
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/8e099e1c-8c89-361b-bc31-d649231f7f2e.roa
File: 8e099e1c-8c89-361b-bc31-d649231f7f2e.roa (raw, json)
Hash identifier: aH4T+ZZtB1vziqhx0xTrawjjqOPhVbXHeNJu0SAVpM8=
Subject key identifier: 15:8D:69:38:FF:D6:20:4A:FA:07:68:DC:FA:4B:79:C4:52:B6:66:3F
Certificate issuer: /CN=2e91d8ca-5740-400a-abea-127078fa77ff
Certificate serial: 010D0C9F4328584BA667A33D3EBF8F25CD55C400
Authority key identifier: 44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/8e099e1c-8c89-361b-bc31-d649231f7f2e.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 33194
IP address blocks: 134.243.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:a3:3d:3e:bf:8f:25:cd:55:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e91d8ca-5740-400a-abea-127078fa77ff
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=ee6adc78-46c1-46c3-aab1-b9e321690ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:b9:01:90:92:bd:c2:71:0f:82:ae:81:9d:
30:a0:7e:1a:bc:a1:41:10:c0:fa:5e:2e:5f:5c:9e:
78:0d:df:32:02:f8:c7:b3:07:a7:3e:a7:a0:64:d8:
cd:f0:da:07:9a:64:18:57:e9:c1:70:14:e7:ff:5e:
5c:86:69:46:e7:00:af:a3:41:5d:59:a3:70:ad:c2:
06:b1:7e:a9:75:e2:5e:68:ff:64:32:51:dd:34:c2:
b0:0b:fd:4e:bf:92:7d:ce:af:84:dc:76:b1:b6:16:
50:b8:13:af:9a:0c:39:3c:74:ab:db:c3:c0:49:f4:
c7:6b:d3:35:a0:e5:0a:e4:ab:5b:bf:fb:c8:94:31:
79:e9:aa:58:d8:d0:ea:35:33:d3:ca:be:90:54:84:
7e:5b:9f:bf:7b:fe:c5:71:69:c3:36:42:d9:76:45:
7a:96:f0:db:4a:2d:8d:c8:59:d5:d4:85:79:54:7d:
ed:1d:62:7e:35:ed:d6:82:c8:e3:d1:78:b3:0d:77:
22:53:94:cf:89:df:28:55:22:c6:68:86:b8:bc:29:
1d:08:2f:e9:d1:ff:12:22:5b:ec:b8:b6:b9:9c:0a:
4e:b1:a1:54:75:ba:0c:38:b5:77:50:20:72:6a:8c:
8c:ce:67:f8:4a:35:85:66:d1:c1:2d:7f:b1:f3:c7:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:69:38:FF:D6:20:4A:FA:07:68:DC:FA:4B:79:C4:52:B6:66:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/8e099e1c-8c89-361b-bc31-d649231f7f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl
X509v3 Authority Key Identifier:
keyid:44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer
sbgp-ipAddrBlock: critical
IPv4:
134.243.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:4b:d4:4b:f8:1f:1c:de:0e:11:59:2a:e0:1d:73:1e:4c:dc:
91:28:44:d4:62:d3:15:73:17:ac:48:b0:15:86:20:44:d8:00:
2d:03:24:c2:e8:00:59:8a:82:75:cd:4d:e5:e3:84:ab:34:48:
8f:40:8f:32:d2:08:d2:71:79:fb:60:bb:2a:35:1b:e6:d8:11:
55:fd:0f:b5:7e:f1:b4:7b:14:da:19:6a:3a:c5:0b:27:e5:11:
0a:bf:ea:97:4f:6e:d3:f2:69:29:2c:e2:71:44:c3:03:9a:a1:
34:35:14:3e:f1:d8:d8:f6:9c:ed:0a:94:ac:71:74:91:46:ba:
02:91:5e:0f:15:76:d9:0a:b4:d0:e6:4d:e6:83:c9:19:13:60:
82:be:32:a1:75:23:e7:96:f3:e0:db:d7:d5:df:84:e5:55:63:
dd:a9:57:bd:a7:de:0b:21:59:06:f0:f7:67:0f:34:90:da:fd:
de:62:57:11:45:48:c6:43:bb:43:37:b0:f1:2c:27:c7:80:7d:
0b:50:7f:f5:c7:bd:34:1c:6d:b2:05:63:59:b4:74:3d:a7:e8:
d5:b7:ba:78:a9:52:d2:f5:de:0c:a3:0e:a2:da:b8:41:2b:9e:
52:ee:f0:28:5d:c6:16:81:62:a3:83:24:d5:b8:20:6f:80:82:
f6:86:a5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:00 2025 by rpki-client