
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa
File: ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa (raw, json)
Hash identifier: oxh+Rc5v8r8VIFyc74jMNJdGhTZ2Vk3YAvhJGJ2CPFg=
Subject key identifier: BC:97:98:1A:59:2D:8E:A3:15:CF:27:1F:33:24:38:81:B1:0B:5D:8E
Certificate issuer: /CN=4454f19d-c14e-499f-8d66-357970248d2c
Certificate serial: 010D0C9F4328584B7B220CB5ADBE1CA07B660700
Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa
Signing time: Sat 11 Oct 2025 01:00:30 +0000
ROA not before: Sat 11 Oct 2025 01:00:30 +0000
ROA not after: Fri 09 Jan 2026 02:00:30 +0000
asID: 7843
IP address blocks: 199.192.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7b:22:0c:b5:ad:be:1c:a0:7b:66:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c
Validity
Not Before: Oct 11 01:00:30 2025 GMT
Not After : Jan 9 02:00:30 2026 GMT
Subject: CN=7b95a949-bfa2-4ab9-b484-d23447a56b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:05:42:8a:82:f0:b5:e0:21:9c:d7:d5:94:
83:d0:42:85:53:34:cb:0c:a8:05:3d:28:3c:b3:f7:
dd:f0:c7:3c:8d:61:f5:db:0d:0d:6c:90:44:4f:0f:
87:59:e5:8e:f6:5d:18:a4:90:d1:ad:8d:ac:c7:de:
74:40:fd:ee:52:4c:39:5f:cf:23:88:92:e1:a2:ef:
11:db:db:a2:66:4c:b5:09:27:3e:2c:cd:55:8f:72:
eb:6f:6e:2c:e6:63:36:52:9b:ec:de:eb:5c:d3:90:
de:7c:ff:5c:69:22:a0:b3:8f:5a:8c:4a:ac:87:69:
b7:53:4e:43:1c:67:31:ac:6a:55:b9:25:ae:53:42:
ef:67:f8:10:14:7a:02:63:f0:ad:8f:b0:bd:17:04:
db:97:b7:47:66:06:fe:9a:f7:06:98:34:5f:c2:c4:
ff:ea:85:41:50:2b:72:b8:19:aa:c3:e8:9b:c2:b8:
4e:00:ab:08:8c:43:e5:23:3c:c7:ae:d4:10:46:7a:
f5:73:d4:2b:8d:0d:75:be:f6:51:fc:83:55:64:f1:
10:67:01:6d:21:40:9d:34:06:d0:64:74:61:66:bb:
72:76:c2:10:18:57:ae:ae:2d:90:20:ad:0f:0f:af:
1a:2a:84:26:aa:7a:39:1c:ce:ef:78:6d:ae:bf:d2:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:97:98:1A:59:2D:8E:A3:15:CF:27:1F:33:24:38:81:B1:0B:5D:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl
X509v3 Authority Key Identifier:
keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:31:47:7b:51:5e:67:a9:b1:f4:a9:2a:98:bc:8e:23:fc:18:
e5:1d:c8:d4:c3:0b:e3:d6:e1:1e:c8:ea:f0:6d:be:9f:fa:4d:
03:92:08:32:ab:73:00:c4:01:f2:57:52:ff:02:2d:ad:ac:d7:
fb:0c:17:9b:aa:36:3c:c5:58:72:d7:09:9e:28:03:4d:02:dd:
33:b6:c1:42:99:74:50:96:8b:d1:92:01:7e:9a:2f:b9:c5:c5:
62:af:db:94:ac:e3:91:f0:71:f9:46:f1:b3:b2:3e:03:c4:34:
64:1c:40:a3:02:7a:fa:e2:df:12:73:e0:e0:a1:e2:1f:58:8c:
5d:80:d5:5e:93:7e:aa:48:60:41:21:54:26:0e:d6:b5:ef:b2:
fb:37:79:ae:f2:61:4f:f2:4e:e3:08:af:5d:e8:76:69:c2:4a:
34:bd:f8:79:2f:5b:3d:da:4c:72:e1:90:d5:f4:ed:8e:c8:95:
02:00:60:33:4f:9f:89:da:cd:ca:5e:93:60:8c:67:ad:e5:b9:
02:63:05:d2:37:80:7a:7c:58:d9:d5:ac:9b:c7:b1:cc:66:6e:
64:a9:70:b0:ed:29:f6:04:0f:54:eb:67:c5:f5:86:46:56:15:
35:ab:e4:53:ba:8f:2e:72:59:66:c3:f3:6d:0b:81:0c:d7:c5:
c7:4d:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:23 2025 by rpki-client