
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
File: ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa (raw, json)
Hash identifier: 2R1DEOuQXtSI3bZECwAW5QDxU9txpAhKzW4MY0TbNSs=
Subject key identifier: 25:62:A3:B5:52:B6:FB:03:AC:A7:47:9F:0A:D3:78:86:6A:14:81:DE
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584B95A79687CCC1086D50EE4E00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 30103
IP address blocks: 209.9.211.0/24 maxlen: 24
209.9.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:96:87:cc:c1:08:6d:50:ee:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=87e5ae6e-2144-4b0f-ba08-09c9d25dbf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:14:a2:03:5d:c4:03:2a:9b:fd:e3:41:06:
b6:60:32:6e:f3:05:ba:96:66:5b:d5:6b:72:00:cb:
57:12:aa:4b:73:82:7b:a4:eb:f3:0b:ef:14:24:5e:
8c:2a:01:65:ca:f4:ae:91:eb:f4:64:06:50:f1:dd:
c3:6d:4c:2b:73:7a:4c:50:31:a7:75:a6:46:ff:2b:
3b:7c:b1:15:25:e8:37:6e:a2:29:29:a7:47:27:2a:
a7:23:5a:5a:f7:e0:9a:86:9b:ac:93:05:4d:29:c5:
ad:a1:01:2a:a0:94:16:1b:0b:2d:c0:ee:32:62:34:
59:f5:80:c8:f8:67:99:2a:78:aa:2d:ca:83:0c:04:
d8:7e:00:76:4f:2d:ee:c7:35:7b:20:21:70:e0:bc:
c2:52:49:db:64:14:a1:bd:64:2c:50:2e:34:94:b4:
a8:03:a5:e5:58:7d:d2:37:7b:d6:f5:dd:c3:4d:19:
30:cf:54:4e:91:6d:72:0f:02:d8:70:e5:56:3b:c7:
dc:f5:62:61:0c:f2:27:fd:57:8f:10:4c:35:8c:cd:
4b:37:78:48:1d:8e:87:c7:c5:42:80:d4:1d:ad:40:
0b:74:12:a0:d1:85:4f:e7:5b:d7:e0:c2:77:7a:eb:
c7:ee:9f:15:fc:8e:b4:57:13:e3:4e:38:67:73:33:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:A3:B5:52:B6:FB:03:AC:A7:47:9F:0A:D3:78:86:6A:14:81:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.211.0/24
209.9.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:a0:d4:fa:7a:6d:df:ad:c2:29:a0:51:06:ed:3f:83:68:3c:
2d:eb:fb:0c:80:f5:24:8b:1a:3d:7c:e4:2b:f7:fd:0b:30:4e:
c3:28:e8:67:0f:a1:26:3b:fd:b6:2e:59:9d:87:22:ba:ea:c7:
d8:85:b2:d0:76:54:ca:51:0f:7b:6c:87:34:df:ab:a2:f1:c9:
fb:71:fd:4a:0d:ca:4d:ae:bb:e0:bc:ec:37:07:01:2e:f7:ee:
88:7f:04:e7:ee:dd:a8:0b:11:a7:b6:32:e3:27:90:52:bf:db:
7e:a8:69:1c:ef:65:21:1a:4c:a4:46:5d:c3:8b:64:6a:78:1d:
61:73:ce:76:b6:73:e1:c3:92:71:64:6e:fc:57:45:22:eb:ea:
84:27:df:1c:58:a2:38:45:9b:cd:e5:bc:a6:96:7d:d6:9c:f0:
d0:b9:a7:2e:d8:f6:44:84:00:98:c1:ba:fe:db:98:90:df:19:
62:72:e0:d3:31:50:83:e1:79:0f:5d:d5:cd:65:4a:ef:ec:cc:
97:a2:9c:6a:f6:dc:af:b5:2c:1e:68:30:9d:b7:c7:27:de:60:
57:e0:4c:8f:a8:bd:93:ef:35:34:33:43:74:54:be:9c:6d:7c:
67:91:27:0a:a8:92:ea:16:a9:db:97:6d:52:8e:e3:d2:8a:2a:
64:3d:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:11 2025 by rpki-client