
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
File: 70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa (raw, json)
Hash identifier: GiqZwH4B39JrfIVoop93jDGYrkhvxmdL3Op0tEjVjp0=
Subject key identifier: B1:E7:61:44:CC:AE:BB:81:25:C0:A1:78:20:10:25:52:6A:A8:90:BA
Certificate issuer: /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial: 010D0C9F4328584BA0D2611173CAC51980245720
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 400633
IP address blocks: 23.226.160.0/20 maxlen: 24
64.190.44.0/22 maxlen: 24
168.100.48.0/20 maxlen: 24
216.246.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:61:11:73:ca:c5:19:80:24:57:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=e3b52b26-3396-42f5-ac19-f6f7035da8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:0d:55:a8:a1:f6:a8:39:f9:ac:22:8a:a4:
80:99:bc:e9:7c:55:7f:52:7c:55:82:ae:6b:9d:bc:
49:22:e3:1c:a5:95:bc:fc:05:e5:63:cb:86:53:72:
68:fe:ab:8a:4b:7d:ff:97:45:0e:8f:3f:bd:dc:96:
71:d8:34:d7:cb:f9:9f:3e:43:96:02:1f:7e:0e:c7:
3a:00:ba:c7:d5:9f:b1:6f:6d:80:3d:30:5b:5a:9e:
20:bb:58:0c:dd:06:9c:35:34:a8:05:52:fa:81:35:
fe:34:56:1c:63:a7:90:ca:82:db:92:22:e3:c7:b6:
b8:9f:fb:0e:08:b4:b4:d7:0c:ee:b9:2a:a1:b6:ca:
b2:f9:27:58:67:14:39:2b:22:71:47:ce:42:20:e3:
c1:9d:79:13:dd:e2:8d:16:30:04:0a:97:c9:38:b1:
21:66:f8:f6:ff:a9:f7:58:b5:c8:61:ac:9b:f2:47:
bb:75:79:6c:31:6f:c8:58:1f:88:04:47:cb:a9:b4:
86:a8:17:3f:2a:c4:a6:ba:42:c2:f1:39:a8:58:b5:
f7:ec:ae:ed:26:2e:a3:55:cb:67:e4:8f:0d:98:ed:
c3:2b:f1:fd:71:33:27:ea:65:3e:9d:80:70:29:9c:
37:68:1b:5f:5f:cf:83:b5:d1:e8:32:ce:4b:da:46:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:61:44:CC:AE:BB:81:25:C0:A1:78:20:10:25:52:6A:A8:90:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
X509v3 Authority Key Identifier:
keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.160.0/20
64.190.44.0/22
168.100.48.0/20
216.246.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:77:72:27:ff:16:df:3a:8a:32:52:69:40:06:56:44:93:d2:
82:2e:78:f5:71:41:bf:47:eb:96:b9:a4:0c:5b:c9:fe:d1:92:
ca:2f:98:8b:48:0a:c6:cb:ca:84:5f:08:37:a5:88:bf:c8:f4:
8c:5d:ae:ce:80:ad:d5:58:42:e2:b3:5b:1a:14:1a:38:69:c5:
5a:3c:87:ea:96:ff:91:40:65:45:3e:15:d5:af:09:6d:88:f5:
a3:a2:2d:02:eb:7b:c4:be:0a:43:50:16:9c:a3:57:bd:5f:21:
b1:dc:d5:bc:d0:1a:38:1b:63:85:5f:93:74:b8:7b:ed:6a:d7:
56:0d:2b:30:3c:e7:7b:46:74:7c:85:73:5e:5a:52:a5:e1:fb:
11:3a:4f:2a:d3:76:6c:a6:2a:39:7e:c1:5c:c6:fe:ae:3a:a1:
5d:83:28:b7:3c:1c:3f:55:e3:e6:51:3c:8b:8e:f1:44:d1:83:
06:2b:99:c5:7e:6a:d4:cd:dc:75:e2:d6:92:d7:d6:f9:0d:b8:
73:a5:f0:80:0c:30:1a:1d:1a:f2:02:68:d8:47:77:64:62:24:
91:df:61:67:06:74:4f:8e:c7:40:ed:5d:b8:87:c0:f0:6c:c0:
92:5b:d5:99:f2:6f:5e:81:32:6e:bd:70:d8:a0:b6:5d:db:68:
c5:0b:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:05 2025 by rpki-client