
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a/b38df494-97eb-33b2-928f-4ac663608bc2.roa
File: b38df494-97eb-33b2-928f-4ac663608bc2.roa (raw, json)
Hash identifier: hkGpD0PEwCx+UGii69dG3ubuL4WzxwDA0jnJkm9QF6Y=
Subject key identifier: 72:C6:4B:1E:FB:EB:B6:CC:AE:65:6A:97:32:AF:A9:E6:8E:C8:CE:F4
Certificate issuer: /CN=534558a0-db6d-47a7-a382-82bb26c3656a
Certificate serial: 010D0C9F4328584BB88D1EB11249D37D42E76080
Authority key identifier: 76:77:28:47:16:4A:D7:4D:B5:2B:B0:A4:CF:98:83:97:35:13:5E:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a/b38df494-97eb-33b2-928f-4ac663608bc2.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 16509
IP address blocks: 162.212.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a/534558a0-db6d-47a7-a382-82bb26c3656a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a/534558a0-db6d-47a7-a382-82bb26c3656a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:1e:b1:12:49:d3:7d:42:e7:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534558a0-db6d-47a7-a382-82bb26c3656a
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=1943a62c-98a0-4bac-b6c3-22e7db379c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:db:52:0d:7b:c0:9d:fe:3d:8e:4c:b2:9d:
6a:50:0e:3d:9e:c2:a1:56:47:b2:83:74:3c:fc:76:
42:bc:94:e1:e3:a2:1b:0b:01:80:76:a1:58:d0:25:
35:11:98:e7:d6:82:e8:dc:1f:fc:41:b5:5d:22:5b:
c9:6c:db:d1:17:8b:a4:ce:06:75:d3:c6:76:08:14:
8f:fc:ea:f7:ec:75:d5:90:a6:0a:00:18:10:f0:ed:
23:72:50:ff:56:12:0b:22:d9:29:29:72:b9:86:1a:
25:5a:05:f8:87:e6:11:c3:92:84:0e:0b:61:ad:ff:
76:ff:e4:11:ea:e8:68:dc:74:f1:47:9c:b7:43:7e:
18:aa:0e:d6:21:0f:04:13:48:3f:0a:d6:5d:4e:90:
2d:3c:a5:70:be:98:9a:cf:a4:4e:76:b6:c9:15:de:
a3:71:46:b7:93:cc:22:42:18:f0:e4:b4:f6:f9:63:
27:26:08:a1:b5:5b:09:41:92:4e:34:27:c3:62:98:
37:e7:c9:39:f8:59:d2:85:5b:e1:71:2b:5e:0e:e3:
46:62:6f:c0:06:f6:9a:4e:5b:1d:0c:ca:eb:9c:6c:
6d:e5:b2:e0:80:50:00:9f:0d:51:e5:a4:60:bf:cc:
5a:05:d2:c5:aa:4b:46:0a:9f:1a:08:4a:02:e0:e7:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:4B:1E:FB:EB:B6:CC:AE:65:6A:97:32:AF:A9:E6:8E:C8:CE:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a/b38df494-97eb-33b2-928f-4ac663608bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a/534558a0-db6d-47a7-a382-82bb26c3656a.crl
X509v3 Authority Key Identifier:
keyid:76:77:28:47:16:4A:D7:4D:B5:2B:B0:A4:CF:98:83:97:35:13:5E:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/534558a0-db6d-47a7-a382-82bb26c3656a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:e1:7a:a4:93:d4:e4:93:3f:36:54:ae:02:51:40:70:0c:3d:
00:d0:0b:6b:57:43:0d:91:df:d5:87:d8:0a:9b:e0:d8:ab:fb:
7a:3e:23:42:89:9d:6d:84:7f:33:5a:ba:a2:01:22:fa:5e:b5:
c2:6a:4f:10:5b:7c:69:60:e1:fd:9f:2a:90:f5:ec:f0:69:71:
d4:4e:f7:7b:c5:d6:f8:a6:5a:7b:b4:1f:de:e0:eb:22:62:05:
ed:b0:60:10:4e:0f:52:9a:fd:8b:ba:84:24:d6:ae:a5:e7:74:
81:29:f3:9e:8d:d1:4a:29:3b:eb:ec:92:5d:1c:28:7c:bd:e9:
98:c4:a7:09:78:c7:01:38:74:37:48:9a:97:be:e4:d1:ad:89:
dd:95:39:ed:ef:1a:f2:68:b3:0b:cd:5e:6e:80:b2:0a:5c:0c:
f1:63:69:65:35:fb:1b:12:1e:70:98:5d:97:6d:99:de:04:eb:
8e:a2:8f:23:61:c3:01:bf:91:eb:cf:fe:a8:47:ad:b1:26:f6:
17:47:27:80:81:51:f0:b4:7c:e1:29:6f:66:78:c5:5e:06:42:
34:58:96:6e:65:69:93:a5:8e:17:59:33:de:cf:e8:2d:27:3f:
65:38:9b:71:97:3d:5f:ef:16:d7:71:fa:cd:4e:e0:d8:b8:8b:
15:54:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:48 2025 by rpki-client