
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa
File: e9372a00-f021-34bf-9340-b56939c57a53.roa (raw, json)
Hash identifier: a7W2vGb+TdlXQHFK8EOpYxseD8Sv3+/jS8BJrapvpVI=
Subject key identifier: C1:06:F5:D5:AC:6B:50:FF:D1:5B:F9:88:E8:C3:1C:32:1D:BE:FA:00
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F4328584B0E4165F9F268E540E4875B80
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa
Signing time: Tue 02 Sep 2025 01:00:32 +0000
ROA not before: Tue 02 Sep 2025 01:00:32 +0000
ROA not after: Mon 01 Dec 2025 02:00:32 +0000
asID: 401772
IP address blocks: 198.29.31.0/24 maxlen: 24
2602:f9e7:10::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0e:41:65:f9:f2:68:e5:40:e4:87:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Sep 2 01:00:32 2025 GMT
Not After : Dec 1 02:00:32 2025 GMT
Subject: CN=05fc72ee-f1eb-4d27-a140-a62f55db7737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:7c:de:07:c1:c5:61:16:54:3c:60:6f:23:
ea:9b:23:74:80:2a:2a:49:a6:00:98:b5:ce:03:dc:
8a:a8:d8:a0:df:6c:e7:a6:bd:d9:d3:ed:75:e5:fa:
ff:79:e2:73:7c:b0:f0:7f:9b:b5:14:61:be:27:64:
ba:ed:a5:0e:4b:b7:c2:bc:11:06:01:3d:d3:0d:65:
fe:45:cb:3e:ce:63:c3:48:e9:6c:5f:f7:0c:db:5f:
57:ae:e9:8c:df:04:24:f6:33:58:cd:ce:ac:05:6e:
10:7e:c9:e2:d4:ab:6d:54:d4:cf:e9:7a:1c:06:a6:
63:9f:e7:c8:66:ed:d8:ce:9a:6a:3d:2e:10:1e:a5:
37:41:7e:bc:9b:1b:0f:6e:92:bb:3a:84:d4:36:81:
13:6a:cd:9f:f0:e6:3e:d5:bf:44:57:0a:4e:15:f8:
a4:35:a0:9b:32:37:aa:fb:20:e2:e5:7c:db:4a:b2:
a6:c3:f8:4a:d7:47:1e:0c:3c:eb:dd:da:9c:e0:65:
67:03:9e:7f:00:43:c8:d6:bf:0d:26:53:ef:cd:19:
a1:99:3a:0d:bd:e9:e0:27:2a:13:6a:92:0d:42:f7:
60:fa:5d:94:19:1d:ad:f9:d2:2c:74:a6:20:3e:15:
d5:71:1f:b5:93:b6:5f:7e:94:44:c7:ad:b2:b3:8f:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:F5:D5:AC:6B:50:FF:D1:5B:F9:88:E8:C3:1C:32:1D:BE:FA:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.29.31.0/24
IPv6:
2602:f9e7:10::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:e8:21:cb:fa:46:15:32:3c:85:20:c0:f7:81:08:3f:3f:00:
62:45:2b:da:9d:e7:6b:d4:fb:0f:65:6e:d3:72:92:8a:8d:f4:
d0:80:f0:ae:93:91:8f:c6:7f:1d:df:b4:1c:6d:9f:e3:a0:13:
1b:7e:24:d9:3b:1b:0e:97:59:12:2b:25:d3:80:c5:d6:6c:41:
95:68:fd:7f:22:ec:0f:78:4a:07:d4:73:a8:1f:b5:48:1a:bf:
02:e4:8f:7d:0d:92:22:53:30:40:cd:69:a7:9b:57:0c:0e:d4:
2c:dd:02:ca:19:9e:09:c9:38:73:a3:71:2a:e9:b0:0f:7e:77:
28:76:51:df:e8:d5:58:ca:ec:40:83:0a:f5:a1:6b:1c:10:85:
a7:0c:0e:ba:08:a3:e5:a4:37:23:83:17:ad:4a:fc:dc:9a:de:
5a:59:e4:27:00:b3:c6:3d:1b:c3:70:91:12:40:f7:94:ca:f2:
d7:56:ac:38:af:2c:d5:75:42:21:b3:c8:8f:f0:75:4c:97:2c:
d3:a8:97:6c:25:6e:ac:65:b0:f2:b9:43:0c:ac:0e:53:ee:dc:
b4:72:cc:55:6d:7b:78:0c:02:88:dc:24:cd:ed:87:0a:7a:4b:
44:da:e4:e8:fd:59:27:36:e0:b1:98:7e:5d:1f:65:ce:a1:72:
dd:99:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:52 2025 by rpki-client