
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
File: 0d6c2382-6896-3d2f-bd56-04c413266850.roa (raw, json)
Hash identifier: Z6XljogCc43grIZ+8hGXN35jkG0Q5j5x1++/TdhMgxA=
Subject key identifier: AA:2F:44:F0:8C:A5:DD:75:70:91:CA:1F:08:62:CD:A7:43:6E:0B:1D
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584B434CA8E27538FC2EA30DC780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
Signing time: Sun 21 Sep 2025 01:00:32 +0000
ROA not before: Sun 21 Sep 2025 01:00:32 +0000
ROA not after: Sat 20 Dec 2025 02:00:32 +0000
asID: 16591
IP address blocks: 136.53.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:43:4c:a8:e2:75:38:fc:2e:a3:0d:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Sep 21 01:00:32 2025 GMT
Not After : Dec 20 02:00:32 2025 GMT
Subject: CN=f8980391-5528-474d-bfb7-f3bb72ac2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:c7:e3:e6:0d:89:c0:24:a5:96:13:ed:f9:
30:b2:0b:f0:8a:10:71:1c:db:8f:e7:d8:0e:40:0b:
2b:d4:9b:d7:58:a0:05:65:f8:39:de:47:bd:9f:22:
11:19:48:43:98:38:7a:e8:b3:74:c1:93:82:2b:c3:
b4:c8:b4:99:4d:d6:15:82:25:89:4c:76:bb:ee:eb:
a0:a5:a6:fc:b5:03:c8:e7:23:2c:25:67:09:74:b8:
ba:b3:72:70:64:f5:92:dd:35:16:e7:3a:1e:51:21:
1a:bf:51:95:c3:b1:d5:fa:a9:a5:0f:6f:cd:69:e9:
99:e4:98:c6:5c:3c:a3:c0:6e:52:5b:e5:36:bf:3f:
88:6b:08:77:87:59:d4:10:e5:47:86:9f:f6:60:bd:
d9:f9:41:3e:19:27:f7:9b:7e:5c:c6:4b:f4:42:47:
ce:56:e9:a4:96:32:60:44:ed:f1:6a:46:f9:65:d9:
55:c3:23:62:2c:5a:ce:c3:04:50:4f:83:a8:9e:58:
ab:99:eb:fd:6c:84:78:36:ca:f3:cf:cb:1c:38:df:
45:0c:a1:c6:0e:3a:85:63:ae:f5:12:1d:3d:29:f8:
e9:63:77:4c:25:e6:eb:60:f3:10:69:2c:2b:8e:16:
cc:fa:69:32:96:c9:c3:3c:1d:77:02:41:09:24:8c:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:44:F0:8C:A5:DD:75:70:91:CA:1F:08:62:CD:A7:43:6E:0B:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.53.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:62:c7:a1:03:e8:b7:83:d8:f8:16:ce:f5:52:8a:2c:eb:32:
d7:c7:2b:59:58:87:ba:1e:f0:ba:ae:25:a7:a4:d8:cb:b9:01:
fc:68:90:29:45:94:70:47:e4:db:54:b2:09:e5:58:a5:4d:6c:
7b:d6:5b:1d:cd:e7:25:c3:7a:eb:ca:1e:94:e2:bc:03:78:c3:
26:61:a2:68:38:95:9e:dc:a2:f6:06:58:e2:49:e3:38:73:6b:
0a:53:3c:21:eb:90:8d:cd:ab:ae:92:69:cf:f6:d3:e5:8b:c2:
96:9e:39:df:f8:dd:a4:ee:7c:2f:fc:d6:3d:e6:90:8e:20:a2:
be:f9:e6:22:f0:32:7b:ec:b7:82:87:dd:b6:fc:af:5d:2f:13:
a5:ca:44:6c:8f:1b:97:6f:5a:ac:54:93:d9:19:0e:df:80:0e:
28:d0:2e:c7:27:2c:c6:9a:c3:99:94:47:1a:42:14:ff:d4:27:
8a:a2:88:ea:d3:78:3a:6f:0e:8b:45:ae:35:34:79:50:c8:5d:
5b:25:7f:5a:d5:fa:fe:04:22:32:0b:a2:03:cc:1b:57:4f:61:
5b:e9:d0:c1:51:a2:40:19:08:8a:63:c5:e5:f0:7e:da:49:a8:
46:7f:bc:43:bd:77:3f:ac:90:b1:75:6b:35:ee:7b:40:a0:50:
05:83:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:15 2025 by rpki-client