
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
File: bd2f992d-6e4a-3230-8636-0526743d0a78.roa (raw, json)
Hash identifier: f21W0zOyOMv4L5baBrg2zyI9nqU6/zSV7BKxkbzy1GM=
Subject key identifier: 40:21:CF:15:5F:55:77:EB:62:CB:22:BC:5E:5E:37:04:A2:BC:4D:0B
Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial: 010D0C9F4328584BBFA5A8E3C23133343F18B640
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 399646
IP address blocks: 23.165.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:a8:e3:c2:31:33:34:3f:18:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=4b51548c-eff9-4edc-b982-65fb9140a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:b3:b8:6b:3b:42:f3:e0:db:8e:ec:81:86:
8b:a1:67:53:04:a6:ae:24:0f:48:ef:d4:aa:32:bb:
c2:d1:ab:71:19:88:22:a3:61:e1:68:de:d3:5d:9c:
fc:b4:bc:34:ff:60:48:2d:39:32:e7:71:45:61:ab:
39:75:8f:b8:02:a2:77:bc:7c:3c:e9:73:f6:45:d8:
b2:f8:f0:82:c9:cb:6a:23:e3:2e:ba:d1:f8:80:b2:
3c:ab:8f:09:25:5a:3b:c3:e4:af:f0:6c:48:22:7c:
61:8e:2a:35:7c:dd:05:ab:3e:82:ad:5f:11:2c:5a:
a8:5c:78:e5:15:44:1a:30:91:99:cb:a0:e8:e7:c1:
ed:d8:4b:ac:e9:a5:d9:82:d5:3c:7f:11:42:bf:a0:
84:de:ce:df:4e:ac:80:96:1e:6e:ee:4f:56:eb:99:
9e:74:b7:c8:34:f0:d9:84:90:a4:70:f7:aa:a8:5e:
cb:9a:9f:83:47:c1:e9:b7:3c:6f:cc:f8:dd:cf:99:
99:18:7e:76:79:88:09:d8:54:46:a3:d2:e8:57:80:
b9:22:a0:9d:3b:4d:6b:91:ad:9f:ab:b4:2b:34:34:
54:62:31:ce:bd:e9:29:95:22:c8:51:71:50:d9:8b:
82:38:39:f6:21:12:0c:85:16:88:31:69:39:1d:8f:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:CF:15:5F:55:77:EB:62:CB:22:BC:5E:5E:37:04:A2:BC:4D:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
X509v3 Authority Key Identifier:
keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:e3:48:b5:9f:61:6f:8b:a9:6c:f3:00:5b:eb:1c:cc:43:67:
79:bb:d9:7c:c9:1d:c8:38:94:dc:dc:3e:3c:da:6e:c1:8f:56:
51:35:e0:c4:b7:5c:70:5e:de:e0:8a:1c:e0:47:8d:5c:5c:ce:
c6:74:4e:ee:da:2c:e3:41:c4:c2:77:8d:09:61:cc:13:25:6f:
aa:d4:02:30:49:60:27:c4:01:7a:ef:ba:4a:3e:03:e4:0f:4a:
29:9a:ba:73:ad:48:4f:cf:a5:8c:2e:6b:9c:f9:fe:7c:44:a0:
cb:f5:c1:00:03:5f:f5:80:dd:94:09:91:27:3a:8a:1f:1e:eb:
f3:22:3e:9a:63:1c:89:d6:48:0e:db:5c:66:9f:a7:b0:46:7f:
f8:38:e8:e1:4c:75:7c:22:3e:a8:3c:d3:e7:10:e5:77:1f:d1:
6a:fc:d0:1a:58:1b:b9:7d:f0:b9:29:87:1d:ac:b5:fb:be:0b:
c5:4f:45:27:7e:28:e8:6e:d8:4e:1e:bc:60:a5:02:84:f9:6f:
58:bd:f7:f2:ae:0a:77:52:01:ce:dc:12:a4:19:a8:0b:51:7b:
70:99:83:56:76:19:56:57:9b:1a:4f:d0:72:8a:09:ed:94:db:
c8:f4:1e:a4:eb:bb:57:a1:92:14:58:52:9f:5c:47:f1:f7:27:
68:39:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:43:29 2025 by rpki-client