
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
File: 48a75400-de9e-393e-923c-1c1c7fa95ef9.roa (raw, json)
Hash identifier: Zn8KDgsgsbPiGasfDVXBSjTsekamqUUEEwQ3YDYnWoA=
Subject key identifier: 10:49:0D:1F:83:4B:40:81:A9:A4:C8:9B:87:AF:20:F7:67:CE:67:38
Certificate issuer: /CN=7beaa622-f870-437b-961c-9027fea120aa
Certificate serial: 010D0C9F4328584BBFA5A106683D3598271BAA00
Authority key identifier: 18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 8075
IP address blocks: 209.151.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:a1:06:68:3d:35:98:27:1b:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beaa622-f870-437b-961c-9027fea120aa
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=4f9ee923-a0ca-4fef-94ed-5704582b84ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:4c:75:48:72:70:35:4f:85:27:2c:d4:e2:
c5:e3:73:de:24:45:c0:cf:7a:4c:06:9e:e3:f4:80:
cc:f7:fc:40:f8:8c:96:43:a1:c0:58:a9:a2:27:1f:
07:f5:3c:99:0b:6c:05:82:17:d0:67:c0:24:d7:c6:
94:c9:f4:51:1a:f1:db:c8:96:ac:d8:0f:e7:60:7c:
1c:80:cc:88:75:47:1a:86:e5:92:29:1b:c3:cf:4b:
d2:ce:0f:59:44:09:14:dd:02:60:59:74:da:b6:f2:
95:15:60:37:cc:cc:42:51:76:0e:51:86:eb:40:81:
ba:18:65:38:8a:fe:12:08:b0:68:6c:15:af:8c:b9:
88:21:5e:82:7a:b0:87:91:30:7a:29:de:f2:1f:58:
ac:cc:3c:12:5f:a9:77:9e:9b:36:92:c8:ce:93:3e:
79:d6:4a:1e:fc:38:f4:76:90:d4:cf:43:88:99:af:
d0:28:4b:36:2d:4c:31:06:59:47:7c:80:54:97:ee:
92:73:eb:a4:52:de:36:93:6c:83:5b:bd:a9:d6:1f:
c3:24:9e:f5:23:6f:13:25:5e:76:0f:3e:5e:1d:f1:
e0:0c:f0:4c:a6:c1:80:e0:b9:49:7c:17:81:60:20:
52:7f:7c:f7:18:f1:cc:26:4c:98:8d:d2:32:52:9d:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:49:0D:1F:83:4B:40:81:A9:A4:C8:9B:87:AF:20:F7:67:CE:67:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.crl
X509v3 Authority Key Identifier:
keyid:18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:76:24:5b:2f:65:39:0b:6d:5d:17:a0:e6:e2:f2:ab:bc:cb:
8c:03:38:8c:ad:df:4c:f7:33:cc:26:ed:eb:10:6e:d9:22:f3:
5f:87:af:05:80:6b:ae:ef:a6:4d:f3:92:d4:6b:b5:63:cd:12:
65:f9:e2:64:02:64:b5:bf:02:2f:71:6b:51:bb:19:f2:3c:41:
5b:00:3a:d5:22:fb:62:a1:b2:1e:31:c9:5f:35:83:ab:00:e6:
e9:64:c6:06:af:4d:fe:c0:7a:3e:f4:0b:d2:fb:a6:35:25:e9:
9d:06:6e:9b:6b:c2:7e:4c:f9:35:06:ba:f8:98:42:03:91:88:
78:da:d0:4c:dc:49:2d:e9:8a:5a:4d:2c:4a:21:0a:e0:c2:10:
54:47:9b:66:23:7b:87:e0:0b:e5:14:f9:f1:62:54:24:95:ba:
c4:f7:8c:f4:aa:d7:b4:80:7f:9a:8e:62:9c:e3:8a:f9:0b:70:
68:8d:49:85:80:5c:81:67:3e:7e:a4:ef:0c:c1:46:ca:b7:d9:
9c:7d:5d:13:96:98:bb:96:d0:a5:47:1e:f5:c6:22:9c:d1:ef:
e1:75:5c:5b:f9:4b:ce:5c:1d:2f:59:0b:71:c2:2d:77:6a:7e:
41:52:a9:91:29:dc:91:b6:0f:e8:fe:d4:e7:8a:d1:95:14:e4:
aa:27:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:22:42 2025 by rpki-client