
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa
File: 0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa (raw, json)
Hash identifier: y+bJEKtX3M7+7JIVd6/Zye8DL/PIUG0aLyXONJPmuK0=
Subject key identifier: A5:A0:D2:53:6F:62:E5:E0:36:ED:BB:B2:DA:53:A9:2D:F7:F7:3A:D0
Certificate issuer: /CN=b9304eb0-eda9-4524-affd-0a6aa181a658
Certificate serial: 010D0C9F4328584BA667AB10DEF7500612D1F000
Authority key identifier: B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 397283
IP address blocks: 206.168.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:ab:10:de:f7:50:06:12:d1:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9304eb0-eda9-4524-affd-0a6aa181a658
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=359d52f5-55f0-441b-8808-76498f664d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:d7:67:17:69:ce:60:8e:87:40:f5:b9:a2:
d2:64:aa:8f:41:3b:ff:b7:8a:e4:a2:ee:c0:62:e3:
d2:be:47:bb:2c:f0:0d:58:88:4e:ba:c0:a2:d0:2a:
2e:41:5d:6d:54:03:0c:e3:c0:d0:3d:2e:4f:3b:32:
00:8c:3e:68:9a:45:c7:d1:a0:39:09:9c:bd:c7:3b:
88:7b:1b:ce:50:e3:f0:93:cf:2e:8c:a4:b8:27:14:
65:84:c8:1e:14:f1:0d:1e:57:68:4e:9d:aa:87:d7:
df:eb:cd:9d:8b:7e:9b:cb:f3:36:29:e9:db:48:7e:
23:bb:d3:7e:50:7c:d4:a3:17:de:53:93:44:d5:38:
b3:c9:5c:7f:15:16:fb:44:04:1e:21:b8:f9:ab:01:
3f:19:ec:fb:19:c1:cc:a4:c0:84:56:27:21:df:72:
af:8d:15:3b:14:f0:d7:13:5e:9c:96:a5:57:a8:c6:
c1:20:2c:b3:0b:5e:df:32:bd:70:fc:b6:e4:58:31:
41:4b:da:de:89:5c:5e:f0:24:e8:f5:45:19:ff:9d:
72:69:ab:95:2e:b3:92:f0:c3:77:de:a8:bf:a6:f4:
cd:67:61:89:19:12:d9:8a:c4:6c:5d:d3:71:58:54:
fc:4b:8c:2c:b1:4a:5d:0e:fa:1a:05:cf:b5:ac:4a:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:D2:53:6F:62:E5:E0:36:ED:BB:B2:DA:53:A9:2D:F7:F7:3A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl
X509v3 Authority Key Identifier:
keyid:B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c2:62:a0:e0:9c:31:2e:62:91:68:7c:22:ca:94:25:29:73:
f1:85:a0:36:04:91:a3:dd:27:e8:b3:17:e2:87:f9:48:a5:17:
96:24:e5:2d:ab:98:59:24:9d:16:9a:1f:dd:14:fd:af:e1:f7:
0a:06:a2:e8:f6:85:eb:fc:00:7c:a7:a4:f4:4f:44:c2:be:87:
e2:a9:44:85:06:5f:6a:12:31:de:d3:92:58:a0:62:93:72:18:
d5:d6:dd:7a:9d:ec:64:d6:f7:96:c2:1e:62:09:25:c4:2f:ab:
9d:eb:e0:74:bc:24:c5:39:a6:3f:c7:04:cc:9c:8f:4f:b1:ed:
8d:53:09:3f:b3:c5:6f:f4:cf:a4:d9:c0:65:cc:db:d1:b4:8b:
ad:83:91:23:11:3f:8c:70:7f:e4:ba:70:08:b0:05:98:d3:2d:
09:a7:7c:ea:c0:3a:31:5d:83:93:aa:f0:c2:8b:c3:cd:64:44:
5b:e7:16:d6:0d:d1:d5:9b:c7:57:55:c6:97:60:fe:21:0e:e8:
c1:27:05:4e:d0:92:a5:c2:32:f5:ce:88:e8:23:e5:09:3a:6a:
7d:49:a2:ad:9b:31:16:f2:ab:5a:6a:bd:be:06:a0:76:47:d5:
b0:a6:b0:e1:26:fc:8e:8b:6f:a9:4f:ad:7d:e6:6f:64:28:e3:
ce:34:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:23 2025 by rpki-client