
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa
File: ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa (raw, json)
Hash identifier: SRoq20eAFJFOaI66A4LkcgmL5vTCA9Nf0s/pcAckRDc=
Subject key identifier: 35:46:DB:08:ED:85:29:D9:55:50:4B:88:2A:58:55:44:A6:D3:04:5E
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584BABFD0150D7AFFF826F16F180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 20454
IP address blocks: 66.85.128.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:01:50:d7:af:ff:82:6f:16:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=d38fc6ae-6792-4c85-969d-38ef8bf73651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:43:78:d0:2b:43:cc:52:48:84:45:f9:bd:
96:10:60:12:8a:9b:cd:25:93:b4:5c:4a:68:99:a6:
b8:84:ba:21:cd:20:7d:fc:c5:a1:f3:41:01:8f:0f:
3a:bf:8b:f0:02:29:2a:6e:a9:59:fe:80:01:5e:ab:
14:93:d5:e6:f6:36:c7:2a:a8:80:53:c3:99:88:f9:
19:94:e7:5c:0f:6d:60:60:01:bb:11:60:bb:4a:82:
6f:c1:f9:90:42:30:19:4e:12:9d:db:81:bf:c8:44:
55:66:e3:8e:f9:06:db:11:0c:a7:60:5a:43:11:e5:
a5:d6:59:8e:db:57:47:2f:8c:cc:80:59:06:e4:a1:
a3:6c:30:f8:4d:c5:ab:ef:46:b3:dc:30:22:86:43:
31:9e:07:16:e3:51:fb:18:d6:f3:0e:67:49:1c:72:
00:e1:46:e7:97:ab:2c:79:d1:71:50:0e:b2:c4:16:
b0:a1:c9:57:f7:43:7b:2e:cb:d6:68:c4:2f:28:a6:
c4:a7:27:79:ec:77:b2:1c:8c:39:7f:a5:05:3f:2f:
fc:c3:34:7e:fb:e4:df:f7:b8:cb:30:18:a8:46:d7:
d1:6c:09:39:d5:ea:31:1a:09:a9:84:62:28:07:dc:
95:04:04:83:52:b8:dc:2c:d7:60:fa:2e:2d:72:79:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:DB:08:ED:85:29:D9:55:50:4B:88:2A:58:55:44:A6:D3:04:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec07f326-52eb-35bf-8c77-cafd1a2e6c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:93:11:26:43:81:09:5f:24:ee:f7:1a:b3:36:57:4d:13:24:
ad:6d:0c:fe:97:60:6d:80:be:e4:f5:4c:44:1a:07:15:fe:36:
3d:36:86:a8:52:89:3d:49:52:c4:7e:87:e0:f2:ef:97:ad:65:
5e:38:96:c4:6b:bb:57:31:e3:b0:a1:c4:e3:51:ea:54:c7:eb:
59:61:b7:9e:e5:40:7e:93:26:3e:b3:8b:60:67:bc:da:f1:84:
72:93:ee:df:f5:dc:e4:e9:4b:52:6e:5e:05:06:a9:63:d7:dd:
16:63:73:9c:97:5f:35:df:97:ea:e6:30:76:fd:f1:2b:24:cd:
2d:e5:c4:7a:d6:9a:f8:84:c2:5d:2a:7b:c7:ac:90:6c:8d:2b:
e1:49:30:ea:ec:da:44:24:49:7f:8b:59:1e:9f:0d:eb:da:46:
e7:e4:ba:c9:1d:39:b4:6d:d7:d2:d8:03:a3:26:49:b7:f4:ca:
f9:ad:5c:f6:b6:60:27:24:5c:c9:4d:65:86:14:8a:52:4a:47:
32:a2:21:b1:69:17:65:f4:8f:85:58:28:a2:4d:be:f5:0d:85:
8b:2b:6d:25:ec:11:b1:c7:d6:5e:ca:72:dd:27:2c:b2:fd:46:
a5:cd:41:a3:59:aa:96:4d:ed:86:e7:37:a2:7a:ba:a8:4e:7e:
d5:c4:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:54:05 2025 by rpki-client