
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa
File: 372a2f54-16cb-3168-b82d-50a9c389b093.roa (raw, json)
Hash identifier: lcY9qNfM3KZCNEG3NBRKp//0GaC5wI9kVHFd3LHZWQk=
Subject key identifier: E5:A6:47:51:B5:BB:8B:E3:75:4F:97:D5:32:FA:CC:8D:FD:66:90:3A
Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe
Certificate serial: 010D0C9F4328584BC371B3FFCDB14F6A59EE9140
Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa
Signing time: Wed 05 Nov 2025 22:39:26 +0000
ROA not before: Wed 05 Nov 2025 22:39:26 +0000
ROA not after: Tue 03 Feb 2026 22:39:26 +0000
asID: 14298
IP address blocks: 134.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c3:71:b3:ff:cd:b1:4f:6a:59:ee:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe
Validity
Not Before: Nov 5 22:39:26 2025 GMT
Not After : Feb 3 22:39:26 2026 GMT
Subject: CN=77c6c146-954d-447a-83f1-7659aeb39da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:08:08:f6:47:5f:16:96:11:be:c6:11:68:
bb:fe:67:bc:ce:bf:43:fe:10:9d:51:a8:fd:77:76:
36:88:a4:17:80:bb:91:22:c4:de:cb:3b:89:9e:48:
63:f4:44:bd:7b:f9:e4:4a:bf:24:56:fb:48:ed:51:
65:5a:85:97:cf:06:2b:20:29:7a:f0:32:71:54:75:
28:bd:82:82:34:de:5d:64:9c:ce:32:ef:81:aa:53:
5a:27:39:c9:da:49:c6:45:e0:85:b1:78:c5:81:dc:
93:05:60:30:de:61:dc:85:0c:d5:c0:07:50:9d:19:
f1:44:11:6a:7b:8f:91:09:b1:1a:1f:91:07:9c:2b:
50:fe:7f:8d:78:54:af:ff:c2:25:e2:c5:e7:ab:f7:
b1:fc:98:5a:24:9c:97:dc:31:5d:5a:a2:f3:75:f7:
40:d1:99:b6:ab:00:6a:2c:89:38:bf:ab:8b:0a:4e:
e5:1a:b8:6f:99:ee:9c:26:95:6a:07:ce:ed:1c:07:
cf:27:53:19:8b:07:c6:1e:ef:b5:d2:ba:84:21:0f:
75:f7:89:32:65:8b:17:3d:fe:de:bb:fb:9d:99:ee:
a2:b5:78:64:8b:a3:ab:5c:be:fd:ea:7b:37:ab:d0:
4a:40:3b:47:fb:05:19:6f:8f:ae:01:7d:ef:11:4d:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:47:51:B5:BB:8B:E3:75:4F:97:D5:32:FA:CC:8D:FD:66:90:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl
X509v3 Authority Key Identifier:
keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
sbgp-ipAddrBlock: critical
IPv4:
134.67.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:03:e7:c7:e0:3f:1a:6f:69:a2:78:e4:85:40:97:bf:22:18:
85:f1:3f:d0:69:9c:82:59:80:42:95:c0:7f:42:24:b5:73:77:
e2:04:6e:78:ff:cf:07:cf:19:72:5c:bd:f0:eb:9e:cd:2f:66:
f1:4d:53:02:ff:a7:54:de:a5:22:ce:85:64:98:79:09:81:f9:
7b:17:d8:30:fa:b8:4a:cc:c5:5d:38:ad:82:b3:1b:c1:f4:1a:
9a:8f:17:41:5d:11:0c:93:1d:57:b5:a2:c2:d3:ba:91:a2:7b:
c4:65:6c:8e:88:53:52:cd:bf:18:90:3a:0c:e5:3d:3a:d5:5a:
0f:77:3d:d5:63:fa:5d:ce:02:2b:0d:7a:31:a2:00:1c:73:0d:
29:9b:63:57:a1:d5:1e:2f:3b:84:b6:e6:2c:e1:f7:d7:c5:f6:
4b:c2:b0:a2:aa:ba:6d:44:5b:55:80:66:37:1d:f3:8b:9a:42:
46:d2:4c:ec:e0:06:7f:32:52:94:86:ff:24:57:ea:84:a7:a2:
e0:a8:e8:ab:b6:fd:42:d3:a2:ee:be:88:19:ff:eb:41:8f:35:
07:8b:01:4b:ee:9a:0f:1d:e9:2e:c6:f1:38:16:bf:37:e0:76:
43:99:cf:0a:43:7a:57:08:61:01:48:35:55:fe:12:0f:72:c7:
50:6e:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:15:48 2025 by rpki-client