
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
File: e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json)
Hash identifier: QqmRCiNCqoim+a11wjbzj+G2dNMmzfslW61px33RvUQ=
Subject key identifier: 6F:47:F2:95:56:07:E5:23:09:FD:7A:9E:C4:EC:1F:11:BA:2E:D6:30
Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial: 010D0C9F4328584B8EACE8E6F3623577D2B4DA00
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
Signing time: Sat 18 Oct 2025 01:00:30 +0000
ROA not before: Sat 18 Oct 2025 01:00:30 +0000
ROA not after: Fri 16 Jan 2026 02:00:30 +0000
asID: 8987
IP address blocks: 165.224.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8e:ac:e8:e6:f3:62:35:77:d2:b4:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Validity
Not Before: Oct 18 01:00:30 2025 GMT
Not After : Jan 16 02:00:30 2026 GMT
Subject: CN=5b7591d6-ce01-4cf6-8f68-c38e0dbe3e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:48:fe:b0:e7:40:c5:20:f6:cf:13:19:1f:
7b:24:af:5d:f0:51:a5:27:b0:74:cd:a6:51:35:94:
65:ff:1b:c9:81:43:89:be:b6:18:56:a5:c0:03:44:
23:ba:9c:7d:01:32:4b:0a:97:79:38:49:c5:73:cb:
21:18:73:7e:49:2c:90:63:df:64:56:c4:2a:c1:f1:
09:7f:a6:a4:b8:1e:fc:5d:78:61:81:c5:47:e2:12:
d3:2a:c0:12:4c:ff:a3:c1:b9:63:f8:f5:77:88:66:
ed:28:1c:81:88:ee:bd:e8:7b:09:dc:38:1e:7c:ce:
40:cd:06:c0:4b:96:95:f0:ee:12:38:b0:5e:58:b5:
71:6b:b0:c8:cc:1e:bd:eb:a3:5b:5a:0e:df:9e:02:
6f:6a:59:11:dc:72:3b:ad:20:fd:13:b4:4a:a5:95:
4d:29:4a:0d:2a:b1:b4:dd:fb:22:81:03:25:4a:4e:
13:1c:f5:cc:c6:60:a6:62:f6:e6:b5:9b:2a:ba:b8:
b3:0d:f7:9a:85:ce:52:a1:d7:08:f1:ab:03:d1:b9:
c5:a4:15:81:f0:ab:d5:d9:10:60:03:66:da:98:fb:
b2:1e:6e:c5:5f:f0:35:9e:26:75:28:67:75:f5:2f:
89:30:13:05:17:19:f8:b4:b1:95:4e:8e:53:98:5e:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:F2:95:56:07:E5:23:09:FD:7A:9E:C4:EC:1F:11:BA:2E:D6:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
X509v3 Authority Key Identifier:
keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
sbgp-ipAddrBlock: critical
IPv4:
165.224.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:c1:45:e6:df:c5:83:4a:1c:fd:7c:fe:e7:fa:4c:66:65:c4:
77:af:e2:fa:e9:8b:9f:fc:46:09:7b:11:f9:19:86:17:17:31:
dc:fb:57:df:52:9c:1e:8d:be:af:97:7a:46:94:2d:f9:9e:87:
b4:e9:e8:fa:f1:39:5b:a6:ea:8c:96:36:04:f8:d4:69:3c:74:
73:e7:90:95:34:ba:d1:8c:f4:a6:19:86:4d:f1:a5:6a:d2:20:
3c:5a:04:20:c9:91:89:0c:b8:18:0e:83:ce:5b:4f:65:90:0b:
8e:82:c8:ba:e1:bf:d3:c1:3e:0a:5a:c1:8f:5f:09:bd:97:b3:
c8:3c:e0:a5:71:c5:7b:c4:d1:74:d8:e7:1a:75:1e:cb:70:0d:
49:90:89:43:93:f1:bb:64:23:14:b1:46:29:08:9e:1c:90:2c:
83:eb:2f:ec:73:4d:93:79:cd:eb:17:13:8f:9d:01:d4:2e:1c:
8d:4b:54:15:22:0e:89:0c:57:4b:51:8a:5b:02:31:01:79:ba:
b5:24:cc:68:1d:50:ed:a3:d2:61:4f:9d:96:aa:27:24:80:ea:
4e:57:08:ef:85:ca:45:14:0a:18:58:75:fc:1d:f9:2d:00:a4:
3a:6c:58:fd:bf:ed:95:94:97:f3:79:19:ce:99:c3:91:75:be:
53:1e:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:46:58 2025 by rpki-client