
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
File: 835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa (raw, json)
Hash identifier: WFCRbF83zl1abTvBQSs2UuDDB1u84dynHmCMNR6xUJA=
Subject key identifier: E1:2D:58:0A:0C:82:A5:E8:4E:2F:23:50:ED:80:A5:05:89:FA:2C:33
Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial: 010D0C9F4328584BC270515824CD6F3E48969DDF
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 11127
IP address blocks: 64.49.131.0/24 maxlen: 25
207.241.163.0/24 maxlen: 25
207.241.164.0/24 maxlen: 25
207.241.165.0/24 maxlen: 25
207.241.169.0/24 maxlen: 25
207.241.171.0/24 maxlen: 25
207.241.172.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:51:58:24:cd:6f:3e:48:96:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=5fd8453e-7cae-45c8-a7c1-1ff4b36fdc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:db:f9:30:f6:15:31:02:17:55:71:56:2e:
28:82:76:1b:7d:70:1e:67:d9:7a:48:26:cf:59:db:
34:c6:5f:00:73:84:bd:a3:c0:17:ea:bf:4f:57:22:
f1:7d:e8:a2:8b:0d:e7:b3:07:b5:6f:53:e1:a4:97:
6a:2d:cd:31:a2:19:a2:43:c8:28:b3:7e:35:e8:4f:
01:dc:1a:31:2d:92:6c:87:d9:ad:59:1a:95:dd:ec:
76:e9:06:f1:d7:e2:95:3e:28:cf:63:d3:4c:08:3c:
36:13:32:bb:57:ed:8c:22:97:5c:0a:05:85:68:89:
74:14:a4:aa:85:82:23:b9:0c:ef:57:87:a1:4b:f0:
5c:10:d4:e9:70:0e:3c:50:fd:d5:6d:7f:5d:25:d3:
d4:8c:5c:06:0a:ff:c3:19:6d:09:df:38:97:f3:95:
b4:5b:fa:4a:77:8c:a3:85:01:d3:bf:36:dc:c2:82:
da:6c:47:48:06:4c:7c:f3:a2:ed:2f:54:da:04:2d:
52:f7:44:16:94:2b:21:e0:bf:f5:9a:38:b4:3b:a2:
bb:5e:8c:fd:e4:1a:d4:e6:4d:ee:4e:5d:9f:4e:41:
72:74:0a:f7:48:6f:83:c9:ff:01:de:95:ba:6b:3d:
d8:d1:f7:64:4f:d7:f4:86:30:ba:c8:f6:6c:59:c1:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:58:0A:0C:82:A5:E8:4E:2F:23:50:ED:80:A5:05:89:FA:2C:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
X509v3 Authority Key Identifier:
keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.131.0/24
207.241.163.0-207.241.165.255
207.241.169.0/24
207.241.171.0-207.241.172.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:98:f9:b1:fe:2d:30:10:ee:98:19:c5:17:1c:3f:db:bc:a9:
3f:22:ff:f7:e7:85:75:26:45:ec:37:70:3b:6c:1a:97:1b:d0:
bb:b5:40:25:83:52:b3:05:7e:ba:0c:72:65:42:fc:b8:2d:6a:
00:f1:3e:ad:e0:b4:ad:fd:ed:38:c7:a6:ba:15:e8:de:b7:e9:
d6:94:70:da:d5:d7:c8:59:8f:20:88:a9:a2:ec:8d:98:07:ca:
10:f9:bd:67:ef:8b:b6:6d:26:5f:40:9c:11:3d:fc:75:fe:77:
8a:52:66:ef:e7:08:06:0f:9a:e4:c5:9a:87:38:66:8b:f0:43:
3b:ac:c2:5f:db:9a:1f:d1:2f:99:f2:e7:8e:00:93:be:9f:93:
39:0f:97:71:0a:44:bb:f9:70:5e:82:cb:54:5a:fa:3d:cc:f6:
6f:c6:b7:f5:69:68:70:9c:f9:b3:b7:2b:a2:0a:63:73:cb:f3:
97:29:0b:b9:3c:80:6f:48:2e:75:23:a8:ae:16:c3:28:1a:4e:
79:34:a5:fe:59:8c:d9:d2:83:c7:e9:67:2f:19:12:50:d8:76:
3a:09:80:75:33:b4:3c:d0:49:ad:c9:db:08:57:79:95:c7:b7:
fb:89:f8:11:09:07:56:98:53:4a:9f:f1:51:e0:b6:29:1c:cb:
b1:09:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:51 2025 by rpki-client