
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/5df62d47-bccf-3b46-bdf0-3abad3b81786.roa
File: 5df62d47-bccf-3b46-bdf0-3abad3b81786.roa (raw, json)
Hash identifier: ZYFepp07/FrjQoFUCvx6omrE/tC7SfT/laQhEWuKN5U=
Subject key identifier: 50:B2:CA:58:20:88:8F:D8:7E:21:7A:B3:59:F9:B6:F1:5D:5D:C3:A6
Certificate issuer: /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial: 010D0C9F4328584B2496DB8BE9BA16ED0498F280
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/5df62d47-bccf-3b46-bdf0-3abad3b81786.roa
Signing time: Wed 10 Sep 2025 01:00:33 +0000
ROA not before: Wed 10 Sep 2025 01:00:33 +0000
ROA not after: Tue 09 Dec 2025 02:00:33 +0000
asID: 6079
IP address blocks: 137.155.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:24:96:db:8b:e9:ba:16:ed:04:98:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Validity
Not Before: Sep 10 01:00:33 2025 GMT
Not After : Dec 9 02:00:33 2025 GMT
Subject: CN=1c6dc47c-8589-4a50-a663-18e28460f2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:c2:ac:d8:51:72:77:16:7c:45:ea:9b:d4:
8a:b3:94:00:be:1b:e8:95:2d:b6:e2:fc:90:ff:0c:
c4:60:01:a2:05:ce:28:90:d4:dc:90:77:74:de:40:
70:91:13:c6:b7:d0:24:53:66:b9:16:68:48:1d:4a:
9e:ef:5d:4d:d1:15:af:82:5e:00:0d:86:fd:4a:2a:
60:3c:e7:be:e7:ca:0f:fe:32:a9:41:21:df:98:f1:
a0:7b:05:93:89:81:50:ef:98:c8:f1:d5:c4:f8:79:
e9:2b:64:dc:89:44:9f:b6:9c:d1:79:45:12:db:d8:
8b:c9:93:a0:60:09:17:8e:54:31:4f:af:23:a5:f2:
b7:31:51:f7:4f:60:b3:a5:1d:ce:dc:07:0d:93:25:
05:69:af:4c:74:9e:f4:51:7b:5f:64:03:15:78:de:
0a:c8:45:c0:3c:d0:4b:71:0d:ed:e7:79:b2:c0:f2:
e1:b4:cb:83:32:81:bc:01:99:be:5b:6e:0a:44:67:
63:df:64:9c:8d:b0:a0:a1:62:9d:de:52:7e:9e:5a:
86:29:02:55:8d:36:bf:cb:8e:87:60:bb:d4:29:1e:
21:1e:cc:20:c5:50:a3:7f:77:66:98:b7:6c:c8:61:
4a:b5:80:67:9a:09:a8:6a:83:37:e2:6f:47:73:8b:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:CA:58:20:88:8F:D8:7E:21:7A:B3:59:F9:B6:F1:5D:5D:C3:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/5df62d47-bccf-3b46-bdf0-3abad3b81786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
X509v3 Authority Key Identifier:
keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
sbgp-ipAddrBlock: critical
IPv4:
137.155.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:0f:c4:4f:64:c7:c4:70:bc:73:25:be:6c:5f:83:bc:b3:0a:
26:71:1b:9e:3d:96:14:3a:b1:fb:ba:60:fa:99:52:0c:12:f0:
34:57:a6:d4:51:9b:d7:d6:ea:e9:ab:50:53:29:e0:03:8a:44:
8c:67:95:b7:eb:15:77:4f:e6:bc:60:96:38:01:88:f4:af:03:
22:95:f9:24:d4:50:a9:ac:3e:38:65:7e:c0:45:f1:7e:73:46:
f0:5f:36:15:07:11:01:67:80:61:7d:c9:d6:f0:c2:a2:06:7b:
56:c5:00:8a:62:52:68:55:ec:8a:db:5a:e2:0c:c9:a5:85:41:
d1:f1:c8:8d:b6:9d:96:6c:5e:8a:7b:49:90:01:28:dd:89:ee:
f4:91:14:d0:78:9f:0d:c4:9b:b0:ab:8d:03:fa:0e:5d:d2:1b:
70:f0:79:97:ac:19:ee:f6:c2:4d:e4:ce:25:54:38:65:8c:bd:
c3:67:39:86:2b:f9:44:83:bf:0f:d3:d4:ac:ab:6d:f1:c9:d3:
87:1d:91:9a:78:41:fd:e8:79:ce:9a:f3:3a:20:9f:a2:cd:07:
ac:dc:93:70:dc:49:a0:28:77:bc:ff:c1:34:c1:c1:eb:b5:07:
97:dc:0e:96:49:8e:50:fd:27:e4:f2:9b:38:20:80:0b:e7:a2:
35:25:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:38:43 2025 by rpki-client