
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa
File: 21ef2631-7095-3964-83b6-6ac40b6fb023.roa (raw, json)
Hash identifier: vbdn+yWkwBoPRFewi6JccSufAet9AQjm2HiIHUBKkHU=
Subject key identifier: A1:3B:6B:A3:E2:9C:C2:7D:1C:7B:5D:46:B0:C5:DD:23:07:72:3F:BE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584B3C51A9C1CC56DE83630D9300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa
Signing time: Thu 18 Sep 2025 13:00:41 +0000
ROA not before: Thu 18 Sep 2025 13:00:41 +0000
ROA not after: Wed 17 Dec 2025 14:00:41 +0000
asID: 20940
IP address blocks: 23.43.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3c:51:a9:c1:cc:56:de:83:63:0d:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 18 13:00:41 2025 GMT
Not After : Dec 17 14:00:41 2025 GMT
Subject: CN=bd196a70-3d80-4987-9205-bd99c8e52e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:28:e0:1f:e1:2f:c5:21:c1:12:73:44:11:
5a:2c:8d:82:a6:75:fd:cb:a1:fe:86:65:0b:a1:86:
07:34:72:05:5a:39:b5:be:b9:e2:d6:03:1a:fb:76:
a6:8d:6c:6a:10:1a:af:c8:ca:ed:c8:41:dc:40:ca:
0e:98:e7:80:4e:a4:c1:ae:98:cc:bb:a9:c2:86:80:
73:ca:bb:6a:5b:cb:4c:25:8c:3d:31:84:16:8e:2f:
df:9d:cf:77:f7:8a:01:9d:27:35:cd:78:35:3a:ab:
c0:e4:e7:46:96:de:0e:bb:72:3a:ea:6d:6d:aa:4e:
f3:30:d6:80:e2:b2:31:1d:10:9f:fb:36:61:be:c6:
34:04:e4:d0:91:ff:46:5a:41:f9:01:90:10:f8:08:
bc:73:5e:ab:1a:1f:f8:27:38:10:01:9e:78:f7:7b:
7f:dc:8b:08:86:77:54:37:fc:e8:02:84:f0:13:40:
30:f3:1b:38:5b:6b:eb:a1:d3:9f:ff:e0:25:ca:f6:
5e:93:68:9d:0f:bd:2b:71:be:04:47:bc:c0:a2:c6:
69:45:1e:f8:ca:b6:b0:06:9b:da:8a:c9:1c:e0:e0:
09:54:9e:39:74:3f:74:56:76:12:46:af:12:87:2c:
6c:6e:af:ba:c8:6a:f9:30:6c:04:6b:92:09:c8:59:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:6B:A3:E2:9C:C2:7D:1C:7B:5D:46:B0:C5:DD:23:07:72:3F:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:35:62:af:bf:0f:9f:71:90:29:13:ff:b0:8c:6b:5e:72:79:
8f:fb:b0:2b:ff:1e:78:3c:e1:ee:58:0d:d3:86:54:bd:5b:58:
7a:af:1d:0e:9d:bd:02:fc:4d:26:ec:ad:7c:85:ad:42:14:a6:
a5:10:bf:c0:f4:4c:eb:d5:5b:db:d2:78:92:b2:c5:53:06:6c:
40:8b:8a:bc:92:d1:8b:17:26:e9:1f:d5:5a:41:15:96:32:48:
c9:b4:e3:eb:b0:b6:d2:2a:02:58:d7:65:e6:70:e5:9e:94:fa:
33:59:51:bc:11:e1:04:31:f4:97:05:c0:45:86:28:3a:ad:6d:
b2:80:64:59:66:d4:36:13:ab:75:07:fd:ec:79:e4:7e:7a:e3:
fb:e2:a3:36:02:2d:43:7c:2d:96:6b:50:5b:05:7e:00:a0:24:
c5:32:16:2a:d2:8e:5e:64:18:45:64:7b:3b:5f:de:19:07:fe:
47:d4:fb:54:f6:df:84:12:87:f4:ae:8b:b3:1c:1f:80:57:99:
22:65:00:23:92:7a:df:39:85:ad:ff:97:31:88:4e:8a:46:7f:
e8:d9:02:e0:62:8f:60:a1:fd:0c:d1:a5:8f:ca:d9:35:23:9f:
6e:1f:cc:84:e1:b7:e2:23:21:47:bd:e2:25:60:1f:ea:32:52:
3e:c7:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:33:04 2025 by rpki-client