
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ed54afd1-5c89-31db-8494-c08f0aa273ee.roa
File: ed54afd1-5c89-31db-8494-c08f0aa273ee.roa (raw, json)
Hash identifier: v9cwo/uREtMCb24ZiMLUdYBLv9FvWkDz9j47UI0omv8=
Subject key identifier: D2:05:F3:27:B9:82:85:32:BF:10:CF:33:FE:40:B4:36:19:F5:EF:80
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F4328584BA39CF8748F34FC816A918F00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ed54afd1-5c89-31db-8494-c08f0aa273ee.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 14297
IP address blocks: 138.229.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9c:f8:74:8f:34:fc:81:6a:91:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=27b6851a-1436-40ac-b62a-53e92f9b4de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:20:d3:d8:99:97:20:37:c0:37:6b:69:32:
eb:f3:ec:b1:2c:75:79:8e:b9:b0:fc:a6:62:d5:cd:
08:47:79:6d:7c:36:db:d2:20:4c:9c:bb:97:d6:eb:
16:ec:6b:97:90:e5:2f:54:6e:ac:e8:1c:47:3c:84:
f9:3c:82:c7:14:e0:63:4e:7a:9d:06:fa:b9:b8:95:
90:8b:02:72:d8:ee:f7:fa:d7:c8:46:60:dc:41:6e:
bb:bf:28:9b:cd:d8:b6:74:cd:7e:e6:2d:6d:5e:52:
88:ee:1d:7d:55:1e:61:6a:e0:27:c0:c5:19:6d:19:
92:96:3c:86:82:fc:18:cf:3f:e0:5c:a4:24:21:d1:
3a:a8:9f:67:a1:b1:a3:b2:6a:82:d2:cb:9e:c1:5a:
ec:0d:b3:8d:28:e5:6a:9d:b9:e2:bc:64:86:e8:5c:
31:e3:11:e0:51:7d:a2:a9:02:2d:6a:7a:3c:a4:f5:
fe:d1:74:51:c8:a0:f0:bd:ac:28:24:41:eb:dc:fb:
59:35:21:07:43:95:6c:75:7d:c4:b8:7a:ee:f0:c2:
9e:13:f5:6f:66:f3:6a:54:17:ad:80:03:27:e8:6e:
bd:89:4b:81:b4:f6:8e:12:0e:1c:92:c6:03:6c:f9:
12:54:2e:6c:45:6e:3b:8d:d5:cc:3e:c4:38:1d:ff:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:F3:27:B9:82:85:32:BF:10:CF:33:FE:40:B4:36:19:F5:EF:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ed54afd1-5c89-31db-8494-c08f0aa273ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
138.229.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:7f:fd:dd:59:b1:b2:bb:67:ac:3b:a4:0f:30:80:5d:10:9e:
fb:c5:89:74:9b:01:6a:27:49:4d:f6:50:fd:1f:d5:fd:77:23:
49:d6:01:e0:c5:99:f3:0f:de:9c:11:d8:43:28:53:b1:fe:cd:
e8:98:e9:ab:f8:6e:ed:df:f3:76:35:89:03:fc:cb:c6:e3:33:
21:1a:02:43:f3:aa:b5:6f:78:02:e4:69:c2:70:7f:ae:5c:75:
8d:99:8d:4b:52:34:38:d7:31:f7:2f:c8:4c:90:f1:5d:21:eb:
96:3f:b2:c9:e0:aa:e9:89:60:e8:60:34:8c:a1:a2:78:57:00:
74:f1:cb:97:d5:f0:de:eb:5b:a0:f7:6a:c5:20:b3:c3:a5:ac:
c0:5b:84:b6:69:c8:ca:8b:3a:ae:e1:e0:bf:00:be:6e:d8:72:
a6:fa:1d:64:0d:4b:ac:f8:4d:fb:21:5c:cd:43:38:04:1c:62:
c3:91:ba:a8:67:c8:44:82:1c:fc:4b:71:ab:a0:9f:66:84:01:
0a:1b:e1:a8:2e:fa:3c:68:0d:94:60:64:2f:5b:e8:d8:75:25:
69:0d:b0:dd:8d:d9:44:40:0a:fe:2a:8e:b1:75:f4:c5:e2:fe:
e1:c0:b0:65:3c:21:45:bd:94:e1:4f:3a:fd:83:54:97:e4:44:
02:13:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:18 2025 by rpki-client