
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/356a78e9-a46a-376a-a81f-b7abff68cc1f.roa
File: 356a78e9-a46a-376a-a81f-b7abff68cc1f.roa (raw, json)
Hash identifier: JpQ79lvaLO+dmPlygD0oMUJpY+D7Gt8xIspwTtg37TE=
Subject key identifier: 5B:1B:6A:23:3F:FB:2E:AA:17:65:35:26:B9:1A:CC:E3:65:2D:70:DE
Certificate issuer: /CN=9caf23fc-9cbc-4f40-aea8-07653211f665
Certificate serial: 010D0C9F4328584BA502380BF3D253AF03317700
Authority key identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/356a78e9-a46a-376a-a81f-b7abff68cc1f.roa
Signing time: Sun 26 Oct 2025 01:00:31 +0000
ROA not before: Sun 26 Oct 2025 01:00:31 +0000
ROA not after: Sat 24 Jan 2026 02:00:31 +0000
asID: 2914
IP address blocks: 23.134.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a5:02:38:0b:f3:d2:53:af:03:31:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf23fc-9cbc-4f40-aea8-07653211f665
Validity
Not Before: Oct 26 01:00:31 2025 GMT
Not After : Jan 24 02:00:31 2026 GMT
Subject: CN=3316da44-9212-4d71-b4b6-0f3c88331ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:35:8e:6f:40:b0:a0:a1:fa:9b:a9:d4:63:
76:74:61:b9:ec:ed:eb:6a:f5:77:97:68:3a:82:59:
9b:fb:6e:c2:5d:ef:d5:e8:54:c6:b9:05:20:f7:81:
ac:29:af:ea:38:8d:34:e4:9a:2e:da:c5:87:66:23:
3b:9a:a7:a4:ea:9b:3f:be:aa:66:a2:2d:a2:ed:67:
a5:47:7a:e6:89:23:b1:40:86:72:4a:ca:bc:46:8d:
66:06:3a:63:9a:8e:d7:db:0c:d4:b6:c1:85:89:0e:
38:a8:02:d5:5c:e8:de:a6:82:8a:69:e9:b3:9b:a7:
cb:7b:bb:6f:8d:19:7f:df:14:e0:fc:8c:bd:af:8b:
2a:32:c1:b4:95:c1:18:24:4d:e8:4d:c5:b5:b5:53:
8c:72:db:fd:b4:b5:4c:3f:0d:fe:92:92:9d:b5:4f:
25:f4:0a:c3:06:0f:1a:d1:5b:e2:54:46:0b:5d:39:
d4:2b:ab:4d:11:81:4c:d3:45:e6:4e:08:c9:59:e8:
c4:6a:f6:29:32:13:0a:f3:ce:a1:c5:23:f4:bd:4a:
32:25:7d:90:a3:da:3e:18:82:ec:9d:d9:4d:09:d1:
71:0d:2f:13:a0:64:7f:36:17:e4:21:bd:02:93:12:
df:18:99:70:73:97:4e:aa:5b:a3:d8:cf:53:b3:63:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:6A:23:3F:FB:2E:AA:17:65:35:26:B9:1A:CC:E3:65:2D:70:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/356a78e9-a46a-376a-a81f-b7abff68cc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.crl
X509v3 Authority Key Identifier:
keyid:4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:20:46:4c:33:38:0f:91:98:7b:59:35:a7:e2:32:59:f0:7f:
ed:7e:9c:0f:f4:6b:51:9a:49:ac:dd:4a:af:3b:f1:3c:4a:2c:
b0:a9:e7:2f:9a:50:05:4a:e0:dd:79:05:b5:bb:0f:89:78:8c:
a7:6b:02:4f:f6:27:a6:82:b8:fa:54:3b:da:46:e5:d3:b1:80:
dc:ff:50:66:4d:de:a8:2d:18:1f:a3:a3:a7:34:01:8a:3e:8a:
b5:1f:ac:5f:6c:a4:2f:cf:a4:0f:b9:1a:d8:01:9e:87:8e:68:
b1:d2:17:de:01:69:8a:44:38:61:f8:1a:a0:9f:85:ae:75:c5:
38:6a:71:96:ab:f2:96:4c:14:b2:21:08:30:1c:38:08:66:60:
68:58:a0:49:9c:f3:79:59:21:63:93:51:92:bd:2d:ed:2b:09:
47:05:09:5c:66:8d:b2:0e:4c:80:9f:86:09:4c:ed:d6:c0:bf:
b2:48:82:31:0e:4c:a6:7f:04:e0:d6:db:c2:dc:03:7b:c5:ab:
ce:96:80:d3:66:0d:a9:61:af:65:7b:86:55:cb:01:01:3f:f3:
c9:2e:df:bc:35:81:7b:fd:5e:4f:cf:87:8f:c2:39:85:80:e0:
b8:ad:e2:4b:af:29:7d:c3:9d:c3:89:b7:6b:ac:d9:d9:d1:e2:
6c:a0:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:18 2025 by rpki-client