
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
File: b737c496-4672-34aa-b061-ed83ae9c485f.roa (raw, json)
Hash identifier: nwkG0ouSLKTlTnSWbyNyAGJUoyGtCn0U032q/eMDF90=
Subject key identifier: 4E:44:B7:27:69:F2:1D:EF:9C:E8:15:87:7D:A9:A9:A5:CF:2D:2E:F1
Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial: 010D0C9F4328584AF0F13147C4AA95410EB9BE40
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
Signing time: Fri 22 Aug 2025 13:00:41 +0000
ROA not before: Fri 22 Aug 2025 13:00:41 +0000
ROA not after: Thu 20 Nov 2025 14:00:41 +0000
asID: 16509
IP address blocks: 155.63.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f0:f1:31:47:c4:aa:95:41:0e:b9:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Validity
Not Before: Aug 22 13:00:41 2025 GMT
Not After : Nov 20 14:00:41 2025 GMT
Subject: CN=df7a1b3d-fcd7-49df-ab0d-4a25bb9499f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:c6:91:53:44:90:b7:db:80:a2:8d:51:16:
ba:c8:56:d3:b9:df:53:30:cc:42:0f:6b:86:9f:c1:
5b:e3:33:f8:0e:30:7c:bb:74:ef:3a:ab:ac:d0:34:
c2:75:23:1c:b3:ab:e5:5c:e5:e1:25:a2:e0:3e:93:
6d:e8:30:18:6c:3a:fb:17:d5:92:86:a3:eb:94:5f:
6a:47:2d:bd:82:e8:5c:f0:d8:5e:b9:4e:9e:bc:93:
76:0d:bd:81:e0:b9:5a:93:b8:e3:4c:d1:eb:ee:ec:
32:30:3f:da:d7:c8:b2:ff:15:3b:1f:b1:5a:bd:eb:
dd:97:e0:d6:4e:ed:de:0b:3b:7f:2a:e5:96:b2:23:
0a:3a:c9:f3:5d:b7:5c:93:59:d8:b6:66:71:e6:0b:
ac:f9:10:ad:10:2d:15:0f:9c:cd:75:1d:3d:92:ba:
85:46:fe:2f:06:5b:be:15:0a:f7:67:f6:00:94:66:
95:3c:dc:53:43:42:6e:c1:82:7c:69:a4:6d:8a:ce:
da:5f:81:87:d7:8e:36:c6:ca:8f:f0:b4:6f:94:f9:
4c:fb:e0:00:71:97:33:eb:d1:35:b2:c8:d3:3c:c9:
4e:ba:55:22:8f:5e:51:18:03:79:4d:d7:83:79:63:
87:1b:10:80:7b:96:59:f5:68:23:ff:24:c9:79:98:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:B7:27:69:F2:1D:EF:9C:E8:15:87:7D:A9:A9:A5:CF:2D:2E:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
X509v3 Authority Key Identifier:
keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
sbgp-ipAddrBlock: critical
IPv4:
155.63.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:46:55:11:f2:70:87:66:43:f4:92:6c:3a:92:78:09:be:c0:
7a:b2:d9:5d:34:4e:58:f4:45:41:f6:ce:c1:84:6b:a7:26:ce:
87:de:12:12:d6:9a:26:8e:04:ff:16:1b:6b:0c:a8:6f:06:f5:
7c:2b:40:1b:8e:cb:8a:ee:01:f9:72:63:e6:51:22:f2:2f:43:
45:d1:a8:4a:23:6a:06:1b:7b:28:64:25:cd:66:98:a9:1c:b9:
a9:ab:f3:e3:06:1c:33:e6:bf:67:b1:19:76:7a:3f:d3:4a:96:
52:ce:f2:d3:cc:97:7c:8e:06:1e:57:45:dc:e1:a2:68:02:26:
f4:74:09:45:2a:4e:48:00:e2:1c:a2:37:ce:d4:57:99:37:55:
8e:e8:d1:7e:f2:6d:3b:a4:ce:de:af:b8:4c:ce:7f:0f:52:39:
2e:c2:c3:4e:30:8e:3f:b2:a2:3f:11:84:f9:99:4a:5e:cc:5f:
ba:b4:34:ca:fd:31:08:64:59:79:e0:79:7b:0b:5e:70:3e:9d:
bb:8b:f0:bc:0f:a2:a1:a7:23:70:c7:7a:5c:ae:4a:d0:a4:0b:
3e:a4:60:4e:62:ef:52:cd:38:9c:05:39:91:c0:f5:d3:e7:e2:
2e:f1:ac:26:64:88:3d:56:51:8b:57:9d:78:57:dc:f8:ee:17:
e3:ef:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:26 2025 by rpki-client