
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa
File: c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa (raw, json)
Hash identifier: 4iCqRIWvNVLHVnwyVyplXFNjsNwFUoN5mcm47NAHQ+U=
Subject key identifier: E1:3A:C7:EA:A2:12:EF:2A:03:57:E4:34:DE:AB:74:97:56:DB:60:78
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584BC10AE26E6B816C3CAF3D2300
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 14618
IP address blocks: 146.197.80.0/24 maxlen: 24
156.37.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0a:e2:6e:6b:81:6c:3c:af:3d:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=3251200f-54d9-4718-9171-0dc85aeb0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:e6:14:ec:e7:fc:32:85:3f:15:53:4f:3c:
09:50:77:55:bc:ec:09:e0:d9:58:35:b3:60:04:20:
2e:3a:32:58:53:5b:8a:df:5a:e2:8f:42:37:d8:3b:
0d:b8:6e:97:30:3e:10:0a:35:5b:5b:94:fb:a1:5f:
51:3c:d5:08:18:e2:9f:ee:58:04:26:dd:66:89:23:
41:ab:a9:a7:f9:2a:ef:78:7f:99:86:1a:7a:ac:d3:
59:69:6c:9c:d0:d6:c3:cb:71:10:9b:8d:67:ce:ab:
7f:f5:14:48:59:8f:66:da:c3:ac:d9:62:6d:f3:04:
b3:dc:1e:7d:89:ce:4c:45:e7:d7:93:a9:3a:cf:a2:
b5:43:b1:3f:cb:0d:83:6b:e2:da:6d:80:6a:06:48:
16:32:51:a0:44:66:09:14:b2:88:57:1c:5e:50:48:
48:fd:5f:6c:f8:03:35:05:3e:0e:47:bf:5b:94:15:
70:b2:c5:a5:da:53:52:c6:05:df:98:54:da:fd:cd:
3c:8b:c9:fa:f9:71:1d:d3:d9:39:8e:60:94:bd:11:
71:07:e0:b4:78:f8:c2:00:f6:6f:68:2e:89:85:32:
c0:50:5c:c4:1b:a2:2d:03:f9:5b:39:8a:46:61:f5:
37:8b:31:41:92:ce:b1:b4:e2:65:56:56:2b:a3:63:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:C7:EA:A2:12:EF:2A:03:57:E4:34:DE:AB:74:97:56:DB:60:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c6f33b32-cceb-311c-b9a6-b22e0c3312b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.80.0/24
156.37.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:62:e4:63:97:5c:50:bd:05:a0:07:a9:d6:dc:8b:e4:1f:75:
b6:fb:4d:8d:0f:7b:00:5b:96:4e:4c:9d:99:3f:3f:29:78:85:
7f:23:d5:d8:89:75:9c:d4:3d:44:f7:eb:0d:16:b8:52:47:b7:
16:2a:5d:6b:fa:a2:f3:6b:b4:21:24:98:bc:08:0e:9b:b0:08:
a3:b7:82:be:d1:47:ed:be:84:87:c9:39:bb:54:df:f9:b2:80:
b8:b4:7b:f8:e3:29:ce:4f:ce:72:76:fe:59:0b:42:3d:71:29:
20:1b:ef:16:ac:3c:8d:f7:d6:b9:f0:e7:cd:7f:2f:55:82:4d:
48:c9:7e:c6:a0:07:be:5f:d0:c5:10:27:d1:8e:ee:a1:96:cc:
09:0d:7e:64:2c:60:c3:b3:b1:ff:af:58:1d:78:94:a8:29:3c:
58:d6:8b:d9:aa:91:50:c7:2a:fd:de:26:78:6f:32:03:db:04:
66:7f:15:3b:92:1f:ec:c9:cb:45:70:1e:40:5f:22:87:c1:2e:
e1:b8:80:c3:f6:e2:7b:fb:bf:10:fe:12:be:bf:21:25:e6:ea:
ec:ad:35:09:c8:c6:a7:3a:fa:b3:00:12:7b:31:e4:b6:67:fb:
19:80:94:8b:25:60:48:88:7c:eb:c3:1b:78:cf:ef:a6:3b:d4:
0f:01:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:51:54 2025 by rpki-client