
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/dcbcee91-9217-3d70-9171-c94360252af4.roa
File: dcbcee91-9217-3d70-9171-c94360252af4.roa (raw, json)
Hash identifier: tX60SEQpg59M4e/WAU3Ej7VHcKmT7zneenF9yrHu7mk=
Subject key identifier: 89:7C:23:23:7E:36:6B:1C:FC:AF:B6:12:29:0F:E1:01:02:94:42:EE
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584BA932926320330E4D109655D8
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/dcbcee91-9217-3d70-9171-c94360252af4.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 203724
IP address blocks: 131.229.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:92:63:20:33:0e:4d:10:96:55:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=c65aea68-54d4-4c6e-b369-64192f5d0fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:24:07:ae:dd:92:33:93:2b:c6:eb:b5:08:
4b:8d:ab:54:93:3d:51:fa:95:d8:98:94:b4:3f:ad:
d3:a8:ca:19:b0:d6:c4:8d:60:e7:c1:49:15:ed:f0:
9e:a5:48:0e:ef:f1:36:ad:ba:94:6c:7e:89:a8:d7:
fb:7e:c3:70:3f:ab:23:38:28:4c:62:aa:70:35:aa:
5f:d5:9b:40:c4:e2:64:78:e6:2e:03:3b:99:a4:cf:
3a:83:8c:26:75:a7:b9:8a:32:89:46:23:24:c4:e5:
b4:32:a8:59:ed:95:e6:60:d1:01:24:09:1c:af:f8:
f8:05:40:10:50:3c:be:0d:19:00:cb:85:06:6a:0b:
e1:fc:61:f0:65:27:90:90:84:46:dc:6b:d7:f6:87:
d1:07:94:f2:05:a6:2b:13:8e:bf:ba:5b:1b:e3:58:
96:eb:2b:1c:dc:95:43:c1:21:f9:96:d6:bd:df:22:
58:f3:2f:d3:b3:5d:9a:ff:a9:ae:a5:92:f4:b7:9a:
56:9a:1e:11:8a:79:1d:95:60:e5:6a:7c:31:f1:67:
3b:ec:a1:1b:c8:0d:ca:f0:8c:b0:a7:78:89:e0:44:
8b:32:8b:d1:dd:97:22:c8:5b:d2:ed:a7:c2:f0:9c:
b1:e4:29:79:12:db:59:3d:cf:cb:14:8e:80:51:cc:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:23:23:7E:36:6B:1C:FC:AF:B6:12:29:0F:E1:01:02:94:42:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/dcbcee91-9217-3d70-9171-c94360252af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b4:95:93:9d:a5:88:21:b6:a0:9d:0c:9c:35:85:1a:87:f9:
ec:a7:b4:a5:6e:60:a9:21:9c:1e:1e:1b:5e:3c:41:00:69:3c:
4c:b3:2d:b9:a1:fe:b2:24:d7:02:3e:59:53:6a:01:de:6c:b1:
ea:fa:b8:98:97:a1:b2:c5:43:58:fa:06:c6:2e:91:80:8e:a9:
a0:fe:da:27:3a:a6:b1:80:1e:dc:2a:87:4c:31:7c:e8:a3:15:
4e:b2:f3:d7:c1:56:1b:5f:f6:23:6f:72:31:c6:95:14:42:d1:
d9:fa:16:93:04:2e:fb:95:e7:6a:99:a7:a3:bf:bb:96:68:2a:
70:ff:82:3e:5b:db:94:ce:99:06:9c:08:f9:55:e0:5a:88:4c:
76:61:f5:fd:ab:90:9f:c3:e6:60:cc:da:fa:e7:49:b3:84:c0:
45:e6:c9:de:72:e2:e1:d7:1c:85:a2:f0:2c:41:d3:7e:f0:96:
12:01:18:fd:a8:66:20:77:b4:e9:c5:1b:06:72:04:cb:e1:d8:
50:e8:62:22:23:3d:e0:91:13:01:73:d2:0e:d7:a9:89:11:21:
0b:bd:45:ed:e2:75:ed:86:bf:ea:cf:eb:4e:ea:c5:23:3f:88:
62:e6:94:e2:79:aa:9c:43:3e:86:ca:72:08:36:6e:a8:52:60:
7a:cc:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:44:09 2025 by rpki-client