
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
File: b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa (raw, json)
Hash identifier: JSO7GednTQSjm/zIbpiLaPujQQ9E6PFIR3bZgmdHRy8=
Subject key identifier: 8F:34:50:EF:F6:06:33:43:E5:2B:21:8A:48:C8:0E:29:CA:95:1A:12
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584BB1925BE819594281BBF359B0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
Signing time: Thu 30 Oct 2025 13:00:38 +0000
ROA not before: Thu 30 Oct 2025 13:00:38 +0000
ROA not after: Wed 28 Jan 2026 14:00:38 +0000
asID: 271
IP address blocks: 206.12.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:92:5b:e8:19:59:42:81:bb:f3:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Oct 30 13:00:38 2025 GMT
Not After : Jan 28 14:00:38 2026 GMT
Subject: CN=f41e6063-0fad-4783-8963-c64ed1baf0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:eb:fb:c4:3a:eb:50:ff:ee:a1:9d:3b:43:
27:30:2c:09:77:bb:69:2e:41:a0:f8:40:93:59:1e:
eb:70:3f:6e:6c:51:4a:8a:83:dc:91:71:3f:80:f4:
98:98:ef:13:9e:72:90:6a:06:c4:5b:95:fb:c8:57:
46:09:a2:7c:75:2a:9b:22:33:cc:10:2e:39:17:4c:
54:35:67:89:77:4e:4c:67:c6:18:ca:c6:4e:9b:67:
86:4f:8c:b3:84:06:13:88:85:03:08:42:f3:d4:de:
24:32:b1:b6:d6:4b:22:d7:93:33:96:ec:34:ab:63:
22:df:90:25:c0:1d:16:e3:fa:99:ec:b1:c2:cc:ea:
9c:15:17:c8:23:fc:74:cb:ae:29:b1:e5:5d:29:31:
b6:ca:a7:57:4a:84:7d:06:f2:b4:34:30:5b:c9:2d:
8f:23:8f:b2:a1:dd:86:d0:32:18:44:0e:8c:1d:c5:
26:0b:ee:55:22:28:03:4a:c5:af:7b:7a:77:dd:db:
b0:f1:88:ba:9e:c2:09:db:04:ed:a2:88:7f:14:d3:
fb:4f:36:12:e0:ba:1f:f6:9b:63:84:35:ce:25:4a:
0d:b7:17:9a:f3:36:59:04:6c:b0:1e:04:41:ba:08:
64:e9:fb:40:ed:a0:ca:5a:05:89:98:ff:8c:d3:d5:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:34:50:EF:F6:06:33:43:E5:2B:21:8A:48:C8:0E:29:CA:95:1A:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:c2:40:fc:d0:80:d2:41:76:ff:61:10:84:58:7e:17:47:f5:
b4:df:96:64:06:de:f7:55:26:b3:c0:f0:97:22:47:d6:c8:40:
b9:17:9d:25:61:ba:80:d8:ee:f2:97:cd:a6:01:c9:ec:08:f5:
ee:32:c3:1f:1d:c9:71:13:af:ab:5c:06:e9:14:9f:33:dd:b8:
be:8a:27:4a:a9:00:00:4e:07:40:98:97:81:41:d5:8b:8f:dd:
18:db:42:d8:fe:31:b9:60:21:d2:f8:c3:f6:5b:c5:ae:12:43:
56:a9:8b:0d:db:95:d1:88:b6:f6:a0:24:99:cc:19:20:cd:91:
32:0e:9b:3f:c4:ad:aa:ff:6f:ab:59:51:b1:92:25:c6:ee:a6:
a6:11:74:60:cd:66:13:96:b7:45:c1:06:0b:2e:dd:23:f4:50:
04:37:14:bc:60:d2:ea:cc:4f:6d:f0:0b:eb:9f:7b:23:02:a4:
70:c8:ad:40:40:dd:44:da:77:86:b6:6b:f2:ca:43:0b:fe:a7:
2b:64:28:13:fc:90:25:d0:9e:82:64:54:ad:b0:78:0d:82:55:
7e:09:f0:b8:c5:bc:e4:81:1a:ce:68:d6:1a:ac:09:1d:07:5c:
59:51:c0:c7:19:c8:56:83:e7:31:74:e8:26:c8:91:d0:71:65:
63:4a:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:56:16 2025 by rpki-client