
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa
File: a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa (raw, json)
Hash identifier: 3rUbb7dN1PTBaN5+rl15mB8BxPRx1Dj945xKZKdrj3A=
Subject key identifier: 5A:15:B8:94:45:27:A3:55:26:D5:3D:5B:C6:3B:71:63:1B:50:3E:AC
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584AFBAC8F0CBD9D050F732A6740
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa
Signing time: Tue 26 Aug 2025 09:16:21 +0000
ROA not before: Tue 26 Aug 2025 09:16:21 +0000
ROA not after: Mon 24 Nov 2025 10:16:21 +0000
asID: 9304
IP address blocks: 216.132.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fb:ac:8f:0c:bd:9d:05:0f:73:2a:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 26 09:16:21 2025 GMT
Not After : Nov 24 10:16:21 2025 GMT
Subject: CN=9b9a4b2f-70eb-4ab3-b055-402defd939af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:b8:f0:ff:16:c6:ce:52:9d:bc:7d:4b:ff:
b0:7d:c9:5d:05:2a:90:8a:11:e2:d1:fe:8d:60:31:
e3:ce:7e:f7:e0:ee:dd:fe:0f:bf:70:38:21:80:4e:
5c:31:e9:22:20:fa:4a:7c:17:2c:e5:ce:9b:d0:a1:
37:86:7b:92:4a:93:1c:fd:c2:4b:ec:57:14:2a:85:
fe:04:e0:59:fd:36:46:39:8b:ed:5d:0b:7e:1b:ef:
78:6c:70:e6:7a:d4:ed:7c:28:eb:73:5b:b7:b7:4c:
e8:42:d1:6d:4f:2d:c4:87:e0:e8:d1:de:e5:1b:4a:
f8:9b:8a:51:d6:b5:b6:df:61:ce:c4:4e:f7:c5:06:
b5:06:2e:1a:de:03:aa:ff:e8:7e:86:ea:52:95:86:
8c:d4:f0:52:16:12:ad:03:4b:64:f2:9f:fd:d0:32:
65:8e:06:90:d7:45:0f:fd:bc:af:2a:ba:de:ff:aa:
3e:6e:5e:4d:53:af:64:ba:8c:20:d3:b5:8d:77:8e:
74:13:48:36:75:df:ce:a8:19:7b:f1:2e:ef:b7:5e:
fd:80:42:b0:db:1d:f5:4f:f4:5b:65:20:1d:21:4a:
cb:7b:bb:e1:7f:ca:18:be:25:30:8f:e1:1b:27:59:
64:83:37:75:2d:91:6d:b3:8d:8e:21:c9:c4:13:1e:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:B8:94:45:27:A3:55:26:D5:3D:5B:C6:3B:71:63:1B:50:3E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:8e:bd:37:29:23:d1:0a:a4:f1:6e:e7:df:b1:c1:1f:4d:28:
e3:51:2b:7c:e6:12:d5:cf:78:c4:c0:41:b0:ee:fb:4f:aa:9e:
ff:50:18:ec:62:4c:64:47:c6:10:9a:c6:cb:17:24:6a:cc:dd:
53:5e:d0:b0:6e:05:18:5a:0a:10:67:d7:a4:5d:73:56:e9:3f:
f3:0b:cb:2d:5b:f1:f6:bb:62:8a:c8:29:e9:13:ab:3d:67:8d:
67:cc:3f:81:99:f4:44:17:96:0f:0e:6b:7d:9f:09:c8:32:fc:
31:0c:18:df:5a:97:dd:6e:1d:80:8f:c0:d6:aa:4b:19:58:5a:
55:c5:59:ea:f6:2e:46:bc:19:20:5f:fc:a1:fa:31:a7:a1:2c:
0d:52:e1:ec:fd:38:db:7b:ee:e6:b9:38:85:b3:80:5f:bc:9a:
2e:1b:c8:45:7b:c6:70:5c:02:f5:34:71:d9:21:72:0b:9a:85:
bf:c1:e3:f7:f7:eb:a1:d2:26:c9:09:4b:9e:35:e6:2d:ce:57:
1e:13:81:df:ed:89:77:99:b1:08:7e:99:43:1b:46:5a:ae:4a:
bf:b7:2a:c4:9c:99:25:a0:e7:83:a7:62:9f:62:c5:8b:74:bc:
11:f5:5a:14:2d:03:8a:b5:c1:c7:3f:2a:12:bb:1e:77:fa:97:
3b:10:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:01 2025 by rpki-client