
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa
File: d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa (raw, json)
Hash identifier: 0/gwwsDB1/w/VoBa2jdHKY5Ru0DdUCubfWsP8YpqNHs=
Subject key identifier: D0:63:ED:95:A8:25:BA:B2:1D:56:72:33:E9:2C:85:1B:7B:90:DF:A3
Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial: 010D0C9F4328584B328C43D0C00C8837510D8D40
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa
Signing time: Mon 15 Sep 2025 01:00:33 +0000
ROA not before: Mon 15 Sep 2025 01:00:33 +0000
ROA not after: Sun 14 Dec 2025 02:00:33 +0000
asID: 399045
IP address blocks: 199.204.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:32:8c:43:d0:c0:0c:88:37:51:0d:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Validity
Not Before: Sep 15 01:00:33 2025 GMT
Not After : Dec 14 02:00:33 2025 GMT
Subject: CN=6af3855f-271f-4263-a0d2-0e232a90b24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b8:db:6a:79:52:aa:05:80:4d:8e:9b:e2:28:
d4:59:6b:c0:97:f6:b3:1e:9e:86:2d:cf:f3:f3:6d:
65:b8:f8:2d:87:7b:91:87:35:3d:5c:a2:02:00:d4:
7a:1a:b7:7a:22:e1:52:b9:23:6e:24:7f:21:77:45:
c8:bc:c0:39:e0:17:44:91:39:cd:d7:50:10:8b:97:
01:ce:9b:0d:54:27:02:64:7a:ff:38:ae:fc:ed:00:
f3:d2:cc:8c:0e:be:5a:d5:3e:7f:8a:77:c5:5b:19:
00:bd:33:91:c7:03:e5:d6:3b:15:91:a1:ed:64:38:
8d:bb:9c:90:27:91:1d:79:c3:b3:f6:56:06:b7:2c:
5c:2a:37:eb:95:03:41:dd:ab:4d:f7:27:8f:4c:c2:
27:2c:e2:a8:93:cd:cf:7a:ef:65:f3:d5:78:bc:60:
bf:87:54:17:d6:d6:05:95:af:79:66:1a:6b:63:f2:
23:92:63:17:29:37:97:ca:06:74:3e:8f:21:9b:e3:
14:03:3c:20:42:6e:df:51:66:45:10:cf:bc:f1:0f:
00:33:21:a4:d9:26:9e:b5:af:42:f6:ca:15:66:83:
16:b4:42:ef:81:6b:3c:65:77:57:12:05:f9:2b:df:
7e:88:60:d6:fa:0e:17:21:ae:34:e2:79:cd:a0:f7:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:ED:95:A8:25:BA:B2:1D:56:72:33:E9:2C:85:1B:7B:90:DF:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
X509v3 Authority Key Identifier:
keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
sbgp-ipAddrBlock: critical
IPv4:
199.204.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:09:d1:9d:ba:b9:ae:25:fa:cf:af:c4:56:18:b2:e1:23:ea:
7a:c9:af:7b:69:ac:e1:d9:e7:a3:7c:b9:67:af:90:2c:cb:06:
dc:5e:c9:44:43:2a:04:cf:b5:79:7f:6e:33:58:fa:a1:71:df:
84:1c:d0:17:b0:8a:98:fc:30:e6:4a:f3:a0:e2:70:2a:e1:f4:
1c:73:04:e1:3b:3e:7a:bd:9a:cc:99:3b:12:18:08:7d:fc:ab:
e1:0a:7f:62:3c:5c:aa:53:73:e5:2a:f2:da:ec:8c:d9:8d:18:
e8:2e:b2:9e:58:a7:ac:66:59:84:44:e1:87:dc:f0:f3:6f:32:
f4:48:04:ad:1f:a2:b6:5f:d0:0e:8a:c4:31:4b:34:2b:c2:64:
d3:24:2c:e9:9d:40:51:81:dd:80:dd:21:c9:40:50:5f:66:b0:
10:62:3d:9a:a6:32:12:f2:22:ef:6b:d2:e9:27:01:0e:d6:7d:
73:ca:ab:02:15:30:ca:db:3f:e0:b8:99:40:74:85:76:4d:08:
6d:79:81:09:5c:dc:84:bb:ed:ee:52:88:1a:21:1f:97:0b:6f:
26:d4:cc:e7:35:27:8a:0a:a4:c8:c9:dd:98:ff:5c:e5:a0:10:
3c:6e:08:6e:0d:b8:59:c8:d1:35:87:de:bf:98:b3:d2:c4:3f:
3e:73:bc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:58 2025 by rpki-client