
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa
File: 2366321d-3327-3eb1-aa83-61a80aefd3f4.roa (raw, json)
Hash identifier: X+aYfhgyr6SPwpsqbb0B/ffsXnuuFHWpa0J6zkRTU9A=
Subject key identifier: D5:04:8E:74:6E:0B:B0:8F:E7:19:2E:84:1E:6E:4E:C6:69:B7:A0:D0
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F4328584B7F52141D72F96B02E941B780
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa
Signing time: Sun 12 Oct 2025 13:00:37 +0000
ROA not before: Sun 12 Oct 2025 13:00:37 +0000
ROA not after: Sat 10 Jan 2026 14:00:37 +0000
asID: 16509
IP address blocks: 216.150.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7f:52:14:1d:72:f9:6b:02:e9:41:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Oct 12 13:00:37 2025 GMT
Not After : Jan 10 14:00:37 2026 GMT
Subject: CN=abce4ea6-3692-42c3-a625-46452246c076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:0d:5d:f9:2c:80:31:83:4e:cc:fe:dd:e3:
5f:e4:d3:01:43:c4:f7:09:e6:b3:cd:10:56:19:af:
ce:70:5e:84:5b:e3:db:0c:57:09:71:8f:9c:83:ec:
aa:45:0f:2b:7e:62:d5:1c:0b:94:63:e0:4a:77:46:
61:86:ae:c4:83:38:fb:d6:62:08:84:55:5f:d9:71:
a7:21:a5:1f:86:87:40:7d:a0:c6:82:47:a1:e2:93:
0c:c5:46:72:16:49:93:f3:e6:eb:da:ab:fa:63:d2:
6c:9a:3c:9c:49:d6:0c:7c:41:5d:37:cd:95:86:0f:
db:a4:19:99:9d:2f:7c:8f:b7:e5:12:a5:b9:09:9e:
71:ad:cd:39:78:9e:b2:36:c1:fc:b2:27:84:50:cc:
f7:ec:63:95:1d:16:0e:5d:44:d1:bf:fe:ed:04:cd:
3a:ce:02:51:92:96:29:3d:bf:14:0c:d2:7d:0e:07:
09:8d:94:5b:5c:b5:40:31:3d:a7:6e:ec:51:ce:7d:
7f:28:46:b7:f3:27:ae:71:67:ee:08:5f:1d:59:80:
db:21:b2:da:a3:93:5a:94:17:da:9f:ed:a8:5d:7e:
27:1a:e1:6c:28:f1:4f:74:b0:c4:d1:c4:f8:04:d3:
80:23:11:b0:3f:47:53:b9:74:bb:07:72:40:04:52:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:8E:74:6E:0B:B0:8F:E7:19:2E:84:1E:6E:4E:C6:69:B7:A0:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:25:a8:c6:20:25:59:cf:f8:dd:42:0a:da:58:d0:f4:4c:ec:
79:42:a7:7c:8f:25:c8:80:3f:7c:90:b2:95:e2:95:eb:1e:eb:
a0:6c:dd:2a:25:68:50:ea:59:72:cc:1c:92:83:4f:e6:28:74:
ef:27:89:01:04:a7:0a:52:e1:8f:41:d8:fd:a0:21:8d:ae:75:
8a:b0:29:df:7d:a6:50:41:72:e5:c8:f4:af:69:b3:07:f3:90:
73:2b:62:c4:0d:27:15:64:80:b8:dd:90:45:94:2f:56:08:18:
ff:78:2d:89:cc:09:66:30:92:9f:9e:6e:e3:9f:e9:01:fb:c7:
36:df:b5:9f:8c:99:79:c2:fd:fe:5f:c0:f7:a4:7a:d7:c0:74:
ac:9c:32:c3:26:48:f5:19:01:de:9d:b4:d6:fc:3d:97:9f:70:
8a:90:af:34:91:67:59:28:a4:d6:e9:c0:d7:4c:99:33:6e:88:
50:62:32:78:52:79:99:76:f8:f4:74:4e:2e:e1:24:f1:0b:bd:
60:bd:a1:4b:0b:94:29:ae:bc:48:cd:e2:fc:9d:06:9e:2b:9c:
82:b3:e6:ac:9e:c3:16:da:77:42:f1:dc:ce:0e:39:f3:4b:93:
30:d2:8a:88:b5:50:a2:e6:38:a9:af:a7:e4:31:19:8c:68:08:
b6:d6:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:56 2025 by rpki-client