
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
File: 0d245965-f93b-398c-ae46-d494039afdb2.roa (raw, json)
Hash identifier: jrzW5GSnPv8/PIm4cAI25Nxwsyyv88A3LkxBhCjL6Vk=
Subject key identifier: 03:2C:54:D8:23:1F:75:94:F4:C5:48:1B:C9:A6:A7:A9:A7:A9:EA:77
Certificate issuer: /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial: 010D0C9F4328584BA0D26365408BF3CAF81B5900
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 5719
IP address blocks: 129.49.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:63:65:40:8b:f3:ca:f8:1b:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=33491424-35bc-4fe8-903d-287a27e76f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:87:54:04:21:78:3d:75:26:39:ca:5f:5a:
79:b9:4b:2a:ab:b6:86:cd:80:96:7a:4a:ae:b7:7a:
cf:01:70:8b:a7:5c:4e:0e:4f:42:ea:22:e3:72:47:
45:6d:3c:d1:b1:cb:a6:25:c5:65:91:49:b9:e6:d4:
f0:a7:d2:18:98:c0:86:16:79:25:f9:e6:8d:50:de:
3a:3d:b9:ac:d1:8c:22:c7:7f:57:6b:3f:63:af:60:
0b:65:9c:9b:63:b4:33:7c:25:e6:c4:24:61:42:bd:
32:37:a8:c3:d1:64:f0:38:2f:34:aa:03:67:f7:75:
92:9e:ec:4f:38:d7:28:cb:24:15:b6:fa:78:fb:56:
03:59:c4:36:a7:f6:94:0c:0d:f2:3b:62:7f:17:a6:
b2:72:6a:92:82:66:ef:a2:00:47:a7:ad:b2:34:5e:
e6:6e:2d:63:95:63:3c:63:cb:40:69:78:aa:eb:6d:
3f:45:73:b5:42:3e:84:15:3c:11:fa:a0:a2:49:a6:
6e:85:8f:52:1b:a2:e0:b2:eb:da:fb:67:5d:b6:7d:
cf:f7:f7:98:00:4c:ad:fa:38:c0:af:94:bc:30:34:
e5:27:ba:de:29:c2:2d:47:c4:e0:c2:1f:5a:05:03:
fb:97:3f:e7:e8:61:fb:e2:6c:e3:9f:77:7c:e4:5b:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:54:D8:23:1F:75:94:F4:C5:48:1B:C9:A6:A7:A9:A7:A9:EA:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
X509v3 Authority Key Identifier:
keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
sbgp-ipAddrBlock: critical
IPv4:
129.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:97:e2:91:69:6c:c3:bc:68:35:7a:94:1f:cd:50:c8:25:e6:
d6:28:82:6e:b4:28:b7:70:a6:80:c1:81:5b:62:b6:b1:98:97:
18:20:29:2e:5a:d2:8b:e7:26:03:d2:94:3f:c4:35:8f:33:d0:
8f:e0:ed:f9:1c:9f:11:86:62:0a:d7:17:fd:8f:e6:1b:27:13:
8e:be:0d:0b:97:5e:05:74:cd:cd:bf:69:4e:c0:b7:1e:a3:95:
87:22:68:26:74:6d:b7:ae:6c:fe:4d:ef:b7:e1:0a:24:1e:f3:
df:1a:5f:83:bb:b4:fe:28:72:2b:f0:d2:63:bb:5c:b7:6a:75:
de:d7:16:25:3a:f4:c7:33:d1:f2:09:54:ab:40:67:fd:0c:a7:
71:d9:ac:b9:99:84:06:88:49:58:5b:78:25:4d:6b:88:ea:b2:
af:d0:ee:72:be:f4:43:93:52:25:72:2f:d4:5e:8c:69:51:32:
16:89:f8:87:1c:5c:12:37:10:8f:99:4e:f9:54:56:4a:8b:c5:
7d:1f:40:74:17:55:e4:06:5d:a8:fc:0c:60:6b:3f:25:22:27:
91:d4:d9:4a:67:66:9e:b0:91:dd:52:ad:08:49:a5:fb:a3:ae:
b6:e6:99:83:ec:c1:75:d3:52:a5:90:1e:1e:9a:ba:1f:04:61:
bf:dd:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:35 2025 by rpki-client