
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa
File: a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa (raw, json)
Hash identifier: 9q8EPXiKJCAOeEAjV6Er5rLOzZDN/d2UzbUo30bEa+4=
Subject key identifier: 86:29:E7:D4:56:E1:04:EB:36:7A:A1:0D:6C:0E:D5:6B:E0:56:6E:23
Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial: 010D0C9F4328584B99D78D158CC09B7AA0D09FC0
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 31898
IP address blocks: 162.253.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:8d:15:8c:c0:9b:7a:a0:d0:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=7ecab164-05ce-40c1-ace3-a195c2bcfe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:60:9e:b8:d3:9f:97:eb:5f:bf:a5:05:2d:
52:b6:50:e5:18:b3:3b:4d:9a:69:4b:a9:29:7a:4d:
d6:35:f0:3d:8d:e5:8e:b4:1b:60:5b:2e:f4:52:ad:
b4:97:7c:5c:fe:ad:29:e2:8c:d2:5e:30:3c:dc:ab:
05:65:e0:85:6d:6f:c7:68:3f:30:90:1e:6d:d4:a2:
98:62:46:ff:ae:c0:35:2d:77:40:93:74:c7:17:e1:
11:04:7f:aa:27:ff:23:32:77:6e:63:d6:20:f8:84:
44:fb:d9:89:59:97:f3:35:5a:25:17:09:59:94:4e:
1f:4c:6e:fb:ae:db:4c:a5:38:bd:e2:ba:8f:28:d3:
cb:b8:10:5e:31:44:78:01:71:3f:d0:0a:74:27:6d:
f8:53:44:95:30:67:61:aa:18:af:76:ed:92:22:ea:
ff:a4:ca:cf:5a:e9:18:77:b4:d2:fb:d5:0a:ab:f5:
ed:70:3d:b7:12:4b:da:b5:d8:d9:62:36:53:09:67:
17:c8:eb:8d:96:69:53:70:d0:77:67:51:d7:65:43:
32:cc:db:fa:ab:78:a1:e1:28:e6:21:89:07:8c:90:
9a:f4:27:d9:c7:03:b8:d7:d0:d0:24:29:97:2b:4e:
c0:79:01:ae:cb:56:44:fc:86:df:64:72:b5:34:f7:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:E7:D4:56:E1:04:EB:36:7A:A1:0D:6C:0E:D5:6B:E0:56:6E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/a816a3a2-4dd3-31a0-a0e6-f87205862e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
X509v3 Authority Key Identifier:
keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:7c:d9:f8:24:ff:20:ef:c8:07:29:b6:2a:f8:3e:24:35:54:
8e:67:8d:e0:60:cf:a7:10:25:a1:04:98:93:0c:85:b4:61:05:
40:63:65:83:8d:5a:e3:f7:84:26:cf:b4:60:c6:c3:f7:4d:12:
38:94:9f:d8:2c:75:1f:9e:0b:ad:00:2f:b1:76:9c:0a:63:4f:
78:4a:4d:98:f9:22:47:b4:17:5a:5a:f2:ae:ac:23:8b:7a:41:
44:39:24:58:25:1b:cd:e7:bd:da:7b:34:21:0f:8a:92:21:e2:
2a:ff:64:8d:bc:b2:54:4d:64:13:4b:92:eb:4a:c4:78:a9:03:
27:13:24:0c:f7:69:20:6e:2b:ee:6f:08:21:77:73:56:93:19:
8d:1a:7a:60:a2:7b:bf:5e:da:81:b8:74:28:99:06:a3:0b:40:
76:fc:75:4c:97:32:d7:15:3a:c5:e4:49:e1:a6:04:e9:0c:36:
ab:cb:35:1a:2f:36:e1:da:3c:8d:56:c7:e1:27:0f:eb:9d:90:
39:e0:49:74:08:ea:0c:6e:51:b4:00:a5:bd:7b:12:cb:78:ef:
e4:47:78:01:d6:b0:8e:0b:68:ef:7d:c1:48:d0:96:94:b3:56:
38:ff:47:35:b7:d4:7a:c4:c3:91:b7:8c:a8:0c:03:89:cf:ed:
51:4f:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:39 2025 by rpki-client