
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
File: 25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json)
Hash identifier: aPat8URcfd+EqAbC0XRCmZMGvyTdwDkQbTginw9aKdM=
Subject key identifier: 06:F8:93:A4:AC:B5:C0:D7:EF:72:9F:A8:19:5A:AA:B4:26:6D:DB:B3
Certificate issuer: /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Certificate serial: 010D0C9F4328584BAFFFAF81762CE752D4DBDA40
Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
Signing time: Wed 20 Aug 2025 01:00:33 +0000
ROA not before: Wed 20 Aug 2025 01:00:33 +0000
ROA not after: Tue 18 Nov 2025 02:00:33 +0000
asID: 32083
IP address blocks: 66.158.192.0/18 maxlen: 24
173.46.160.0/19 maxlen: 24
208.111.0.0/24 maxlen: 24
208.111.1.0/24 maxlen: 24
208.111.2.0/24 maxlen: 24
208.111.4.0/24 maxlen: 24
208.111.6.0/24 maxlen: 24
208.111.7.0/24 maxlen: 24
208.111.8.0/23 maxlen: 24
208.111.10.0/23 maxlen: 24
208.111.12.0/23 maxlen: 24
208.111.14.0/24 maxlen: 24
208.111.16.0/24 maxlen: 24
208.111.17.0/24 maxlen: 24
208.111.18.0/24 maxlen: 24
208.111.19.0/24 maxlen: 24
208.111.22.0/23 maxlen: 24
208.111.28.0/23 maxlen: 24
208.111.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:af:ff:af:81:76:2c:e7:52:d4:db:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Validity
Not Before: Aug 20 01:00:33 2025 GMT
Not After : Nov 18 02:00:33 2025 GMT
Subject: CN=3a581238-7396-4465-8a19-515ecca070b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:be:41:d1:aa:cb:48:f5:37:81:0e:b9:c8:
45:74:ce:b8:44:c4:6e:9d:e0:0f:5e:d9:2c:7c:fd:
42:97:47:2a:d5:56:3d:99:97:61:11:2f:18:e9:0b:
98:e6:11:d1:15:91:9e:ff:5f:57:6b:0b:4b:4f:e6:
69:3b:67:76:9f:c1:d9:e0:29:9c:c5:18:97:f4:0a:
9f:48:f5:4a:7c:f3:e5:a7:7c:a9:9d:e7:8d:a4:bb:
2b:8f:0e:17:a6:ac:61:e3:4d:42:82:b7:1c:e5:7f:
1a:e0:59:84:53:a4:99:09:ee:e9:5b:71:a8:81:85:
bb:98:02:7e:63:1c:20:5c:f8:9a:ce:44:39:41:22:
5f:f5:1e:03:65:06:71:30:1c:14:10:80:d4:fb:26:
5d:e0:f4:93:d8:55:6b:6c:fd:96:89:03:e3:08:2a:
49:9d:4a:2d:f3:a9:b0:b8:4b:b7:5f:a1:20:87:5b:
fd:86:38:d3:50:91:5d:29:50:1b:1d:19:e2:6c:53:
0c:ee:f1:bf:b2:44:f0:95:e1:8f:f0:c3:33:49:ea:
7f:7d:15:30:10:42:a0:c3:9d:15:0e:db:11:96:b2:
eb:1f:23:09:57:72:48:50:46:b1:75:3c:1a:6b:8f:
de:74:7e:0d:38:cb:99:c3:1d:d4:af:6e:5c:c4:40:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:93:A4:AC:B5:C0:D7:EF:72:9F:A8:19:5A:AA:B4:26:6D:DB:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
X509v3 Authority Key Identifier:
keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.192.0/18
173.46.160.0/19
208.111.0.0-208.111.2.255
208.111.4.0/24
208.111.6.0-208.111.14.255
208.111.16.0/22
208.111.22.0/23
208.111.28.0/23
208.111.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:50:61:c3:04:36:a0:3a:8f:4e:45:16:bd:51:3f:91:b5:0d:
74:b5:51:df:fe:82:f0:c1:9f:12:5b:07:9c:c6:d9:86:a7:e1:
1b:bd:37:07:ab:69:40:71:d3:db:03:fb:4d:55:c4:6a:98:00:
ed:77:18:f3:9e:15:05:f5:7b:9b:90:87:6a:68:ca:44:9e:5e:
9b:00:2d:51:ac:9f:86:f7:b0:9d:fa:c0:71:08:8c:ff:a5:8d:
1b:8d:16:2a:dc:aa:05:e2:5d:83:aa:5e:b7:b6:29:c9:db:ea:
e8:aa:07:e6:50:6e:4c:16:ea:ec:e7:2f:af:c8:d0:54:e6:9e:
99:6f:61:08:6e:92:c3:dd:ce:42:b7:c6:ef:c9:0c:53:d0:69:
e3:a1:95:f0:8b:5d:59:78:b0:05:c7:2d:7f:3c:25:c7:99:8d:
a7:ac:1c:0c:bb:eb:79:bd:1b:0b:70:32:14:4c:92:aa:34:f4:
7f:d4:0a:6f:a1:59:4d:d3:9b:01:69:aa:c8:d1:c6:dd:76:6f:
5a:63:87:94:25:95:a7:da:75:64:ce:b2:4d:f4:ab:e4:3d:76:
06:25:4d:03:f4:87:74:5e:af:48:50:d9:55:f5:a6:2d:b0:48:
48:7e:48:29:50:de:cf:a6:ec:8b:65:7d:6e:41:74:fe:e1:fc:
94:81:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:42 2025 by rpki-client