
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
File: a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa (raw, json)
Hash identifier: dVSmFAM+jskt1muzOuZXK0/bR3Gq8WkoqbGDdg5qpRg=
Subject key identifier: 70:90:A8:00:83:93:9E:66:62:A1:97:F8:B6:DE:C3:FB:B2:DD:CB:80
Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial: 010D0C9F4328584B4081A49E2F1516349538B200
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
Signing time: Sat 20 Sep 2025 01:00:32 +0000
ROA not before: Sat 20 Sep 2025 01:00:32 +0000
ROA not after: Fri 19 Dec 2025 02:00:32 +0000
asID: 16509
IP address blocks: 198.204.9.0/24 maxlen: 24
198.204.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:40:81:a4:9e:2f:15:16:34:95:38:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Validity
Not Before: Sep 20 01:00:32 2025 GMT
Not After : Dec 19 02:00:32 2025 GMT
Subject: CN=6d4496af-3c85-4f16-8592-818ca9029d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:3d:72:ea:9a:df:f2:d8:4b:ee:65:94:15:
75:03:1d:ce:b8:fa:8f:eb:bc:a9:80:63:48:68:c7:
16:39:f6:44:04:fe:9e:c7:6f:9e:a1:00:c2:c4:27:
2d:b3:25:b1:01:c4:ba:fd:01:b0:83:97:d3:63:8d:
1e:f9:4c:62:10:80:3a:8c:47:19:4b:fb:2a:89:d3:
e1:ca:d3:f8:82:8e:0e:3d:67:9e:19:d0:0f:35:9d:
69:fa:c6:21:4e:6f:33:dd:8b:d0:17:d1:5d:ac:56:
0b:2c:e5:c0:cc:d0:25:e6:03:e0:5b:8b:e2:4a:6d:
0f:84:6c:04:bf:66:f9:3c:f5:f9:33:b8:b1:4b:f4:
a6:ed:a6:d8:0e:60:36:13:04:79:32:fe:23:47:b4:
ab:d0:66:c4:af:90:aa:b8:ff:70:f4:22:ae:c5:4c:
72:3d:d3:1b:0f:bf:c4:be:34:70:d5:6e:21:07:0e:
98:18:d9:a7:e4:12:92:9b:68:67:0f:d4:51:f2:a1:
e6:99:d2:b7:8e:cb:56:0a:05:df:e4:6f:8f:f8:5f:
ca:8c:92:4f:a6:f3:fb:94:0c:4d:72:4e:ac:31:64:
c1:fa:b0:4f:6b:b8:1c:66:c5:79:80:11:dd:12:f3:
2a:4d:25:fd:f9:e7:06:27:e2:0f:e7:8c:67:1c:80:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:A8:00:83:93:9E:66:62:A1:97:F8:B6:DE:C3:FB:B2:DD:CB:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
X509v3 Authority Key Identifier:
keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
sbgp-ipAddrBlock: critical
IPv4:
198.204.9.0/24
198.204.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:0b:fe:82:c8:d3:0a:d3:e6:71:bb:95:9f:a2:14:8a:3e:be:
32:e8:42:be:c5:35:87:70:1c:ce:a7:e1:70:06:1e:8d:b9:98:
4b:2b:fd:85:3c:f2:69:8d:13:f0:5f:71:93:07:6b:b6:15:02:
35:de:f9:11:92:6c:14:80:54:5b:ed:66:90:90:5f:fa:0a:d5:
82:08:28:d7:5f:b3:b5:6e:6f:c6:78:d6:98:1d:e3:1e:5f:d4:
71:04:53:48:63:5a:1e:1c:6b:0d:bd:85:0c:94:4a:cf:57:55:
27:d0:39:04:7f:01:13:aa:e1:9d:20:6a:69:29:5b:6a:37:3a:
c8:98:a4:3d:60:29:c8:66:74:df:4d:31:53:66:ff:fc:06:82:
e9:d3:ac:e8:d7:bc:f1:6f:34:d3:ce:85:db:60:66:63:89:06:
b5:11:bf:4d:6f:a8:1c:5f:57:f6:1b:09:a1:f6:e3:41:8d:16:
e6:95:0a:cb:d5:e5:b5:5b:4a:d5:84:17:61:39:65:5c:5c:a0:
01:5a:ab:da:ce:71:d0:45:bf:24:4b:af:c0:e9:a3:78:96:91:
ab:9c:16:c9:09:9f:6b:24:80:ca:13:a0:cb:80:8b:e3:5b:85:
96:e1:89:04:68:59:1a:d5:b3:f5:08:70:89:05:e0:d2:bd:99:
0f:ee:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:19 2025 by rpki-client