
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
File: 4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa (raw, json)
Hash identifier: jDl1uRHMtx1C33tO1a8bCvSZfxRuNjR/hOxVS3NlMTE=
Subject key identifier: 7B:D3:1A:5C:CC:6B:E0:78:A3:72:29:20:2F:A9:3A:25:A4:7D:1D:1A
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F4328584BB2F7C47221E7857365290E90
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 398116
IP address blocks: 65.51.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:c4:72:21:e7:85:73:65:29:0e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=5d22c809-453d-409d-af11-03706850bfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:e8:3b:0a:43:06:b7:94:7e:cd:52:f4:48:
56:7b:15:52:93:1c:86:25:70:cd:dd:91:c7:8a:4e:
29:e4:42:56:a5:78:ea:77:2e:fd:dc:a0:a9:29:65:
10:79:5a:87:33:d3:61:02:16:d0:c1:15:7d:8d:2e:
a2:ce:b6:47:9f:3c:dc:85:7b:be:92:2c:1c:3a:9c:
1b:cf:7a:74:0b:b8:bd:5e:7c:ac:94:33:14:da:d7:
dc:8d:94:3d:ed:b0:34:e5:a0:37:04:c8:54:f3:95:
07:64:df:23:6a:ed:d7:e0:d0:cd:4e:da:00:16:eb:
ea:b9:40:b9:da:08:31:65:af:db:f9:06:14:73:f5:
89:7e:7c:5b:ee:e8:3a:17:78:5c:85:64:23:7a:eb:
b7:09:7a:9b:be:b4:23:ea:04:7f:6c:e4:e3:77:ed:
5b:b4:d2:de:16:77:6e:e7:4a:b0:7e:e0:a1:c5:b4:
0f:5f:79:6d:d3:42:68:26:dc:5c:0a:d8:ca:cf:5a:
fe:9f:69:a8:21:7b:06:70:19:ef:69:81:e8:c4:07:
93:f0:fb:7d:03:64:c2:14:c8:1c:82:60:3c:67:cc:
2e:37:4c:25:d5:04:4e:1b:91:be:50:9f:91:3c:29:
78:18:9c:aa:f3:c8:1c:77:55:5c:8c:46:58:dd:85:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:1A:5C:CC:6B:E0:78:A3:72:29:20:2F:A9:3A:25:A4:7D:1D:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
65.51.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:69:87:a0:1a:13:c0:39:62:6a:13:6b:98:26:d7:f0:43:21:
69:b0:97:b5:84:29:b1:85:0f:7f:49:67:57:cd:8a:2b:6f:ee:
31:b3:6f:21:de:6d:74:7f:8e:ac:4a:99:65:42:ba:4e:d6:84:
19:98:da:55:fe:d1:61:15:9b:72:3a:2b:b5:3d:77:48:b1:30:
da:0b:ec:c2:52:c5:df:48:21:87:d7:67:ed:0b:19:3f:e6:9f:
15:c9:26:76:1e:87:81:5d:2b:d8:fd:27:ac:7a:a2:63:5d:94:
16:fd:69:aa:62:71:0d:f6:f1:82:7b:cd:02:4e:ab:72:7d:8d:
55:e2:68:e5:7b:6a:2c:57:a8:d8:85:3c:01:02:11:39:0b:60:
b4:53:c3:46:4b:42:76:12:3e:69:b7:e0:bb:7c:02:90:92:38:
fb:5a:62:15:3d:0c:ae:45:65:db:97:b2:75:eb:62:a7:80:1c:
b7:d6:eb:29:86:d1:f4:72:9d:87:c5:b4:66:21:ba:42:29:7b:
90:75:65:88:04:d8:be:11:bf:dd:58:5f:7b:ee:fc:dd:ed:67:
5f:51:de:66:77:62:5a:71:17:1a:49:03:eb:84:ae:41:42:80:
73:76:ff:29:17:f3:35:30:6a:49:c2:1c:b5:59:06:9a:66:e8:
30:85:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:26 2025 by rpki-client