
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/f52450d5-b314-3192-811a-f4ba62efb940.roa
File: f52450d5-b314-3192-811a-f4ba62efb940.roa (raw, json)
Hash identifier: Bql3XqxKjW7ndQMd+9VdgD0+zud3C/UjpKml0lXiA7g=
Subject key identifier: 0E:47:2B:4B:6A:0D:CB:92:FA:43:A4:C2:01:CF:33:C2:BC:23:67:BE
Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial: 010D0C9F4328584BA39D133799706F84B644CD00
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/f52450d5-b314-3192-811a-f4ba62efb940.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 399533
IP address blocks: 23.151.16.0/23 maxlen: 24
64.112.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:13:37:99:70:6f:84:b6:44:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=5cdb8066-a862-4442-83ea-877c959b631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:fa:6b:be:17:f2:c0:61:a2:29:3c:fe:31:
0b:f5:92:09:e0:94:e6:37:2b:fa:ad:69:50:6b:b4:
5b:28:28:2f:d7:95:f5:30:8a:75:a8:28:bb:39:8b:
4e:8a:c9:6e:77:fb:75:4b:cf:91:1c:75:65:49:bc:
21:f6:27:6d:01:54:1c:e7:41:3c:1a:8e:a2:09:22:
90:e0:63:9b:8e:64:31:84:ab:10:7d:84:f2:5d:fe:
61:0e:11:97:61:d8:b4:ef:61:d4:7f:68:f9:a3:55:
bb:b4:a7:a2:a4:65:54:13:d7:f9:0e:1e:e0:41:11:
c9:c5:5e:b1:45:d2:5a:d7:2e:15:ef:10:42:51:e2:
b4:97:10:0f:24:ef:49:cd:68:c7:88:4f:f8:71:2c:
71:95:2d:fc:9d:42:5d:9a:4a:af:42:44:60:d8:bc:
d4:ec:48:f9:c3:6e:af:24:3e:43:34:c3:e3:93:e7:
67:fa:0b:ee:03:6b:f3:2a:71:da:fd:7a:8a:06:b6:
09:b0:75:f1:49:cf:1e:69:bb:3c:70:19:3b:38:22:
6f:4e:d6:b4:fb:fa:51:94:ae:16:1d:dc:be:9f:65:
6e:08:fe:d6:71:ba:9b:ca:92:4c:ea:a8:36:2b:01:
4f:6f:7f:db:ab:4d:72:e5:f9:b5:39:a7:a5:51:0b:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:2B:4B:6A:0D:CB:92:FA:43:A4:C2:01:CF:33:C2:BC:23:67:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/f52450d5-b314-3192-811a-f4ba62efb940.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
X509v3 Authority Key Identifier:
keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.16.0/23
64.112.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:77:f1:00:7e:2e:72:f9:b3:91:c1:70:01:c5:4f:81:a3:06:
f7:62:d8:bf:bb:88:79:2c:31:57:42:e4:23:3b:ea:73:72:68:
21:2a:94:3b:2b:1b:a8:fe:a7:8c:0c:c2:ac:f9:c1:df:56:8d:
54:d6:3a:c1:17:6c:b6:24:6a:a6:79:ea:a0:e1:78:65:49:13:
ab:a1:19:87:73:94:62:da:63:61:ea:51:79:0b:bd:9b:25:bc:
1f:a7:c6:eb:4f:f7:b8:85:87:79:d7:7c:6e:32:5d:c9:3d:20:
c5:74:0a:22:63:0a:36:af:f4:65:e5:b9:83:3a:fd:ed:fa:aa:
ca:cc:83:8e:46:0d:6d:a2:fb:7b:53:e0:a9:f4:4c:b6:fd:6f:
da:8c:81:c0:b7:47:48:e9:22:fa:d4:1b:ae:bb:39:79:ce:26:
fd:38:7e:6a:e2:bc:67:11:99:e7:f7:7c:2e:a7:5e:a1:e0:25:
e6:bc:c3:21:0d:73:67:d9:1a:52:fb:21:b8:63:53:be:82:cc:
bd:84:66:6b:36:85:73:ec:5f:6e:b3:cd:b1:ac:7d:66:70:9e:
45:e7:e0:4c:cc:17:4d:db:59:1a:90:e5:6f:50:cd:e6:0b:b6:
2e:08:a7:b8:6b:d4:d0:06:99:97:c2:95:ca:17:24:3c:53:2a:
b8:45:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:58 2025 by rpki-client