
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa
File: 8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa (raw, json)
Hash identifier: UBIInIFqqoi2lo4OebxeaYAhzDBeoVxgs+F4SLI475c=
Subject key identifier: 13:28:95:52:D7:FF:A8:8A:7D:2C:4F:75:EB:43:9E:2F:3A:70:1A:3F
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F4328584BB45D105960E15DEB7BAFEE00
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 25820
IP address blocks: 23.83.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:10:59:60:e1:5d:eb:7b:af:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=7b16321f-d709-46f9-b8e3-345eb50c2e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:f0:1f:0a:ee:a0:7e:fb:a0:23:4b:54:34:
d7:fa:07:05:09:2e:1d:5b:de:d7:06:1b:55:3f:ca:
f4:1b:16:79:bf:d4:a1:cc:55:b7:dd:86:58:af:c5:
0e:e6:be:73:aa:36:32:dc:71:63:a7:ba:eb:c1:d9:
28:4c:fc:cb:43:72:c3:39:56:41:df:29:ef:6e:06:
2a:87:1e:2c:f8:e9:1d:e0:c7:5b:05:24:f5:0d:fa:
20:f0:23:37:68:40:7e:25:d5:40:e1:8a:bc:aa:fb:
5f:44:18:d5:19:ec:2a:a7:a9:4d:28:79:bf:ec:c5:
bb:30:32:58:bd:7e:a4:9c:3f:4b:57:3b:a6:8c:1b:
f4:22:e7:33:0a:52:6c:fe:d8:06:0a:01:66:8c:d2:
6e:21:ba:9d:b6:b1:ba:7a:c9:fd:94:47:81:86:7b:
38:e7:f5:d5:58:40:f3:c4:a7:48:6b:5f:94:87:b8:
b1:24:b0:5a:da:eb:3f:55:49:d8:3f:4a:0d:f1:7d:
71:7e:06:cb:31:ab:f4:03:48:49:e8:57:1f:42:90:
67:80:19:63:ef:bd:97:ea:e1:93:03:84:8e:78:fa:
8c:60:80:a6:10:3c:36:68:cc:8a:8a:58:df:94:50:
65:18:fa:e0:6b:da:69:f7:b6:2d:99:52:34:b5:c1:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:95:52:D7:FF:A8:8A:7D:2C:4F:75:EB:43:9E:2F:3A:70:1A:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/8d8c9959-2723-31ea-a2c1-2cc861f5fc72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d8:ff:80:e2:25:38:9c:2d:54:45:55:35:6f:b4:47:de:d0:
fb:fe:35:de:29:3c:d8:02:46:fd:a1:aa:97:cf:3e:0d:1b:a9:
86:da:4d:17:9b:ca:81:5d:4e:26:3e:49:1a:36:bc:a8:bf:57:
05:0e:bb:4c:05:10:a4:2f:54:9c:f5:c7:9b:eb:13:0f:2f:47:
93:c5:5d:fe:6a:09:0f:3d:9f:3f:d8:88:d4:60:6d:2b:d6:91:
3b:24:86:f1:0b:90:ef:cc:9c:43:fa:75:50:f8:d3:94:b9:23:
c0:41:4c:90:dd:24:0a:1b:8c:af:9d:f5:a8:40:8a:a3:f7:d0:
7f:75:98:dc:73:22:82:24:27:4d:18:e6:78:1d:cc:59:93:5f:
0e:01:23:fd:f9:4b:d3:ab:91:e6:60:cc:8e:b9:b2:12:7e:3b:
17:2e:28:a4:02:10:3b:65:68:aa:9f:55:fd:9d:e2:ed:54:9d:
2f:0b:7d:bc:0f:d8:04:e1:12:d1:41:f5:e2:54:aa:1f:b5:80:
f4:09:c7:c4:69:fe:b2:6f:9d:1b:15:67:60:bf:bd:00:98:40:
47:58:1f:c9:04:19:03:81:ad:23:27:1c:e9:ff:f0:2b:aa:0d:
ff:71:4a:db:6b:8b:0a:ee:73:ec:40:64:56:03:a9:90:bc:8b:
69:bc:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:48:45 2025 by rpki-client