
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
File: 0da84f32-a3b7-325e-8e88-4a1bb36616de.roa (raw, json)
Hash identifier: Y/lQCbiwjWch/+qWrkMRYI2wrzM2TUgJgKrePcd4tJA=
Subject key identifier: 46:DC:42:8B:D5:05:75:DC:C2:0E:DD:21:E3:67:F0:10:49:2B:20:EC
Certificate issuer: /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial: 010D0C9F4328584B2496DB7639A730C4665D8800
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
Signing time: Wed 10 Sep 2025 01:00:33 +0000
ROA not before: Wed 10 Sep 2025 01:00:33 +0000
ROA not after: Tue 09 Dec 2025 02:00:33 +0000
asID: 7018
IP address blocks: 137.155.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:24:96:db:76:39:a7:30:c4:66:5d:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Validity
Not Before: Sep 10 01:00:33 2025 GMT
Not After : Dec 9 02:00:33 2025 GMT
Subject: CN=9dd90ec7-b5e7-4b18-8640-ebc33ee085c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:d2:6a:d6:6e:fd:14:31:8b:72:bc:b2:d4:
60:26:40:d6:85:cc:05:c6:9b:19:dd:d2:89:ae:9a:
02:dc:d2:49:8a:4b:ba:7a:b9:6a:cd:a1:e1:fd:1f:
1a:c5:c9:1d:b9:65:fd:12:e6:5f:ce:e8:04:fb:a1:
9a:b4:de:b4:af:02:e5:53:65:3f:4a:3c:ea:84:eb:
d0:47:b7:f6:7c:17:20:13:ab:d8:70:b2:19:54:e4:
72:f0:22:08:5f:23:97:e6:38:d3:a5:08:0e:e6:a4:
03:fe:71:c3:fd:c3:3c:67:4a:c1:a7:97:c6:78:02:
39:91:fa:1f:1d:ea:61:53:8e:23:af:1a:ed:1d:dd:
04:d1:e8:68:87:25:51:e5:f0:a3:cc:0f:01:de:4d:
de:50:ce:f0:06:09:29:b4:9a:8a:02:26:5d:26:39:
40:f8:34:0a:f2:3c:32:cb:70:24:ee:1b:72:be:52:
b6:c9:22:8a:42:c8:19:50:df:87:d7:f5:de:13:aa:
a2:4f:2c:af:6f:77:5c:95:cd:d6:ac:57:47:20:d3:
95:61:15:d2:36:8e:19:c5:71:1d:70:63:d6:d9:6f:
3b:07:32:7c:e7:04:21:f4:94:df:74:a7:10:17:9c:
44:e5:82:35:0f:5a:fb:29:0f:0c:c0:d2:ad:e6:86:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:42:8B:D5:05:75:DC:C2:0E:DD:21:E3:67:F0:10:49:2B:20:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
X509v3 Authority Key Identifier:
keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
sbgp-ipAddrBlock: critical
IPv4:
137.155.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:fe:3c:95:81:77:4a:5c:0b:2d:1d:32:9d:50:1f:e1:76:d4:
51:4e:3a:1c:31:8e:f9:10:3c:64:69:9d:ac:72:4b:3d:b5:12:
f8:f3:e5:33:8f:b1:ec:25:37:94:50:4c:27:01:24:7a:a1:e1:
2c:41:be:90:3b:33:99:fe:c7:53:68:93:eb:77:07:f2:6f:8e:
a5:0c:a9:ac:ae:a1:1d:a3:fc:df:1f:bf:b2:6b:ac:7a:cb:9a:
1c:87:b4:28:40:b7:5e:98:6b:6a:d4:a5:c5:c9:de:16:51:47:
b1:13:fb:92:1e:ec:99:dd:19:24:91:ea:b3:f5:47:ea:0e:6a:
eb:bf:8d:a4:9b:1f:aa:51:bf:dc:28:30:56:55:9e:f3:a1:a8:
81:c9:80:2a:05:1d:8d:f3:9f:05:2d:9f:2e:ba:bf:3c:0b:63:
28:18:df:e3:75:ec:e9:11:3a:8d:89:fa:2e:19:08:9d:a6:5d:
7a:16:c7:fc:bf:c7:ad:85:08:4a:17:92:25:d4:6a:02:a6:7f:
a3:cc:cd:c5:0c:2d:77:7b:d9:11:02:86:32:83:f0:3b:91:04:
a5:19:f7:fa:0b:f8:e0:a3:c3:ad:e3:fc:36:27:58:82:61:d0:
d8:b9:f3:43:5b:7a:f4:bf:9c:d0:02:bb:f0:6b:56:19:23:ca:
a9:50:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:07:35 2025 by rpki-client