
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa
File: c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa (raw, json)
Hash identifier: zLGxRJ3eJSTc75TmFZ4c1j9qAm1rWqtvqjYyfFNPJS8=
Subject key identifier: 38:EC:09:B2:6C:64:78:FC:22:69:28:45:8C:7B:BB:89:AC:78:08:07
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584BA7CCF00FB72E00910BDB8980
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 271
IP address blocks: 142.231.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cc:f0:0f:b7:2e:00:91:0b:db:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=9474d9ad-db2b-4ae9-bd1f-c65f8d5fcead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:83:47:31:7a:1d:7f:a2:7e:09:07:7f:8d:
44:a9:6e:d2:6f:fb:03:37:f8:82:cb:80:e4:b6:02:
f4:0b:ab:80:bd:b4:77:ec:fa:8a:0b:5b:65:1c:65:
ba:ee:27:8a:31:1a:fa:83:9b:b8:68:4c:b0:dc:97:
53:28:bc:c6:b9:4c:7a:73:a5:c3:24:12:ed:83:55:
67:6e:b7:4a:9a:1d:bb:c9:bd:29:13:4c:c5:be:56:
8e:00:b1:a0:4d:26:77:50:b2:fd:1b:82:fd:91:62:
a3:03:5b:f9:c8:ae:51:b8:20:e7:90:b2:37:d5:0e:
82:df:e4:b5:10:cf:73:6c:aa:18:3d:db:c5:7f:ac:
25:57:c5:83:57:03:09:8c:b2:d1:b9:12:47:92:5a:
27:a4:0b:45:b7:7d:d9:0c:65:4f:cc:d7:97:51:8e:
68:8e:52:3a:7d:19:46:3e:ec:99:8c:dd:1c:ea:7f:
ee:2d:91:94:f8:8c:1a:b4:22:de:5f:98:ad:46:12:
93:28:ae:de:aa:31:d9:3c:09:6b:4a:df:5a:96:48:
52:52:ca:8d:52:a1:69:7f:9e:d3:a9:09:d0:c1:7f:
da:e2:28:51:37:69:45:50:1c:74:60:06:61:b7:ab:
2f:4a:64:95:96:b9:7a:8d:61:e3:81:55:bf:9b:9f:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:09:B2:6C:64:78:FC:22:69:28:45:8C:7B:BB:89:AC:78:08:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:78:53:92:9b:6e:c4:1d:27:8c:2e:e4:4a:b8:b1:03:bc:3c:
52:14:f5:ce:fa:f7:b5:52:0b:91:c7:57:b3:78:5d:80:69:90:
23:39:26:64:ae:fa:ad:93:ba:4c:55:c0:27:00:cb:b1:47:82:
9a:3a:c1:3b:18:ec:7d:a0:44:9c:cd:ce:3a:74:c0:00:ad:84:
ee:c1:f5:66:30:a1:27:23:42:40:f1:81:94:ac:e6:d2:2d:72:
f8:8a:85:b2:21:db:74:f6:ab:13:91:3d:1d:5b:90:77:9b:f8:
76:07:9c:78:5b:24:ed:ec:16:fe:a6:ba:c4:eb:de:a3:d6:28:
0a:a6:83:3f:14:79:cd:9c:2c:62:55:22:31:19:df:fd:57:a4:
36:ea:00:fd:ca:8d:db:4e:07:64:47:5f:9a:b8:17:ae:50:a3:
26:6e:c6:2b:82:ce:dd:47:d1:7d:0c:25:0a:4f:90:8b:55:0d:
dd:87:82:68:cc:b0:1f:ca:d5:3b:d6:ea:ec:ad:d8:ae:db:40:
a8:be:08:01:02:37:39:86:a4:98:50:f3:77:82:1c:06:53:e2:
d2:27:26:00:9a:15:85:dd:74:a4:7d:44:8b:37:a9:e1:e7:f1:
79:9a:a9:df:33:db:ea:0a:2b:ad:83:62:31:23:c8:bf:1b:e2:
2e:3a:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:43 2025 by rpki-client