
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa
File: a1da6f6b-ff4c-320f-ae27-198fcae45575.roa (raw, json)
Hash identifier: /uSl8XfvoH7RPlAyEUvUV18vcknHuETnqe33ShwLRzA=
Subject key identifier: FA:71:C2:5C:64:53:B4:70:C0:21:8C:F3:F2:0B:FF:B5:E9:BC:DB:F5
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F4328584BB45D2EFD89AB7D3C4CF34C00
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 63023
IP address blocks: 68.233.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:2e:fd:89:ab:7d:3c:4c:f3:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=d54529ef-d991-41c6-b484-71a4550efb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:b1:8c:2c:76:ee:99:69:03:b5:84:e6:15:
b8:74:ef:d0:6a:67:20:3a:84:62:f9:a4:b4:94:71:
a9:02:0f:81:90:03:8b:df:42:44:8c:a8:a1:4b:cb:
0a:fc:53:52:03:6d:0b:8e:ad:79:55:20:c1:2d:a9:
ee:39:60:c6:7e:36:26:e9:ca:b3:51:cd:e0:02:60:
a7:c9:a1:84:83:e9:88:ac:62:38:09:b5:72:9b:47:
94:bd:8f:ad:ed:ae:82:25:0e:da:8f:8a:06:db:e7:
70:00:57:8d:36:bf:91:9f:27:60:2d:58:19:51:79:
cb:54:7d:99:da:86:bf:10:ae:e0:fc:cc:bb:b3:ed:
02:2f:e6:be:f6:68:8d:82:0f:e9:ea:7e:80:88:1f:
74:a7:fb:bf:17:73:0b:7d:3e:bb:3d:57:84:38:94:
27:65:55:3f:6d:62:72:c5:cf:37:db:f0:c5:90:9c:
cb:25:de:b0:0a:3f:ca:dd:0f:7a:bf:6e:69:be:08:
5a:fc:da:a5:63:ad:60:6d:e4:48:a4:36:2e:26:7b:
77:cd:ca:0e:50:e9:fb:c2:11:ea:b2:f2:98:fb:ed:
85:74:2b:20:fc:5d:72:de:dd:9a:19:34:1b:9e:69:
a0:67:72:5c:96:47:66:d1:66:02:24:d4:09:4e:a5:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:C2:5C:64:53:B4:70:C0:21:8C:F3:F2:0B:FF:B5:E9:BC:DB:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:58:df:9c:20:df:3b:21:19:52:f2:1b:4d:2f:fa:7e:49:5a:
8b:f2:ba:51:45:63:c0:29:b4:b7:b4:77:f3:37:c7:72:a2:b8:
32:a4:1a:88:1f:55:a7:a9:c6:58:6a:a2:4e:3e:a5:b3:fe:92:
e0:4d:dc:2c:94:14:0f:22:d0:37:e5:b8:4e:a3:c6:9d:6f:5c:
16:ac:db:a4:00:2e:87:34:e2:10:5d:e2:8f:99:35:7e:c0:9e:
db:42:41:df:c0:3f:f4:9d:db:9b:ec:62:56:b5:4e:34:01:f8:
6e:12:bc:cd:39:70:05:60:18:82:c1:75:d2:17:61:38:b8:f8:
39:41:3b:17:07:46:95:a7:e4:0e:55:b3:23:92:3e:dc:1f:eb:
4d:56:87:54:82:e8:9b:d6:3b:ac:f3:d5:f5:ce:8e:fa:71:c7:
71:8a:3d:cf:21:3b:95:ed:dd:7c:e5:37:c0:29:4c:41:d1:87:
c3:44:8e:48:44:14:bb:f4:d8:8b:28:9e:29:66:a9:24:87:84:
4c:b7:1f:1b:89:66:10:6f:7a:4a:bb:00:ed:d6:b7:99:8d:b4:
71:0b:6d:cc:ab:34:30:9a:2e:ec:f9:08:57:18:c3:7d:02:eb:
9a:ff:37:36:59:c1:52:f5:09:e1:38:e7:18:8d:2e:34:b2:9c:
2e:12:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:17:03 2025 by rpki-client