
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e66bd0d5-01be-3441-ad03-5ff9443c684a.roa
File: e66bd0d5-01be-3441-ad03-5ff9443c684a.roa (raw, json)
Hash identifier: F/Ka6Yza7Zp6J/2SlZdb8AKcs/32qeL1lFx+7QdiA4k=
Subject key identifier: CC:2E:36:A6:13:FF:42:80:F2:F5:AA:58:12:7D:46:A5:01:C9:CF:D5
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584BBDD6E3D9BA082C947133A5C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e66bd0d5-01be-3441-ad03-5ff9443c684a.roa
Signing time: Mon 03 Nov 2025 22:28:27 +0000
ROA not before: Mon 03 Nov 2025 22:28:27 +0000
ROA not after: Sun 01 Feb 2026 22:28:27 +0000
asID: 0
IP address blocks: 206.0.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bd:d6:e3:d9:ba:08:2c:94:71:33:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Nov 3 22:28:27 2025 GMT
Not After : Feb 1 22:28:27 2026 GMT
Subject: CN=f746271c-7220-46e7-9352-8f2eebfa5995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:63:38:5d:53:e2:a2:8a:8d:50:37:ea:a4:
0f:cd:5b:29:6a:62:4f:01:4b:64:9d:1f:61:b9:57:
11:5e:a1:47:66:ca:48:37:6f:2a:51:cf:2c:d2:3c:
37:51:d0:df:4a:9e:31:b8:1c:b3:80:c7:d1:8c:ee:
01:88:66:98:4b:4b:c1:cb:16:ae:bc:af:e4:a4:04:
60:4a:99:bf:76:db:1f:9f:61:e6:5f:07:20:5a:56:
76:86:8c:15:c0:fc:81:0d:d6:7d:39:90:25:f3:cd:
45:be:ea:78:5b:ae:7b:42:ce:e9:24:e1:20:40:83:
dd:78:3b:f7:cb:8a:9e:b4:79:9f:d6:9f:37:e7:ed:
8b:71:5f:7e:d7:b8:22:d8:2e:1a:31:c1:8c:5e:3a:
0a:cf:14:28:f0:d0:67:79:64:5a:55:66:22:c7:04:
0b:28:83:a9:5b:ad:1b:d8:28:0b:4d:b0:7b:17:40:
c6:50:25:cc:8a:3b:2c:74:63:cd:ca:ed:be:ca:b7:
ca:4a:f1:0a:22:87:dd:26:d3:72:de:dd:ae:df:91:
83:b5:4a:ce:d2:c3:75:44:0f:1b:66:59:e3:6a:97:
4a:77:e0:81:d0:d6:3b:01:e4:70:93:12:6b:4d:14:
ca:a4:e8:3f:c5:85:cf:8c:73:d2:aa:ec:30:16:86:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:36:A6:13:FF:42:80:F2:F5:AA:58:12:7D:46:A5:01:C9:CF:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e66bd0d5-01be-3441-ad03-5ff9443c684a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
206.0.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:95:95:82:fe:f5:58:17:76:b6:18:14:88:08:d6:37:5d:d1:
d4:1e:ef:e9:da:31:aa:cc:6f:c1:e6:87:6e:bb:f3:dc:64:7d:
e5:dc:44:fe:df:db:5d:b9:13:15:40:3f:c9:0c:96:8c:25:b1:
18:1e:7d:64:50:50:b9:cb:23:ef:ca:0c:36:f6:fb:33:f8:0c:
7e:1a:00:6a:e1:43:e3:7a:64:75:1d:ae:00:11:0f:ac:af:5c:
1a:15:a4:44:71:43:2f:8f:7e:13:5b:93:7d:4d:d3:12:f1:5b:
e2:25:d3:13:fd:ac:89:71:24:88:af:c3:9d:cd:a3:b5:88:72:
38:e5:48:29:1d:d1:cb:ae:d7:82:69:59:33:0a:24:ed:80:92:
e6:b8:76:89:60:77:bb:ea:29:7e:b5:69:2f:d7:e7:11:c8:4a:
53:4f:87:1a:9f:51:f9:a1:88:05:53:e4:88:6e:e3:98:dd:d9:
48:b0:e8:71:2b:b8:e0:d7:ba:12:f5:a6:fb:d5:58:e6:da:e2:
e2:b5:47:8a:e9:ea:31:a7:ab:0e:d5:c1:8c:4a:be:85:f2:43:
06:50:0f:a9:7f:bd:bc:4a:a1:19:d8:4d:1f:c7:10:7d:6e:7f:
16:77:dd:ac:79:7f:89:d3:15:c5:0e:67:b6:b1:03:96:71:72:
55:75:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:03 2025 by rpki-client