
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa
File: a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa (raw, json)
Hash identifier: UfTXkGkWOgVoat7W7rYMqb43rHjQZXQ8cfuDPk8vjlo=
Subject key identifier: 7A:CC:F0:2B:07:08:3A:B7:0E:49:41:9D:C0:6E:1A:E0:F8:95:25:75
Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial: 010D0C9F4328584BBCDADDECB8943DB8CE366C40
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa
Signing time: Mon 03 Nov 2025 14:00:38 +0000
ROA not before: Mon 03 Nov 2025 14:00:38 +0000
ROA not after: Sun 01 Feb 2026 14:00:38 +0000
asID: 23316
IP address blocks: 216.193.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bc:da:dd:ec:b8:94:3d:b8:ce:36:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
Validity
Not Before: Nov 3 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2026 GMT
Subject: CN=025a481d-5908-497d-96ed-ddc14fb622c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:6c:71:f7:10:2b:92:51:71:6f:87:3d:f6:
ba:b3:89:91:1b:90:a7:fc:94:64:50:e4:84:f2:3d:
0b:b5:d0:ae:b8:fa:c4:23:2e:fe:01:cc:ac:a6:b9:
b1:f6:55:c9:45:dc:76:96:cd:0f:85:cc:48:b1:b4:
0e:62:ef:5a:06:42:17:24:cb:0a:34:1e:ec:54:56:
68:f3:a9:4e:cb:a1:10:fd:fc:7e:82:6c:d7:56:0e:
07:2c:3c:83:ee:55:c2:7c:3f:38:d3:1c:06:95:c0:
ed:99:35:40:38:57:40:19:93:33:62:05:7b:67:a8:
66:12:f6:bf:3a:d2:2e:41:3a:4b:04:7e:1e:a6:b5:
1a:44:38:8c:ad:cf:0e:57:d2:27:9f:36:42:5a:ba:
ee:ff:21:03:70:00:19:8b:a8:e4:23:5d:e3:14:f3:
ae:dd:6e:f7:23:6f:ae:32:5a:50:20:e5:e3:c9:ba:
a3:00:29:56:71:17:ef:2e:69:ab:2f:89:5b:08:bd:
ca:0b:21:30:b4:36:52:b9:c2:e9:89:91:61:79:be:
0a:88:11:54:35:d0:31:b9:ab:8c:29:92:ab:c1:37:
43:23:59:d3:ad:52:3c:55:4d:57:b4:56:46:9d:25:
02:93:e6:d1:08:0f:74:33:3e:0f:40:fe:47:33:68:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:F0:2B:07:08:3A:B7:0E:49:41:9D:C0:6E:1A:E0:F8:95:25:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/a6427e1d-73b7-3bc2-ac5c-9bd397d29897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
X509v3 Authority Key Identifier:
keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
sbgp-ipAddrBlock: critical
IPv4:
216.193.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:0c:ec:55:f0:0f:92:f9:3e:7c:58:e9:47:85:a7:bb:90:ee:
05:2c:d9:be:22:50:f3:65:04:24:0a:dc:c8:92:f8:97:94:c0:
d6:bb:7a:19:95:b8:df:3b:46:ab:17:56:5b:8e:fc:18:ef:bb:
cd:3d:08:27:90:07:40:84:4c:96:b8:9f:34:1c:2e:87:d8:38:
f2:39:e9:4c:60:87:f0:3b:db:44:83:5a:23:2f:09:fa:8b:2b:
7b:dc:f6:bc:be:37:b0:54:67:d0:5d:29:30:c3:02:a6:6f:bf:
80:e1:f1:f5:12:c8:0c:00:69:40:ef:d5:56:27:9d:05:51:b6:
dd:31:2a:71:8f:5b:a3:0f:50:33:fb:2d:4a:53:96:90:5e:80:
16:2c:46:44:84:22:97:5c:42:3e:70:f8:46:45:51:e9:02:c0:
b9:c5:ed:b6:4a:85:29:b1:f2:e1:cc:c0:81:8f:62:71:0e:4c:
51:41:34:00:bb:bb:53:b8:cc:0a:a1:89:74:77:a1:1a:95:b4:
f9:1b:bb:d1:3d:ee:3d:b5:b0:69:7e:54:30:5c:e7:9c:68:f5:
02:1f:ff:af:47:fa:04:bb:ca:68:1c:fe:f1:10:2c:cc:10:6e:
b3:90:2b:d1:cc:f4:d8:15:ae:bc:af:d7:bf:d3:6a:90:41:c5:
0c:b3:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:00 2025 by rpki-client