
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f294b684-a171-3d29-a607-3d1262423ad6.roa
File: f294b684-a171-3d29-a607-3d1262423ad6.roa (raw, json)
Hash identifier: HZZ+sZ6zmSDsE/Y1CDe8Jh1dfYJOEKXLkYG3eJDlqvM=
Subject key identifier: 5A:E2:5B:25:30:B2:73:ED:FB:4D:46:F9:9D:38:9C:65:4D:4E:5E:FD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584B4BAC5546CEF790874E506B50
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f294b684-a171-3d29-a607-3d1262423ad6.roa
Signing time: Wed 24 Sep 2025 01:00:31 +0000
ROA not before: Wed 24 Sep 2025 01:00:31 +0000
ROA not after: Tue 23 Dec 2025 02:00:31 +0000
asID: 20940
IP address blocks: 23.45.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4b:ac:55:46:ce:f7:90:87:4e:50:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 24 01:00:31 2025 GMT
Not After : Dec 23 02:00:31 2025 GMT
Subject: CN=1ecc64ee-449c-4052-a891-bb73f6de2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:f6:59:9c:83:7d:f4:2a:5c:95:1e:96:03:
9f:0a:6d:62:79:fd:29:e0:29:e0:8c:76:1b:89:a8:
87:13:ce:ca:92:fc:d1:23:dd:35:64:a1:19:12:89:
9e:4e:68:c1:ec:99:2e:b4:3d:f2:05:38:4e:ef:cc:
30:f3:c6:58:53:c5:0d:d1:d9:a4:2b:53:34:d1:40:
a4:bb:18:74:09:7d:b3:2d:28:5f:ee:71:b3:04:08:
73:da:c5:ae:a8:a6:23:00:bc:f6:f7:7d:0b:ef:a8:
26:4f:56:a2:94:98:dc:2a:28:59:53:36:63:76:32:
c3:ca:e9:1c:5c:a6:74:c9:db:d5:96:1e:d4:db:42:
95:8c:08:f3:e2:46:b2:0d:7a:b4:33:08:83:8c:91:
56:c9:9a:0b:45:aa:53:25:f3:5d:48:b0:94:5b:e1:
f5:f3:53:cb:55:2a:f3:38:43:17:f9:e4:8e:87:17:
41:4f:38:3a:54:6a:a7:db:c8:0a:af:21:1f:05:01:
86:26:cd:e7:33:22:a9:c0:45:68:f9:a9:63:8d:c8:
fc:03:88:8f:bf:fe:de:46:55:cd:d2:e7:fa:d6:c3:
07:e3:3b:6a:96:ee:09:c1:0b:d1:cd:2e:4c:33:8b:
39:a6:bb:f5:f6:0f:23:11:31:d1:af:e4:5e:72:3e:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:5B:25:30:B2:73:ED:FB:4D:46:F9:9D:38:9C:65:4D:4E:5E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f294b684-a171-3d29-a607-3d1262423ad6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7e:65:9d:48:18:85:06:05:96:3f:de:23:bd:ba:42:27:c7:
63:0e:c4:5f:6d:37:ee:83:eb:e2:37:7e:59:1c:53:ed:cc:63:
46:aa:aa:d3:93:b8:fb:52:01:92:76:31:95:a6:62:27:16:60:
08:44:fb:7a:e2:a5:d4:8a:f3:43:51:be:7f:10:90:e5:60:eb:
f4:a2:05:e8:67:ac:d1:e5:00:77:4a:80:e5:d0:8f:07:67:0b:
d8:b5:43:53:6e:f7:f1:58:14:40:59:cd:a2:c3:11:c1:75:a1:
a5:20:d8:f1:e3:a5:69:19:27:00:fe:10:ac:96:eb:f2:60:0a:
1b:30:a2:8d:f0:db:ac:b3:47:f0:0e:84:f0:bd:7b:e6:8f:59:
9f:36:d3:02:50:ef:bc:4a:0e:2b:99:9d:30:06:7b:ea:fb:cb:
45:57:65:86:28:d6:e5:19:69:5a:fb:68:e5:0f:3c:69:06:84:
58:5c:58:9a:d5:dd:31:5b:a6:30:f0:9e:09:ac:9b:ef:85:c8:
c8:54:a9:4d:86:77:01:b3:d1:e6:d9:db:7d:47:83:ba:6e:6b:
c4:6a:ae:f2:02:1c:ab:06:57:81:1e:82:ce:58:d2:75:c8:66:
3e:b4:2a:4b:2e:7b:3e:17:37:35:49:64:ed:79:1d:aa:3a:47:
46:5f:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:16 2025 by rpki-client