
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa
File: 8804544c-f9cd-38be-bc33-4778fc22dce7.roa (raw, json)
Hash identifier: feX+X/h9N/TPKoACSuxV1RzT0I1qBuyNLLxQzicUZm8=
Subject key identifier: 18:7A:3C:5B:3A:20:CD:DB:C2:DC:1C:CA:67:52:11:7D:84:2C:3E:5D
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F4328584B28C6EE38C1C0A80FA38DC000
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa
Signing time: Thu 11 Sep 2025 13:00:41 +0000
ROA not before: Thu 11 Sep 2025 13:00:41 +0000
ROA not after: Wed 10 Dec 2025 14:00:41 +0000
asID: 14618
IP address blocks: 66.235.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:28:c6:ee:38:c1:c0:a8:0f:a3:8d:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Sep 11 13:00:41 2025 GMT
Not After : Dec 10 14:00:41 2025 GMT
Subject: CN=0067e608-7589-44fd-b1de-f3282046a9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:19:cf:5a:7b:27:6c:33:9e:9a:aa:ac:46:
f8:36:06:3a:92:c4:d5:2e:0a:5f:52:d9:c7:42:1e:
e8:1c:c5:67:91:af:bb:f0:c4:5c:53:0d:6a:d8:a1:
ab:a9:06:42:b7:50:14:ee:0d:e5:7b:96:95:59:ef:
68:52:2b:a5:e9:c2:b2:9e:5e:81:77:3a:99:5f:92:
e0:71:ae:9f:b4:76:22:64:69:e9:ad:96:13:f4:59:
a0:a5:6d:8a:86:c7:bf:78:5d:5e:f3:c0:c9:7b:d4:
97:91:b5:7d:34:65:88:21:27:c2:2c:83:0e:83:49:
93:ae:74:15:36:77:0b:69:60:41:d6:06:ad:ef:7b:
ff:ec:29:ab:2d:ce:a2:4b:da:ed:01:5a:33:13:aa:
a0:0c:15:73:bd:15:b8:a9:1d:4b:7f:e1:00:b1:df:
dc:48:59:dc:d8:30:2e:a1:5d:ff:62:45:b3:47:3f:
3d:a6:3e:79:54:3c:d8:1a:49:d4:d6:bd:13:25:b5:
d9:a3:c0:1e:7a:d4:b8:7f:c0:0a:10:b6:97:db:04:
1e:c3:08:9b:33:70:b7:56:ac:1e:70:a9:9c:b1:bc:
99:20:6d:8b:71:8e:45:c9:e2:8a:93:6d:43:16:bf:
80:b2:99:50:19:e0:9a:28:e0:13:4b:37:1e:34:b4:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:3C:5B:3A:20:CD:DB:C2:DC:1C:CA:67:52:11:7D:84:2C:3E:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ba:d3:b9:e6:46:d0:63:34:c4:4d:52:4d:a4:56:fc:a2:a4:
9f:bb:80:c1:4d:0b:91:2c:3c:d3:bf:99:c7:93:21:2e:dd:9f:
a7:0d:ea:8c:6c:0b:d4:90:c1:b9:98:23:68:26:37:e4:52:05:
fd:fe:dc:9b:3f:ad:4e:bb:83:42:13:22:21:36:39:96:b6:c8:
a9:86:04:ea:75:0f:73:c1:0d:4e:88:0e:0b:0c:f2:ea:fb:2f:
44:59:8b:95:74:1e:c7:1b:c1:54:aa:9a:94:d2:cc:e8:94:18:
40:dc:77:bf:45:5f:b4:cf:bc:7d:50:ce:19:da:88:b2:35:68:
9d:61:78:4d:6d:f2:ff:9a:ad:27:ec:03:38:b8:07:23:72:50:
10:cb:eb:fa:c1:80:e8:80:a6:31:9a:8a:32:67:5e:fe:de:60:
68:8d:9a:f2:7b:96:54:4c:8d:60:fa:b5:9b:c8:c9:45:3b:61:
69:55:21:50:8b:e5:48:63:bd:e6:88:73:8b:43:06:60:8e:bf:
a1:94:2d:1e:66:a3:3a:29:14:7f:d8:5a:84:24:84:d0:9e:e5:
8d:60:af:70:11:69:c4:42:56:1b:da:98:b9:ae:95:00:7c:81:
cd:67:66:71:08:d4:dc:89:1b:67:5e:0a:d6:09:3f:18:5f:12:
7a:67:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:30 2025 by rpki-client