
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa
File: b401b75d-1b75-30fd-9468-b62b2e1167c2.roa (raw, json)
Hash identifier: 9AQG4wjY4pjN3A0A5i/SFn9Pb+/+B5bVtCD/9ZNxWLo=
Subject key identifier: 43:67:F4:B5:93:A0:17:E3:3D:E7:D2:5A:36:22:AE:77:6B:4D:95:00
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584B0607221BEA3F174D022E1A00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa
Signing time: Sat 30 Aug 2025 02:16:55 +0000
ROA not before: Sat 30 Aug 2025 02:16:55 +0000
ROA not after: Fri 28 Nov 2025 03:16:55 +0000
asID: 206300
IP address blocks: 66.92.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:06:07:22:1b:ea:3f:17:4d:02:2e:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Aug 30 02:16:55 2025 GMT
Not After : Nov 28 03:16:55 2025 GMT
Subject: CN=ff8c7452-4f6c-45ca-a8dc-e94b97d1af36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:a3:e6:c5:f0:43:06:44:ae:19:d6:b9:ea:
ea:f9:6e:e1:d3:b6:9d:a4:c4:8a:61:c9:76:c9:58:
99:c2:4c:c9:5c:9d:f1:d3:29:aa:c3:27:1d:a0:47:
0b:dc:b7:3c:48:4b:d1:e3:0a:2a:f9:08:f1:24:8c:
db:b8:28:e5:87:dc:c3:27:72:6c:2c:d3:d1:6a:cb:
fc:2a:f8:e5:16:25:16:4b:ad:7c:54:fa:2c:8f:3b:
4f:62:01:b3:57:28:37:a8:11:c7:68:35:71:e2:f2:
bd:3b:28:bf:29:cb:90:84:55:5e:f5:f2:86:41:aa:
25:35:9f:fc:29:43:9c:5e:a0:d0:c4:09:9c:74:ee:
33:f0:4a:33:6a:0f:e9:5b:9b:1a:02:df:60:5e:29:
77:33:e6:4d:6f:c1:0a:8e:99:4f:09:f5:2c:7a:20:
7d:d3:fa:3e:1c:c4:fb:a3:3e:db:16:32:90:33:8c:
a0:f8:83:94:63:f2:e2:30:4e:a1:95:a4:7c:f6:92:
72:23:1f:4e:18:19:02:8a:51:8a:cb:e7:1d:13:bd:
d5:db:c5:ad:b8:4e:a3:db:b7:25:83:19:67:bf:13:
81:99:eb:95:10:29:c8:1a:e7:26:ba:0e:32:40:a9:
f8:91:2e:3d:d1:8e:f3:aa:1d:ca:e2:a2:56:8a:63:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:F4:B5:93:A0:17:E3:3D:E7:D2:5A:36:22:AE:77:6B:4D:95:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b401b75d-1b75-30fd-9468-b62b2e1167c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.92.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:5d:50:8e:08:af:43:d5:a0:bd:3e:2c:65:bc:0a:63:6c:d7:
e6:c9:fe:a7:3a:11:ef:61:b1:a0:15:51:bd:9c:64:2f:e0:d8:
47:99:82:7d:ee:18:a7:ef:32:32:e2:b3:44:e0:50:af:92:36:
7b:b6:82:cc:ca:c1:d4:42:0a:60:7f:b5:f0:ff:33:f1:24:3c:
9c:8b:3b:fa:d4:37:b9:49:78:f9:2d:6f:d2:a8:11:ed:37:f3:
6a:02:00:e5:57:db:85:d1:3b:6b:7d:e0:6a:7e:e6:0b:e9:80:
05:0b:8a:83:62:d1:fa:50:dc:7b:bf:5b:0a:d3:e6:b4:b1:6e:
fe:3d:f6:a3:e9:7b:c1:05:0d:be:25:d2:a6:3b:af:cd:a6:31:
d3:6d:70:6c:89:11:60:93:2d:42:e6:7f:80:d5:f1:a8:66:7f:
11:f7:40:04:8a:96:53:cb:cf:7b:5a:ab:6f:db:8c:4b:27:93:
73:67:f9:e0:20:96:bf:59:4b:c4:5c:f7:ce:f6:31:f9:74:5a:
15:37:53:88:32:85:53:b2:0f:bc:f1:8c:1e:c1:b3:16:6d:dc:
12:a3:dc:2b:cb:46:cc:9b:40:86:a3:4d:8f:68:d0:ca:f7:b0:
3d:d6:4f:5f:4e:ed:16:db:a0:01:5e:c8:eb:55:5b:81:7e:72:
56:38:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:01:30 2025 by rpki-client