
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa
File: 544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa (raw, json)
Hash identifier: QRvBuDJKJpqJ+Rl+6W5sgbotrKoFp5rm2OZWMXC031g=
Subject key identifier: 07:66:0A:EB:66:59:BE:23:D5:83:C8:B3:99:96:FE:C2:21:75:DB:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BA39D2F97C9BCADF272A3D100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 20940
IP address blocks: 96.17.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:2f:97:c9:bc:ad:f2:72:a3:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=f44db2b8-bce8-47b9-835a-6822e9d8c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:73:6f:1a:8b:4f:cb:91:47:f8:20:ca:63:
77:e4:a9:7c:5a:4b:33:5f:d1:a0:28:45:15:2b:ae:
d0:bc:e6:a7:88:5e:51:f1:01:d6:be:11:ff:50:40:
a4:d5:43:9e:b4:ce:0a:c5:ed:be:67:4f:a6:da:19:
89:2f:56:68:8d:52:12:10:73:31:a1:14:df:33:f5:
35:f9:94:df:02:e6:7c:fa:e4:b5:62:4e:90:bf:98:
91:3a:13:b9:9d:36:7b:92:f4:c2:2c:0b:88:40:63:
91:ec:8b:a4:c2:82:fb:b9:7c:94:08:21:1f:42:38:
8e:7a:5a:ba:90:e3:c9:7b:54:9f:30:6a:1d:8b:d8:
99:2d:cc:ee:9d:a1:05:fe:68:1f:e5:31:74:0d:c1:
09:2f:a7:d5:53:0c:b1:5d:f7:9d:f8:c9:c1:a6:91:
3f:54:8f:3f:89:57:9b:27:75:2c:41:6f:95:21:b0:
95:c7:c5:71:07:47:dc:74:f5:ed:4d:7e:8c:34:a4:
59:25:d3:ba:f0:f6:2b:db:fb:71:c6:35:36:f8:bd:
41:36:3e:f6:26:7d:d5:59:27:d2:c0:42:a2:3e:26:
84:6d:2e:c8:ac:5f:4a:6d:06:56:57:e4:f7:17:a5:
85:4d:65:82:c5:24:a2:09:1c:b4:07:fd:c3:5e:78:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:66:0A:EB:66:59:BE:23:D5:83:C8:B3:99:96:FE:C2:21:75:DB:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:5e:ff:4d:9c:4a:fe:8e:d2:80:2b:00:85:61:21:e7:8c:19:
4e:0b:82:cf:fd:d6:cc:97:c0:1c:01:63:9d:33:18:5f:47:31:
1c:84:bb:46:30:57:a9:31:09:f6:f5:20:1c:62:0a:53:6b:e5:
8f:7a:d9:c1:53:c9:3f:65:26:36:5a:52:1e:f3:94:9e:dd:49:
a1:a5:4b:9b:df:25:02:1e:b0:38:aa:26:5d:27:9b:4c:f0:83:
de:61:21:ec:a4:7c:26:91:e7:69:8a:33:9c:e0:2d:35:53:8b:
23:fc:14:ca:35:bd:21:24:4c:b9:a3:6a:14:0e:54:32:19:e2:
26:0c:23:0f:0a:53:95:16:3e:ac:55:1d:01:80:cc:cf:25:cd:
bd:e4:d5:5f:42:c8:f2:a6:45:60:2a:5a:d5:59:1e:f6:2e:80:
94:2f:79:b8:05:19:a2:0d:c6:15:10:77:21:c7:5e:ac:2c:dd:
86:05:2b:69:5d:99:0e:a5:58:79:78:74:82:81:e2:d5:e5:fb:
33:00:c5:23:6c:e6:d7:d6:79:73:19:25:c9:18:69:c0:34:da:
ce:72:7b:bf:6f:95:82:55:17:ae:24:82:1b:7e:7b:0b:6f:6f:
73:eb:a7:a6:f9:41:d7:90:9a:4c:a0:f8:f7:04:c0:12:63:5f:
c7:68:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:15:13 2025 by rpki-client