
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41805192-5077-3d1f-ba46-33ad7b218aff.roa
File: 41805192-5077-3d1f-ba46-33ad7b218aff.roa (raw, json)
Hash identifier: Z2+VHcnxSYAZ9PxVtvsSN9nuMphrBaROy3bEHgDulnE=
Subject key identifier: 10:2E:F4:F9:41:6F:71:05:B6:7E:08:44:37:A7:F3:2F:20:10:8A:CA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BBE4057B744BF6D1001A158C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41805192-5077-3d1f-ba46-33ad7b218aff.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 16625
IP address blocks: 23.197.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:57:b7:44:bf:6d:10:01:a1:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=f4790964-3883-4bf5-ad2a-f9a3572d48d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:c6:11:41:b3:75:9c:18:62:52:de:f7:71:
8d:6c:32:19:29:9e:df:63:27:f6:05:92:32:9a:6d:
15:35:04:e3:9e:03:bd:5e:fd:23:54:4f:81:54:89:
de:c7:15:3b:28:87:14:59:a2:5e:4d:2d:f9:91:98:
66:90:63:4b:eb:1c:74:38:b1:65:9f:bc:47:4f:cf:
62:06:65:b6:ea:ac:92:b8:3e:bd:42:78:bf:42:1c:
bd:dd:f0:77:99:68:f5:46:a5:36:f3:39:06:93:58:
0c:c9:e8:80:2d:1d:63:c3:d1:2c:38:1e:f3:4f:77:
4e:e1:23:0d:91:e5:e3:76:b3:a6:98:eb:87:48:cd:
22:12:74:09:48:24:ce:e5:ea:f4:2a:f9:13:8f:b1:
ac:3a:1f:16:76:42:0c:fe:34:e3:a9:e3:ca:ce:30:
6a:19:55:3e:c1:21:ff:0c:f3:4e:d7:b4:07:87:4c:
bc:5a:0d:95:2e:84:c3:25:60:64:d5:39:25:0b:a0:
97:fa:85:1d:92:b3:0c:76:05:c4:28:29:51:9c:50:
22:c3:02:bb:94:ee:f3:ae:9c:36:a8:76:ff:da:98:
93:4b:ed:11:1d:51:a9:38:08:c2:9e:65:7f:97:f0:
34:ad:a9:39:02:b2:b3:09:37:e9:d1:c2:32:b6:80:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:F4:F9:41:6F:71:05:B6:7E:08:44:37:A7:F3:2F:20:10:8A:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41805192-5077-3d1f-ba46-33ad7b218aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:1e:48:75:86:d5:33:02:07:28:cc:86:bf:3f:c5:35:fb:95:
84:b3:d6:76:c5:a9:ee:ba:04:62:a9:25:44:80:fa:51:5a:56:
40:d7:21:6b:87:4f:44:99:1f:bd:40:f6:4b:36:7b:4b:58:18:
e7:47:0b:ec:0c:66:ba:91:2c:12:26:41:7d:83:bd:1c:97:f5:
26:c3:ef:2f:cb:61:b4:dd:ff:f5:85:0b:47:62:01:72:b8:32:
84:22:1d:fd:1b:f9:d6:d0:e4:f2:f0:d1:8f:b8:f1:54:8f:b4:
eb:19:0e:93:56:3e:ed:0a:2c:13:0d:35:bc:06:ae:69:a7:de:
0e:88:56:9a:2c:11:86:71:4c:0a:9d:71:89:92:83:cf:e0:26:
e9:11:e2:a6:9e:06:14:b9:b4:2a:f5:aa:3d:26:e2:6c:e8:02:
bf:55:03:4d:4f:bb:e1:40:23:53:36:39:00:32:4f:f2:2f:41:
01:00:89:e1:57:60:df:c4:a5:20:83:64:73:de:ea:f6:01:d0:
ac:b4:a3:d0:bf:2d:19:34:51:31:9b:70:16:f6:0a:b6:a8:54:
49:ee:92:36:bc:d1:6b:3c:56:b5:a0:95:a2:93:90:88:8e:25:
c6:21:67:0e:ad:b0:b8:a6:fc:ce:d7:66:00:bf:13:71:a4:74:
07:a3:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:03 2025 by rpki-client