
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2d6b49f-84f9-3767-a951-39d47d9c7220.roa
File: b2d6b49f-84f9-3767-a951-39d47d9c7220.roa (raw, json)
Hash identifier: P4rgmslimeITTpPjgFSO4ayQObkgdupSP2hUAJ4Gb8o=
Subject key identifier: AD:F4:66:3B:FC:47:E7:EE:D5:0D:D9:25:BA:37:3F:EE:32:6E:27:9E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584BB2F7EADE061D7902D9475C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2d6b49f-84f9-3767-a951-39d47d9c7220.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 397234
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:ea:de:06:1d:79:02:d9:47:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=4538e0cd-d5bd-44dd-91c3-e7888638c40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:a0:70:83:5a:4a:54:e6:de:c6:fe:e2:c5:
82:f7:b5:ce:79:48:b3:c3:54:e8:05:85:35:0a:10:
8a:3b:11:0f:d3:cb:65:1c:8c:7d:9b:8b:9b:da:ae:
0b:5f:95:e9:5d:37:85:f0:8e:4c:e7:41:e8:e6:d8:
67:e7:91:69:9b:1e:a0:eb:de:12:e9:cb:e2:7d:2d:
eb:04:41:09:e1:8c:0a:62:3c:17:45:62:36:17:31:
e8:3a:e1:48:02:c3:e2:da:ba:b1:f1:1c:25:54:38:
83:d1:47:b0:d0:31:fa:cc:27:e2:f5:2a:62:ae:8f:
d1:aa:47:86:a4:11:eb:31:36:39:a6:b9:9e:a2:99:
d2:4b:f8:3b:ca:8d:40:3c:bf:26:b1:90:62:f8:ad:
e6:1d:57:f3:fb:b2:50:9b:28:8f:13:11:1c:35:4f:
6f:5d:6f:6d:c7:1b:ae:a9:ec:f8:2f:1f:a6:88:87:
b9:0f:a9:34:40:08:b3:fe:08:06:c2:6c:90:27:e1:
f1:10:ca:2f:37:f4:bd:e3:d4:7d:53:e6:42:db:4d:
fd:b7:d7:79:78:83:74:69:f1:68:37:d1:49:37:15:
3e:dc:73:04:8c:5d:77:6c:44:4d:b6:c9:8d:b7:12:
5d:b7:62:16:f6:81:4b:5d:3f:52:19:64:a1:f1:db:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:66:3B:FC:47:E7:EE:D5:0D:D9:25:BA:37:3F:EE:32:6E:27:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2d6b49f-84f9-3767-a951-39d47d9c7220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:e4:b6:ba:bd:20:e3:4a:4c:03:ff:33:b5:6e:ba:20:bb:7e:
98:7f:48:df:4c:2b:95:86:52:21:34:c4:3a:3f:ad:a1:2d:5c:
51:55:73:e8:b5:0e:6b:70:a5:c3:65:26:21:51:61:63:5f:dd:
5b:5b:18:28:8b:82:89:07:39:29:0e:d1:f9:fd:8d:e8:48:27:
99:fa:4a:61:37:72:00:ed:c8:66:92:fb:83:84:02:73:e2:15:
6f:8f:3e:4e:e4:e8:44:cb:ff:e9:9e:6e:b1:c5:de:75:0b:ed:
55:61:ab:69:b5:dd:a8:c9:11:62:93:11:ab:b6:e1:73:4e:ff:
8a:d2:76:ba:88:b2:92:6f:7b:94:c5:8b:08:62:03:7c:d0:40:
9f:ce:63:d1:7f:0d:67:e7:9b:a8:d1:27:49:76:d8:1e:a4:ac:
98:ad:dc:57:a7:97:49:ce:7a:98:ec:f8:69:f2:6e:56:68:52:
0e:18:b4:98:d4:1c:ca:a0:8e:2f:7f:87:da:f5:eb:70:5f:15:
9f:55:b2:7c:e4:66:f2:b1:e7:03:6c:fc:c6:76:20:94:73:9c:
de:3d:79:a5:ba:62:7a:32:f4:dd:05:2f:9c:c5:68:d0:3b:89:
4a:37:83:a4:fc:aa:f4:7c:94:12:5c:7e:e1:1d:00:bc:c5:2e:
fc:0a:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:04:01 2025 by rpki-client