
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa
File: 3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa (raw, json)
Hash identifier: N+u75HXC6unZ3Xj/FGEgtdrT/dkFdQN+xlTReLQEidM=
Subject key identifier: C4:EA:5C:77:D1:06:7D:FE:C2:9D:0D:F9:32:9F:3A:46:83:61:EE:69
Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial: 010D0C9F4328584B84E7695BEDEC87A28E501660
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa
Signing time: Tue 14 Oct 2025 13:00:37 +0000
ROA not before: Tue 14 Oct 2025 13:00:37 +0000
ROA not after: Mon 12 Jan 2026 14:00:37 +0000
asID: 376
IP address blocks: 205.151.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:84:e7:69:5b:ed:ec:87:a2:8e:50:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Validity
Not Before: Oct 14 13:00:37 2025 GMT
Not After : Jan 12 14:00:37 2026 GMT
Subject: CN=7b297e5d-2a86-43c5-b5e6-ef450ae6801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:43:59:45:55:eb:3d:8e:46:0c:e5:ce:25:
62:af:92:f2:7b:b1:e4:a5:8f:30:d1:0c:d7:fd:14:
aa:d5:b2:83:58:7e:a9:ec:7e:91:19:4e:8f:d2:61:
c2:31:cd:ae:16:8a:7f:d2:ac:63:48:cb:f3:ab:f2:
3b:79:40:a4:c5:30:31:cb:fa:3e:60:d6:36:7b:ac:
9d:d6:4b:60:08:45:e4:4b:68:0c:3e:30:ef:00:20:
b2:a3:8b:b6:69:a3:1d:38:e7:0d:76:cd:f8:62:f0:
96:09:ee:ff:63:03:1a:a5:30:fa:7b:75:49:63:b1:
aa:a2:c4:1b:34:36:a3:d5:07:a8:c3:62:71:43:7b:
f4:f1:e1:6d:e1:01:e0:97:71:7f:57:36:28:72:14:
8d:f3:49:57:3b:a9:02:eb:94:1f:4c:98:5e:b0:86:
49:88:de:82:07:9d:27:2e:09:f9:04:61:9e:31:2a:
26:3d:67:81:2b:2f:c2:72:ee:e5:b0:6d:5d:1a:b3:
4f:38:df:bb:a1:87:a0:5d:46:01:8a:be:09:22:1c:
77:09:89:5f:b7:47:0b:74:9c:00:7e:2d:90:37:6c:
9d:82:68:b0:02:b9:41:e2:6d:3c:47:7b:77:13:55:
b9:60:38:ac:21:ae:19:a9:1d:f5:b1:72:86:58:71:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:5C:77:D1:06:7D:FE:C2:9D:0D:F9:32:9F:3A:46:83:61:EE:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
X509v3 Authority Key Identifier:
keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
sbgp-ipAddrBlock: critical
IPv4:
205.151.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:2d:6e:5f:5d:fc:77:43:6d:97:0c:79:d7:be:63:d8:34:38:
7c:65:ff:87:00:68:23:84:9a:fa:8c:1e:e9:16:ce:15:fc:ee:
cb:c9:29:49:ea:c0:a1:f2:35:d1:81:03:d2:05:5f:6c:64:27:
e4:22:23:0c:5a:ad:c8:ec:8e:97:4f:59:11:f0:40:b9:74:06:
d5:fe:d2:8e:c9:a4:ce:45:27:1a:e6:9f:72:cb:a8:d9:7b:cb:
03:8e:40:ed:d6:04:9c:01:20:02:f6:98:c6:3e:04:f8:98:3c:
c5:a4:9b:c2:93:ce:48:05:17:4d:6b:b7:fa:f9:d0:32:46:a7:
4c:7b:c8:55:36:0c:76:d5:d3:4d:c2:7e:7e:dd:72:3c:51:ee:
82:8e:92:45:a7:02:64:68:dd:67:3f:30:d5:50:20:44:50:9b:
01:51:20:46:68:62:09:04:48:0a:40:1e:b8:5a:b0:09:6c:77:
da:5b:25:3e:b2:de:06:4f:f3:fb:85:ad:69:bc:9b:22:70:3f:
4e:4d:ca:2f:f0:87:73:f5:6e:b9:87:25:17:4f:ae:e4:78:34:
e2:3d:d3:59:87:78:0c:9f:11:8b:f2:0e:61:59:c2:ea:0d:7c:
53:8f:73:48:9b:b5:01:6c:94:1f:12:6e:66:e8:cd:73:84:49:
58:b8:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:51 2025 by rpki-client