
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/38f33cf6-8a01-3173-bebd-9c47087bed96.roa
File: 38f33cf6-8a01-3173-bebd-9c47087bed96.roa (raw, json)
Hash identifier: 541VGno7CDiM4ya9KT70fEAqjrkF0iAGc9HTpsTe/i4=
Subject key identifier: F0:4D:6E:24:A5:1A:01:87:17:A5:A6:83:90:EB:22:E9:08:50:15:CB
Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial: 010D0C9F4328584BBFA5A3377D21A79728AF3200
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/38f33cf6-8a01-3173-bebd-9c47087bed96.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 30698
IP address blocks: 216.213.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:a3:37:7d:21:a7:97:28:af:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=caa776e4-436c-4e90-9488-969980dd8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:9e:77:f9:82:99:b0:33:48:74:36:f2:39:
f7:26:4a:c1:33:f6:e6:65:1f:5d:b1:7b:ee:7e:43:
5e:e0:8a:48:4d:c7:a3:db:01:38:28:57:b5:25:3d:
87:02:96:94:c1:58:0b:97:7f:98:8c:74:fd:4e:11:
7a:55:89:31:ee:e1:9f:5c:58:08:e8:97:b4:02:36:
4e:1a:19:7d:06:e6:44:a4:21:e5:6e:b4:0a:5d:49:
f3:a2:69:3d:6d:95:d8:a9:c9:fa:3f:73:26:37:40:
d0:36:e0:0b:c5:c1:a5:19:bb:3c:e6:d3:8f:d8:7a:
35:82:82:c6:9d:6d:a8:ee:b7:02:0f:1c:26:02:53:
2f:e9:8f:28:af:9f:d7:14:c9:1b:39:9f:87:e0:49:
f3:1e:7e:8d:65:33:9b:0d:c8:10:62:59:04:3e:ae:
1e:10:ec:94:62:1b:a2:9f:57:da:d0:36:e6:a6:24:
e3:de:75:c6:70:55:66:7f:37:19:0c:ac:28:47:69:
cd:5c:91:58:de:11:b8:3f:5e:16:29:39:1b:e9:6c:
48:7a:f4:22:a4:f8:56:67:41:90:78:bd:0e:ae:93:
9e:c9:48:fc:ad:ab:e8:2a:0e:eb:8f:41:cc:29:a1:
a2:6c:7a:9e:d9:3c:4f:73:49:ea:00:69:c5:9a:69:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4D:6E:24:A5:1A:01:87:17:A5:A6:83:90:EB:22:E9:08:50:15:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/38f33cf6-8a01-3173-bebd-9c47087bed96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
X509v3 Authority Key Identifier:
keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
sbgp-ipAddrBlock: critical
IPv4:
216.213.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c4:16:96:73:f7:dc:48:0c:e0:67:15:05:e6:eb:77:d3:43:
8f:78:4e:8b:dc:fc:9e:fa:ca:2c:3c:b5:ea:82:82:69:3e:13:
22:98:71:bd:ef:d9:96:dc:88:3e:9f:6e:a3:5b:fa:3c:8d:5b:
6f:e2:74:fb:ba:48:8c:00:9e:cf:41:2b:00:50:26:fa:a8:a6:
2f:4c:33:d7:ab:49:fe:26:82:fd:b3:14:3b:4a:47:25:8e:70:
9d:ab:43:e6:ff:94:5d:ac:d2:2d:9d:19:ee:88:b8:23:2d:b9:
86:23:e9:46:74:6a:f6:12:9e:ee:c2:3a:ee:34:d0:a1:2a:98:
6c:ac:40:91:8f:7e:73:8f:aa:f2:8d:d5:5f:95:52:da:f8:9b:
ee:71:8c:14:b4:d0:ba:cc:ca:39:d5:01:90:4b:38:64:ce:83:
ac:1f:43:dd:54:66:9c:75:72:20:0b:bf:a8:b5:90:cc:fe:80:
8a:fc:28:85:18:73:ce:45:5c:ff:19:7f:b5:c7:01:c3:56:a0:
3a:2b:c8:15:42:bf:bd:66:54:e9:b6:04:3a:80:8f:c3:dd:1c:
5c:3f:39:82:b4:0e:7b:f8:e7:37:fd:e3:a7:52:59:bd:3a:9a:
76:c0:fd:87:d6:77:c6:46:d5:05:b5:b1:3b:81:3c:4c:7b:d1:
72:32:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:25:20 2025 by rpki-client