
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
File: ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa (raw, json)
Hash identifier: Mf5PHttM/xIEF+808M+lZ6yRbbZwKbAYoTwlZIfzA7s=
Subject key identifier: 05:4A:35:33:57:64:58:11:58:3F:3A:E7:18:99:60:D2:18:D5:6C:FE
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F4328584BA6679E5AA4A9A85AE2813200
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 16509
IP address blocks: 199.47.128.0/24 maxlen: 24
199.47.129.0/24 maxlen: 24
199.47.130.0/24 maxlen: 24
199.47.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:9e:5a:a4:a9:a8:5a:e2:81:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=d5932d29-15c4-4c1e-9f85-0cd7e61c0a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:e3:ab:bf:7c:c6:be:57:1a:1e:03:21:9d:
dc:e9:25:46:df:7b:25:5e:6a:6b:b0:5e:ab:21:8c:
8a:c3:cc:30:2a:94:cd:7d:10:f7:53:1f:5f:1d:42:
ab:27:17:ce:a9:fa:f4:4b:e7:d1:a0:bf:99:e2:1e:
7c:26:e3:71:ec:27:81:da:38:c3:d0:52:06:ee:12:
47:a7:52:02:0f:ae:b1:a8:79:7b:17:b6:b6:59:7b:
b0:67:7e:d1:99:72:4b:e2:b6:b1:48:52:8e:0b:bf:
d4:00:d1:62:f8:93:12:42:4c:ac:08:5b:f7:96:9c:
ce:34:9c:ce:69:d4:b6:8c:6c:e6:d1:64:de:38:d6:
65:2d:92:18:6f:07:c9:68:b4:e8:cd:be:ea:88:9e:
80:c4:b4:bd:44:36:49:5c:7f:0a:c3:56:08:02:b3:
3a:a6:e8:8e:9c:40:8f:05:71:ca:f8:4e:fe:ae:6c:
f1:ef:a8:e2:76:5f:51:35:e5:f8:91:52:2c:c7:b4:
c0:03:21:45:f6:c0:7d:77:31:ef:21:69:ff:8b:9b:
13:ff:cf:5b:90:5c:ad:bd:17:f6:97:4d:1b:be:5e:
6f:14:b7:2b:ce:7a:2c:10:93:ea:2c:88:e9:05:c4:
fd:c5:02:d5:57:b6:2c:8e:46:b2:04:4e:6e:e8:c5:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:35:33:57:64:58:11:58:3F:3A:E7:18:99:60:D2:18:D5:6C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:79:ed:aa:27:5f:9d:3f:96:8b:47:2c:8c:12:2f:0d:ee:fb:
07:eb:57:98:97:c6:c4:16:db:88:71:a6:4e:a6:81:cf:8e:22:
eb:2f:ae:ad:33:08:5c:0b:fe:93:f4:28:d0:72:03:d8:4f:bf:
f6:bf:4a:a1:2d:39:04:25:f3:bc:71:57:f3:f4:97:55:28:c3:
85:d2:94:3e:c4:13:ea:4f:41:bd:73:69:0c:ad:2c:e4:37:a1:
e5:2f:92:b0:a7:09:98:17:56:d2:2b:3a:80:9d:31:da:d1:a2:
03:e1:08:76:36:f5:2d:dd:95:65:ef:14:c3:9e:c9:46:96:b6:
ac:7d:d7:b4:0c:66:f2:27:cc:2a:e5:5c:15:57:b6:ef:5b:44:
0a:b8:21:28:e7:33:83:6b:46:3e:09:69:6a:ce:58:e9:e8:ab:
86:41:f7:45:ca:44:7f:8d:92:bc:86:5d:86:5b:e6:91:62:85:
62:b2:f2:b8:e4:5d:28:6c:39:17:6e:62:71:15:b1:00:d4:33:
0c:ae:8c:72:2a:ed:62:26:10:ee:d8:b7:cb:e5:65:ab:91:b7:
63:2e:2f:38:64:75:43:fa:f2:3f:4d:6e:91:fd:e5:5e:44:ca:
0f:ee:d3:a1:a1:ae:1c:10:7a:41:63:04:29:b2:27:45:7f:fe:
3b:9d:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:16 2025 by rpki-client