:e6:b6:04:c4:
8d:22:38:97:4d:d8:61:29:23:cf:6a:23:63:af:5a:
99:6f:70:d9:6f:89:70:b2:56:a2:84:ff:78:bf:85:
07:00:e5:02:55:5b:8e:4f:87:93:21:e4:62:21:1d:
44:c1:e4:81:bf:98:1b:bc:58:dc:d4:23:a2:db:99:
21:27:5d:8a:3e:ff:0f:35:75:51:b1:67:47:dc:17:
da:42:61:3a:ff:17:73:96:25:52:5b:7a:ec:36:38:
dd:45:f8:ea:30:4b:43:ac:f6:a6:b3:f5:03:63:4b:
37:81:66:e3:ed:47:2e:0f:07:06:11:96:18:5d:80:
3d:ee:86:da:f7:fa:b1:79:a8:df:a8:e5:89:79:48:
ed:12:97:23:71:5b:3c:9a:77:91:3a:ec:00:99:45:
f5:af:a8:55:e2:07:c7:1d:e8:21:8e:8f:0b:a9:60:
24:3d:3d:f9:f8:99:dc:13:5a:54:0b:77:c9:80:54:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:9F:78:B1:55:6A:89:9C:C2:4E:C1:F8:A0:F8:71:A9:94:01:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:61:97:ed:a4:a8:85:79:12:76:b1:1e:dc:e8:26:01:0e:93:
51:5b:51:81:47:7b:29:96:b4:2d:d6:68:b6:a0:15:9b:cd:0e:
bd:e1:9f:a9:7b:cf:bb:6b:06:48:ec:6b:05:1a:9e:83:86:a5:
2c:66:c8:0e:51:2c:0d:56:eb:c8:37:61:3e:7e:44:1f:06:37:
40:8b:a6:35:2b:0b:0c:c0:f1:8c:6d:66:18:34:67:ef:8a:51:
44:85:eb:3e:24:f9:ee:c5:0d:e0:22:f6:81:57:1e:48:b0:b6:
63:28:e3:8e:ed:e1:09:2e:a2:ba:8d:70:c1:30:ed:3c:ed:3b:
63:9a:09:3d:6f:b4:87:94:b4:6b:e0:5f:38:c3:6f:bb:33:26:
4e:3b:98:a0:0c:8d:b3:ea:35:94:c2:01:49:48:55:c0:ab:29:
95:f0:3a:5b:b5:bb:ae:a9:19:0a:d6:5f:d0:85:dd:49:6c:76:
e1:6a:f3:03:e0:ac:bd:9f:66:c4:0d:25:87:a9:e3:da:92:26:
fe:c7:bd:5e:4b:61:65:be:d3:06:e7:6d:4c:44:0c:20:a0:a3:
ce:cb:51:30:6b:26:ac:ee:8b:a7:ee:3e:0c:01:c4:a5:2d:dd:
3b:7e:95:60:08:dd:6c:2e:2b:b8:a0:07:b5:de:ba:bc:23:cb:
44:ab:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:53 2025 by rpki-client