
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d016d2a0-374d-32b7-bd21-b96f19f7369d.roa
File: d016d2a0-374d-32b7-bd21-b96f19f7369d.roa (raw, json)
Hash identifier: FIZpjN+/F+68fyOGEULtWIIlnzlrhFgmY1jJuxCr/t8=
Subject key identifier: 9F:42:64:E8:1D:1B:5C:45:45:5A:32:9E:49:97:58:7D:90:85:9C:EE
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F4328584BA39D071923B22CB00FDC0060
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d016d2a0-374d-32b7-bd21-b96f19f7369d.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 14297
IP address blocks: 139.131.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:07:19:23:b2:2c:b0:0f:dc:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=b2d91a49-4435-4ab1-b7e7-00bb4045f6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:de:6f:25:d4:e1:b4:d8:1d:59:d2:ce:ca:
08:dc:6b:75:83:93:d5:2c:de:b3:39:90:11:38:13:
f7:34:8d:0c:63:64:25:d0:04:2e:6f:3c:25:06:ca:
b4:a3:ba:3c:ad:04:61:c0:01:ee:9a:26:e0:bd:c3:
2d:60:e7:15:76:23:05:a2:d0:b3:61:ed:8e:6f:33:
e7:d8:9f:82:aa:73:9d:f8:10:a8:09:f0:85:f4:ad:
e5:18:1f:42:dc:5c:b0:6a:82:51:5e:16:27:5b:a0:
7b:3f:60:eb:8f:ad:cb:c8:c1:e7:65:b2:3f:c4:96:
32:60:81:e8:44:cf:ef:df:ad:bf:eb:1e:2e:70:d0:
81:53:9a:e6:68:c6:17:5f:e1:77:b0:f9:59:c1:fa:
23:63:b6:82:32:b9:45:d4:35:94:b2:5c:bb:8c:d4:
fc:3c:a3:c2:6d:e6:ca:0c:04:be:da:43:39:6c:bb:
c5:48:fd:83:94:43:40:23:5d:f3:7a:a9:8e:cb:d4:
13:17:8a:9a:6b:85:25:51:e5:1b:8f:aa:95:c9:7e:
a5:48:c1:a0:8a:93:09:a8:0e:9f:b1:cb:ca:3f:b3:
54:81:af:be:a9:61:eb:03:81:bf:ba:6b:70:a3:fd:
19:e0:17:ea:32:50:88:7b:8c:62:41:0b:65:d4:94:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:64:E8:1D:1B:5C:45:45:5A:32:9E:49:97:58:7D:90:85:9C:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d016d2a0-374d-32b7-bd21-b96f19f7369d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
139.131.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:30:aa:6d:a7:71:7c:a5:70:4b:bf:36:0e:59:04:66:a3:cd:
1c:65:d0:31:0c:27:b3:46:d4:17:6e:3e:50:b6:4a:b1:7d:e9:
ad:d8:fa:54:9e:74:f2:7b:a8:17:68:53:e8:cd:89:59:13:4f:
a0:8b:c1:d9:b4:49:aa:9e:28:90:4a:88:a6:a2:89:56:a5:cf:
6a:32:53:bc:34:7f:8c:54:6a:43:f5:1a:3d:48:f0:86:24:de:
ae:e6:95:5e:24:0b:1d:03:6a:c3:fe:e4:da:20:ae:19:6a:35:
d4:73:e2:d3:e2:df:fa:0d:51:08:b7:8f:d5:35:8c:1e:6b:b4:
27:7c:91:0b:5d:db:7b:55:b6:12:2a:e4:1c:15:b7:96:f1:05:
d8:6a:8c:80:ba:26:7d:8e:35:1d:0b:6a:40:8a:8a:fc:3b:1b:
37:10:2a:b6:93:d5:78:b8:91:bb:09:2e:b4:13:1d:34:c6:c9:
33:a2:dd:cf:9f:e2:37:e6:6d:be:9b:fd:1b:1a:a4:6a:36:b0:
ea:38:aa:39:bc:ba:ce:39:69:d1:f2:c8:55:a0:6b:87:c9:3e:
3f:7b:3b:d9:70:69:08:84:e6:ec:1e:de:5a:16:f8:be:c4:16:
b5:cf:cf:11:a1:34:78:8e:26:70:bc:37:35:3b:f7:c5:34:d6:
74:e5:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:22:22 2025 by rpki-client