
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
File: fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa (raw, json)
Hash identifier: 8CyE0qCnkEPOt0DuVK6ZZSKP7b9iiTW/3i+wprbefJg=
Subject key identifier: 41:62:24:C2:A2:EC:50:63:35:48:FF:21:9D:BC:11:33:55:15:47:38
Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial: 010D0C9F4328584BC27052D7FB58C01250F69F00
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 27537
IP address blocks: 199.87.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:52:d7:fb:58:c0:12:50:f6:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=8bffde53-fdee-4f50-8233-fc8faf2775d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:e2:c2:05:7b:19:ef:49:d5:57:59:ce:c3:
55:6f:4b:af:55:0f:4a:8f:7c:6f:57:78:37:1d:bd:
27:7d:61:2f:0d:d7:58:53:89:04:fa:63:84:71:61:
80:03:5b:c2:73:1e:fd:0d:6b:66:03:ae:65:73:c8:
88:9a:58:95:a0:c6:89:b1:50:9c:e4:64:fa:f7:e9:
76:73:cf:55:18:e0:ea:4b:4d:ea:b3:3f:4a:71:25:
b7:e1:c7:af:aa:70:6e:af:91:16:24:56:a8:89:a8:
ba:4a:86:36:dc:32:dd:a7:25:48:d4:13:22:24:6a:
05:a1:e3:56:6a:72:fe:89:f0:e6:45:c4:66:78:ee:
d9:da:2f:68:c4:6c:d2:f2:da:1b:a2:3e:4c:b7:e0:
d4:20:17:91:4f:ac:1e:64:d5:04:75:45:cc:f4:a8:
93:51:c9:c9:f0:7d:ca:cf:d3:fa:98:e5:b6:d5:9c:
4c:0c:c2:31:06:09:be:c1:47:d3:a8:9a:eb:b6:a4:
bc:d7:b3:a2:fe:25:fe:68:19:69:70:85:04:78:f6:
ce:03:0b:8b:cf:48:76:ea:8e:8f:9c:e0:2f:8a:2c:
54:66:cd:31:bd:dd:95:17:64:c5:17:e2:31:86:ff:
36:e4:c5:02:86:6b:f6:15:d7:9a:c0:de:90:a2:b0:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:24:C2:A2:EC:50:63:35:48:FF:21:9D:BC:11:33:55:15:47:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
X509v3 Authority Key Identifier:
keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:94:e1:3e:fe:17:02:3d:7a:1f:78:36:27:0c:65:89:93:78:
22:2b:d5:29:f9:9c:7e:42:a2:32:f5:b1:44:de:70:37:3d:e9:
81:45:d6:a7:80:e4:a4:d1:fe:2a:2e:d3:9d:7d:34:16:23:6e:
8a:62:aa:3a:0f:d9:d4:88:39:e8:e2:f0:91:6c:a5:70:8a:9a:
3d:61:6a:d2:78:af:55:9e:98:2a:10:cb:88:74:cc:3e:73:de:
a1:14:3d:b7:00:60:2a:4e:e5:0d:e5:3a:ac:5f:29:db:c7:a4:
90:19:e1:ea:30:2b:b3:f3:ba:fe:d0:74:71:fe:71:35:eb:6c:
f0:5e:4e:58:bc:43:4a:81:85:8b:98:dc:38:62:45:33:95:e4:
20:37:f0:41:88:88:4d:85:20:b5:ae:4f:3a:28:67:da:ac:26:
fc:e3:31:33:08:09:3e:3e:61:6c:5d:a8:76:ae:cc:52:5c:30:
e3:6e:43:bd:7b:9a:0a:9a:4f:16:3c:7d:15:aa:fb:05:8d:df:
9b:98:76:d1:87:37:25:7d:02:78:f9:86:96:d4:91:a6:f8:c4:
38:26:5e:ed:f8:e9:5c:af:67:18:12:e1:c4:f6:e2:88:36:91:
93:98:00:f8:54:e1:41:02:2c:9d:f6:1e:e0:0b:14:1e:26:50:
50:bd:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:49 2025 by rpki-client