
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa
File: 16aeb59e-91b7-36f8-aed8-271f44f518a0.roa (raw, json)
Hash identifier: CSZqNQhbGBK9xgsPuZbBbL5MCAdyX0+uPhCxR2WNx2c=
Subject key identifier: DD:F7:BF:BC:5F:4C:24:6E:91:6C:EE:C6:A0:01:F3:F9:8E:4F:40:D3
Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial: 010D0C9F4328584B2CF6D53DADB05C6DA0B0B900
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa
Signing time: Sat 13 Sep 2025 01:00:33 +0000
ROA not before: Sat 13 Sep 2025 01:00:33 +0000
ROA not after: Fri 12 Dec 2025 02:00:33 +0000
asID: 197537
IP address blocks: 199.188.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2c:f6:d5:3d:ad:b0:5c:6d:a0:b0:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Validity
Not Before: Sep 13 01:00:33 2025 GMT
Not After : Dec 12 02:00:33 2025 GMT
Subject: CN=ba33268d-a89b-4650-9612-d16ac78746eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:91:d2:c8:8a:9d:b0:40:08:35:73:ec:56:
95:5f:71:fd:46:a5:2d:54:f2:87:cf:11:fd:d9:46:
c6:90:2b:55:67:a6:6d:22:37:47:13:ce:19:a6:b6:
fc:53:13:68:4c:70:bb:7e:89:70:35:79:7f:c9:e0:
69:29:04:ac:4a:fa:81:d8:b2:3c:bf:94:a7:1d:23:
76:1a:fd:67:1e:1b:d4:83:de:52:44:49:32:30:a9:
57:62:b7:70:18:f3:10:f7:73:1b:0b:7d:b0:59:69:
4c:43:2b:f2:65:59:37:3e:65:b8:a9:66:50:90:60:
fa:55:76:1d:17:19:76:e5:cc:26:b7:2d:72:7d:ef:
1c:7b:63:63:87:14:d4:12:2e:b5:b1:90:c8:8a:ef:
65:62:ac:fb:35:0f:25:76:f0:f3:03:1f:2e:04:3d:
02:24:08:6d:70:e1:ed:62:be:8a:df:60:a4:81:0e:
91:35:9a:02:97:e6:c8:4f:06:3d:b4:8e:45:c4:74:
10:ce:72:f3:89:c7:d6:41:b4:7e:ac:79:f4:76:83:
43:a6:e6:6a:dc:7b:a5:bd:cc:ca:f3:5f:28:f7:5c:
fc:c4:71:08:0d:8f:25:2c:79:c0:93:65:66:fa:bd:
ac:c4:7c:69:87:7d:2b:86:15:74:61:81:f5:d5:a5:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:BF:BC:5F:4C:24:6E:91:6C:EE:C6:A0:01:F3:F9:8E:4F:40:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
X509v3 Authority Key Identifier:
keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:85:6c:a8:ae:f8:0e:a9:64:96:62:37:ba:d2:93:23:e2:36:
49:87:fe:06:ec:6b:e4:3f:75:ed:12:21:71:b4:ee:17:74:be:
03:5f:6e:46:bf:a2:08:65:fa:1c:94:1d:4e:87:76:1e:c9:71:
40:ce:f5:80:34:65:b4:4b:cc:d3:df:dd:b1:e3:68:32:6c:7b:
c2:ed:6e:05:e3:2e:b8:ef:f9:17:d7:c7:0c:ee:a1:36:c3:ed:
ab:0d:5d:cc:c0:ca:2f:b3:3a:95:b9:bf:7a:62:e0:2f:49:95:
da:58:b6:0c:52:81:e4:c2:a5:ad:4b:cc:3b:1d:ee:22:fe:cb:
3a:4e:fa:cd:2b:74:95:65:70:c3:ed:1d:70:dd:81:da:82:25:
2c:2a:25:00:20:63:64:c0:d9:f5:8f:ee:32:6c:6c:f2:4a:de:
e9:50:77:ca:14:91:a1:2f:1d:ba:e5:ff:de:f6:30:09:c5:ee:
51:db:70:33:7f:73:ad:98:48:c5:60:05:71:a4:0d:02:70:d8:
97:c4:98:7b:31:36:18:6a:76:61:4f:e1:59:12:ad:5a:7a:c1:
30:94:0b:c5:d3:8c:a6:13:30:ba:ae:4d:ce:6c:ff:58:21:dd:
c7:bd:85:40:4a:77:42:a3:4b:19:45:02:33:09:c8:82:dd:86:
00:6c:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:31 2025 by rpki-client