
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
File: bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa (raw, json)
Hash identifier: 2j++YBJPpVohvjmMdpZGayEuJgIEFOFq9NLBFWvfL9c=
Subject key identifier: CA:9B:36:D5:05:2C:65:6C:04:75:54:23:78:39:2B:8D:0E:A1:F4:DF
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584B38219EC29A75A45DAFC82600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
Signing time: Wed 17 Sep 2025 01:00:33 +0000
ROA not before: Wed 17 Sep 2025 01:00:33 +0000
ROA not after: Tue 16 Dec 2025 02:00:33 +0000
asID: 203724
IP address blocks: 161.69.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:38:21:9e:c2:9a:75:a4:5d:af:c8:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Sep 17 01:00:33 2025 GMT
Not After : Dec 16 02:00:33 2025 GMT
Subject: CN=32f963c1-0116-4049-bab1-50a61a8ea58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:b9:87:dd:85:3c:45:d3:a7:54:8c:71:ad:
6f:35:21:3f:59:0a:46:12:45:40:54:da:39:f2:08:
3d:26:c8:45:90:1a:f5:24:13:15:87:42:b0:58:a9:
d9:e9:db:b4:4d:36:5e:16:c8:e4:b6:b5:ea:3b:e3:
e7:be:3f:a4:53:ac:8d:59:6b:d5:32:59:a3:3a:34:
b3:21:14:bd:e6:ca:d1:5e:f0:bb:4d:63:41:ff:c1:
d1:f3:64:04:5b:ce:0a:b5:5f:17:05:d4:a6:9d:9d:
98:cd:be:fb:72:14:5e:cb:ae:f7:4c:b2:0c:92:45:
b8:a1:ec:ab:68:db:a8:22:1c:71:78:4a:db:45:80:
fc:f4:9d:cb:50:fb:66:8c:0f:78:24:26:39:b8:3b:
51:7d:fc:31:b8:00:cc:7f:16:00:94:49:e9:35:f7:
62:b7:30:01:19:41:60:21:f5:e1:80:c9:7c:4b:3b:
f7:f3:2e:69:f6:f6:f8:67:a5:d2:73:92:21:22:f3:
a1:e6:fd:06:ab:cd:29:93:fd:57:e1:ba:4e:e9:93:
1c:64:1d:83:60:f2:52:37:15:a3:40:96:23:99:d6:
c0:ab:69:60:0e:07:ef:72:de:b1:9f:3b:1c:15:68:
c0:f4:42:3c:ec:e5:10:5f:6d:4e:b7:16:ad:2f:a1:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:36:D5:05:2C:65:6C:04:75:54:23:78:39:2B:8D:0E:A1:F4:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5c:a3:fa:83:f6:d9:b3:ac:a3:da:ad:0f:0b:1d:5f:07:51:
fe:3f:1f:0b:ca:6d:7f:8d:77:70:ce:ab:6a:9f:5e:eb:70:90:
77:6b:1d:75:c0:f1:ed:6b:01:ff:26:72:98:15:fb:79:e3:06:
91:bb:a8:d9:36:e5:16:d2:cf:c3:c4:39:6f:b2:4e:58:0b:2e:
ff:1b:a3:16:41:80:03:95:9e:7e:a5:34:f6:1b:48:8f:bc:35:
32:74:6b:1d:c7:77:30:e5:c1:da:71:cc:fb:b9:1f:3f:15:10:
f9:12:f8:4d:b1:1b:6c:d3:48:c6:9d:d7:66:83:39:13:4a:eb:
3d:01:e1:63:a6:7d:02:67:3f:32:1f:39:db:9d:af:97:be:ae:
30:51:b7:fe:aa:78:6b:b4:bf:1a:61:00:60:b3:58:0a:9b:c9:
82:3c:44:31:b6:a4:70:98:c1:a2:89:49:da:55:37:5c:6f:1b:
dc:28:37:1e:82:1a:2f:6b:a2:45:ae:0c:4e:25:1b:63:e5:64:
2f:31:86:57:e5:fc:91:62:13:bc:25:72:d5:b2:c1:b1:9d:d8:
9d:be:f1:96:99:6a:37:22:5e:38:e9:5a:33:1e:e6:69:4c:af:
ae:fa:4e:c1:8a:40:2f:d4:bb:29:91:93:bd:93:54:fb:a0:95:
5d:61:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:20:51 2025 by rpki-client