
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa
File: 92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa (raw, json)
Hash identifier: +bhCVUx3yZnE7QskNjaNqw+t/JcnCoo2L+IvBY5AC/Q=
Subject key identifier: 5F:27:1D:8D:1E:9C:5E:F5:C2:DF:13:C3:AB:53:15:AA:BE:0F:69:D0
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584BAC18BE6420AD06C651750100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa
Signing time: Tue 28 Oct 2025 13:56:35 +0000
ROA not before: Tue 28 Oct 2025 13:56:35 +0000
ROA not after: Mon 26 Jan 2026 14:56:35 +0000
asID: 399442
IP address blocks: 38.29.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ac:18:be:64:20:ad:06:c6:51:75:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 28 13:56:35 2025 GMT
Not After : Jan 26 14:56:35 2026 GMT
Subject: CN=66a45bc2-f592-4951-aede-19bfac08e606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:b1:ab:08:cb:6b:90:eb:d6:dd:f2:a4:6a:
69:5b:df:94:f1:79:13:7b:e4:cb:c5:15:a5:ae:5f:
52:25:50:ee:5c:27:c5:6a:9c:d0:5b:ea:bf:5b:75:
19:02:a1:cc:23:73:aa:16:ea:b2:77:7a:9a:11:31:
5b:a1:7e:03:c1:0e:d8:b6:46:a4:b9:8c:aa:48:de:
ba:47:c6:32:92:0d:c5:5a:39:1a:64:55:7c:89:45:
38:0d:f8:b6:59:6d:6f:7e:d3:ca:a9:97:08:0e:62:
50:6f:be:d0:1b:b5:4e:aa:c1:2a:e3:1f:8e:4b:d6:
ab:39:ef:34:98:45:e2:04:27:4a:32:56:63:b3:d4:
59:61:57:65:6f:fd:31:c0:47:f7:0f:9f:bf:68:5f:
73:d2:58:22:32:34:93:8d:f6:ee:5b:67:42:0d:58:
bc:a1:38:b4:c0:c0:9b:a4:91:e3:23:d5:0f:ae:5c:
ef:60:fd:83:7d:18:f6:ab:a1:c7:3e:e6:76:3b:8b:
39:4a:84:f9:67:91:b4:d1:14:2d:70:63:01:17:00:
46:f1:0a:28:e3:79:9c:98:84:7a:84:54:35:e7:40:
b5:b3:54:27:f3:5a:6b:dc:15:f6:ea:42:fc:e7:d4:
2e:07:35:e6:83:e4:ae:ee:d5:c5:58:af:56:fa:b1:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:27:1D:8D:1E:9C:5E:F5:C2:DF:13:C3:AB:53:15:AA:BE:0F:69:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.29.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:3a:05:ed:4e:e5:0e:6c:fd:e4:f3:06:09:94:9a:9b:4c:1b:
82:b9:c5:4b:88:d3:8f:eb:8a:7d:94:54:5c:0f:2e:3d:65:da:
52:80:6c:f1:da:38:59:ef:73:54:44:67:86:c6:ee:12:84:25:
d6:a1:b4:c5:0c:d7:2f:68:91:d8:9f:aa:51:48:56:a2:73:b7:
65:ca:da:1c:2e:94:fd:04:27:e8:4e:0f:f5:09:e2:b0:8b:e9:
6d:e3:28:d1:9f:26:3a:d4:17:0c:82:5b:ae:bf:6b:a9:10:02:
18:32:22:81:dc:df:8e:0c:cc:94:7c:d5:55:f4:8a:31:d0:8c:
1d:01:92:00:1b:0a:22:32:2d:84:29:e8:6c:cd:e4:15:70:32:
00:d8:e3:55:10:69:2f:31:34:eb:dd:7e:5f:11:88:06:bd:13:
5c:ea:04:8d:14:81:56:b3:f7:99:2d:6a:13:47:ab:cf:1d:68:
45:26:1b:b5:b4:04:f0:c9:68:0c:51:79:4d:f8:ee:1f:00:e2:
07:ea:9b:bb:07:85:4d:39:94:55:43:ee:79:5d:91:47:33:58:
12:67:47:f1:2b:01:e1:25:1b:ba:07:b8:75:ab:6a:11:93:b8:
04:8d:14:d5:36:c6:7f:b9:e8:6b:8c:4d:2b:02:32:86:1b:4d:
45:49:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:06:59 2025 by rpki-client