
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
File: 48b04ea5-053d-355d-9e7e-68ca99d7a329.roa (raw, json)
Hash identifier: A83R0YBwTGd6LvleCIuk3BWfIju9sULaIlYVWuYJSCk=
Subject key identifier: 57:F4:09:38:37:80:A2:56:EF:A8:B2:F2:40:A2:D3:0D:FC:8E:8F:A9
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584BC10AD6B1066826E61E7B7E00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 54994
IP address blocks: 138.113.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0a:d6:b1:06:68:26:e6:1e:7b:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=bce4d25c-6955-45f3-83da-5bd3020771d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:b5:75:ed:4e:ce:fd:a1:64:20:1d:cf:a5:
aa:7c:b9:f6:87:8d:1d:19:e9:9e:9f:40:88:c4:94:
1d:00:fb:04:07:d2:07:43:6c:c5:0a:bb:79:a2:ad:
9a:64:40:76:58:1d:df:70:00:ba:2a:44:34:7b:3e:
45:74:1d:b8:09:9d:12:47:0d:06:c7:b3:bd:11:17:
99:d5:fc:08:fb:2f:d9:a1:fe:b2:dd:31:58:0f:f9:
75:77:db:a6:99:3d:b6:1b:eb:3e:50:11:a2:6c:68:
36:a3:47:68:57:60:09:d5:f2:cd:e8:0e:1e:d0:33:
56:11:d0:31:70:c5:24:88:79:e6:c1:62:fd:d9:78:
3f:d0:f6:32:25:8c:d9:af:5e:fd:9f:44:76:16:90:
a5:72:24:0c:6a:ef:fb:a3:35:41:36:a6:98:75:ab:
2b:fd:1a:1d:09:fb:d8:5f:87:dd:96:8a:18:15:0a:
4c:e3:27:de:f7:39:f2:71:81:75:76:91:51:fc:1b:
3a:ac:74:96:b8:03:d5:8c:b7:c0:ca:97:02:21:7f:
6a:58:0b:a6:5d:cd:de:41:3b:ea:e0:8d:25:e4:88:
88:8c:07:60:af:c9:48:eb:6f:06:a2:11:ca:5f:eb:
7f:17:8e:ca:46:35:9a:06:76:2f:6b:05:3e:7a:91:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:09:38:37:80:A2:56:EF:A8:B2:F2:40:A2:D3:0D:FC:8E:8F:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:14:ca:74:c6:d4:98:16:0e:aa:90:7c:6f:64:2a:51:fe:4d:
01:6f:9c:34:90:19:73:b0:0b:9f:6f:7e:6c:ca:fb:77:d7:d0:
f1:26:27:9c:b3:d8:1c:dc:5a:a3:a5:26:3a:22:6b:9e:2a:5b:
02:9d:4f:f4:c0:ab:2a:c2:9a:37:7e:11:83:5a:3e:62:fb:c6:
e1:e6:60:51:ad:8c:21:82:65:b0:8c:76:50:a6:06:ee:c0:4d:
d5:c2:f5:35:e9:71:0a:44:3a:12:ee:2c:c0:ea:64:4d:c3:b7:
d0:66:9e:ef:4c:78:d2:c9:3c:a8:e2:3e:23:3b:af:8b:3b:34:
d0:e3:e1:8e:17:a5:63:16:da:86:5f:8a:f8:aa:03:9a:e4:33:
8a:26:16:c4:9b:2e:62:7d:c6:4f:3f:db:28:dc:f1:7d:0c:40:
bd:5d:e0:6b:4b:83:4e:20:4f:5a:c1:ab:90:79:a9:af:9a:58:
58:a3:a1:73:74:04:dd:a3:e5:2c:62:1f:c3:ee:4e:45:9b:f6:
dd:77:82:df:2b:2c:d2:ab:00:bc:e4:72:55:10:78:a6:7a:cd:
c1:7f:aa:31:d0:a9:b4:3a:76:a9:af:b9:a7:f4:1e:72:bb:2a:
20:d5:3c:07:1d:a4:c0:8d:16:99:01:8a:ed:e4:6f:e4:3c:8e:
29:13:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:03:19 2025 by rpki-client