
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
File: f0d10397-6934-3c37-9304-645005e262ae.roa (raw, json)
Hash identifier: E4wcTcbvacoH1NzWX0gCVWb3MyeleuHYWcJSobvDM3I=
Subject key identifier: 54:CC:1C:9B:5F:AC:7B:A5:A8:1B:3F:14:CE:64:52:29:1C:36:E2:74
Certificate issuer: /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial: 010D0C9F4328584B4E77101ED884155534E0C300
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
Signing time: Thu 25 Sep 2025 01:00:33 +0000
ROA not before: Thu 25 Sep 2025 01:00:33 +0000
ROA not after: Wed 24 Dec 2025 02:00:33 +0000
asID: 14618
IP address blocks: 23.141.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4e:77:10:1e:d8:84:15:55:34:e0:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
Validity
Not Before: Sep 25 01:00:33 2025 GMT
Not After : Dec 24 02:00:33 2025 GMT
Subject: CN=4942a6c5-a12a-4be3-9e78-55e0874874f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:13:4c:3f:6c:97:e0:52:b6:57:12:c6:43:
e1:d1:02:6f:d5:70:ff:0c:43:64:d7:58:50:17:dc:
a5:bc:eb:24:72:fe:b8:80:76:60:40:24:5a:93:34:
62:ee:fd:f6:b7:cf:73:44:8b:fc:84:cc:fe:8e:3b:
77:43:be:a6:df:e3:b0:d5:98:6a:1e:f8:ad:20:6e:
c7:49:14:bd:80:8d:a4:f8:b1:f1:05:35:65:8d:66:
9f:ef:cb:b6:dd:0c:ee:50:40:60:3b:a0:00:e8:63:
89:5a:64:27:92:2c:a8:8c:ba:9a:58:84:8a:c6:b1:
6b:2b:20:a4:6b:f6:b8:00:12:bf:28:51:23:57:78:
db:bf:c3:ff:19:33:91:0f:a6:b7:28:d7:1b:de:00:
70:d6:0a:ae:fe:80:aa:56:2b:df:4f:4e:72:e8:82:
75:5f:39:1a:2e:c2:84:87:fe:ec:ab:3c:f3:32:32:
1e:a1:f7:2a:31:49:ed:eb:14:ce:d4:b3:98:d7:4f:
97:9e:88:89:64:7b:e8:73:7a:c7:3b:fb:58:73:11:
63:53:30:67:e8:3d:c0:52:d9:10:f4:8e:4b:96:7f:
54:df:0a:b6:3a:06:a1:dd:c4:2d:83:54:3c:c7:78:
69:55:49:8f:04:ce:2b:e9:a6:69:ae:56:9f:e7:34:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:1C:9B:5F:AC:7B:A5:A8:1B:3F:14:CE:64:52:29:1C:36:E2:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
X509v3 Authority Key Identifier:
keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:71:88:9a:fd:af:68:64:1a:83:ce:dd:d2:80:fd:d7:a9:24:
5d:c4:e9:ee:03:7e:4b:15:93:1a:1a:1b:9e:3b:41:3c:86:3a:
64:42:52:0a:55:a8:c4:55:7f:39:4a:4a:ae:c3:5c:62:a5:3b:
12:bd:63:b6:ea:50:87:94:37:73:f9:39:b9:4b:d1:e5:83:4f:
7a:1b:c3:b2:90:24:aa:71:40:54:5e:d7:35:ea:75:29:c4:80:
e5:d2:ab:c8:95:9f:16:f3:a4:4f:76:51:34:35:28:fb:80:04:
a5:1f:e8:a7:f0:13:d9:71:76:ef:e0:42:b2:f8:1b:60:61:40:
b8:61:9e:4b:ad:8c:94:eb:56:d6:00:9a:15:b9:da:7d:44:72:
c4:a4:b6:4d:aa:c0:bf:69:43:b1:d4:3e:b0:72:e2:24:30:7e:
d2:0c:a7:55:d8:30:b8:1e:7c:b0:51:45:26:16:32:b4:87:46:
d7:81:03:5f:4c:6e:c4:aa:cd:a1:28:a3:b7:e0:6d:7d:0c:da:
ed:86:39:a6:38:5d:39:f2:8e:d8:75:a5:2f:79:a0:27:18:5c:
b0:eb:80:c5:84:83:e5:84:8b:d5:a5:ca:44:98:a2:8f:b9:8a:
00:7e:80:43:55:b5:b8:3a:83:55:6f:13:fb:e8:b3:3d:dd:6e:
90:52:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:16 2025 by rpki-client