
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
File: 610c7ada-377e-34d0-9c81-d4d76be9e55d.roa (raw, json)
Hash identifier: 7k1MAJWYLXaTqEpyQN+3WTb4hC2EW1TdJeiYSNs7k6g=
Subject key identifier: F6:E1:D9:06:CC:F5:83:4D:0E:F0:13:2B:13:33:2F:38:CA:6A:A7:AE
Certificate issuer: /CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
Certificate serial: 010D0C9F4328584B970CDCD04988BEDF1F769A00
Authority key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 398712
IP address blocks: 23.165.240.0/24 maxlen: 24
45.4.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0c:dc:d0:49:88:be:df:1f:76:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=da774e59-3f1a-4acf-a15c-832a06519ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:30:59:b2:da:28:56:b3:5c:a8:9f:cf:bb:
ee:f5:6f:b9:5d:5e:1c:9c:b2:9c:bd:36:91:f4:37:
e3:15:98:a4:d7:64:7e:9c:f1:4a:42:1b:13:d4:f8:
23:13:20:c2:2f:8f:39:f9:5f:98:1c:be:4c:55:1c:
a2:d6:ca:b1:c4:c5:05:74:52:be:85:01:8a:32:d9:
e9:b7:e2:19:86:f5:8a:e9:5b:8d:ae:21:1f:88:e9:
e7:ac:d7:a6:76:c6:b2:c1:83:89:b8:2e:99:1c:57:
8b:2f:62:36:79:ef:28:a0:92:76:fd:ff:51:4d:a0:
48:42:ea:ba:58:47:ad:56:a8:a9:60:98:9c:e4:d9:
0c:72:95:c0:88:b6:68:d9:f2:f6:35:34:55:a4:1a:
78:f1:b6:15:79:f2:63:e5:b5:90:61:3e:2e:80:fb:
5e:e1:ff:1b:03:ac:be:52:4b:33:d5:6c:9f:a4:69:
ff:b8:f6:a0:21:17:f5:09:c1:bc:a3:e7:65:4c:e4:
86:f6:10:0e:58:1b:2d:d4:94:17:4a:8a:30:c1:dc:
e3:51:01:57:f0:5c:20:c7:67:68:62:e3:e6:29:4c:
5c:07:fd:6d:fe:32:13:5e:25:87:17:ed:3a:a4:00:
a0:db:ba:23:ba:de:0d:cd:da:df:fa:93:a6:c8:8f:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:D9:06:CC:F5:83:4D:0E:F0:13:2B:13:33:2F:38:CA:6A:A7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl
X509v3 Authority Key Identifier:
keyid:BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.240.0/24
45.4.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:29:12:96:67:e5:dd:9e:c8:9f:4f:b9:a2:54:62:ae:1c:50:
f7:48:c0:28:7b:5e:18:d3:14:d6:50:e8:49:df:c4:1e:07:0b:
1a:0d:af:40:00:4d:8d:15:50:41:68:a5:01:ef:e8:81:2e:21:
f8:2c:e7:80:04:c9:f7:22:9e:3e:b7:25:ea:3a:16:3e:6b:2a:
db:24:05:f6:3c:c2:71:44:26:57:1b:a9:cb:a6:76:fe:31:47:
64:b7:9a:d4:38:ba:48:e9:91:76:1b:66:c0:4f:b7:9c:da:5e:
c8:f2:8c:df:5e:0e:16:1f:52:a5:ae:6b:b1:01:4e:26:1f:e5:
57:cf:8b:eb:f8:84:df:29:42:e4:e5:fa:5f:f1:fc:43:cd:43:
43:2e:f3:d9:2a:d4:db:0e:a8:49:0c:96:37:b4:04:95:8b:1e:
e8:38:f7:04:26:67:25:65:c7:fe:b9:27:a2:67:08:b6:db:5f:
10:fa:aa:bf:56:d5:f3:be:e1:4f:a6:2a:c1:4a:e2:7e:d4:c9:
a4:53:71:b3:ae:0a:f3:5e:f0:c6:02:73:54:f4:91:9c:c9:f9:
e0:fc:ee:7f:db:e7:be:d6:5d:0c:55:33:fd:51:de:38:c2:34:
cc:df:ce:05:37:9b:ae:83:db:1c:99:4e:e9:75:b2:f5:ca:36:
37:3e:d2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:30 2025 by rpki-client