
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8f8b343e-0750-3368-bcbb-039169786d12.roa
File: 8f8b343e-0750-3368-bcbb-039169786d12.roa (raw, json)
Hash identifier: +IlFAQ0x1fdlh7MxZiSu7FIc8VQ55nVRVIxVhanJOm0=
Subject key identifier: 45:38:04:09:16:3B:51:B9:B9:44:2A:FD:8F:BB:87:00:F0:F9:E9:36
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584BA0D24E53DA4DA84A83F15860
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8f8b343e-0750-3368-bcbb-039169786d12.roa
Signing time: Fri 24 Oct 2025 13:00:38 +0000
ROA not before: Fri 24 Oct 2025 13:00:38 +0000
ROA not after: Thu 22 Jan 2026 14:00:38 +0000
asID: 16509
IP address blocks: 68.64.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a0:d2:4e:53:da:4d:a8:4a:83:f1:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Oct 24 13:00:38 2025 GMT
Not After : Jan 22 14:00:38 2026 GMT
Subject: CN=3790552a-c935-47ee-b9e1-2971ca10499f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:c9:d3:db:35:39:32:49:04:c7:0d:6c:4a:
06:79:b4:b6:30:60:36:e3:8d:ea:be:e2:42:74:79:
f5:58:f4:ad:d0:df:ce:07:13:98:14:91:73:9a:87:
ee:11:13:b9:63:c0:d0:05:fb:01:bb:ba:ec:39:7e:
b6:3b:1a:eb:92:e3:6c:5e:4d:25:60:27:62:5e:bd:
ff:a5:e3:35:75:cb:24:db:3c:d4:4f:43:5f:55:5a:
2e:39:ab:e9:0b:2c:c9:1b:e4:7a:4a:1a:32:0a:3c:
17:92:1b:6d:20:12:6e:d0:e5:ac:42:df:4f:b6:43:
1c:11:f0:9c:f3:82:a7:bb:67:f0:bd:24:24:e2:bf:
a0:16:e4:37:08:e5:91:cf:bb:5a:16:fb:87:8b:c4:
c0:d5:82:f9:c5:05:80:be:a3:b3:ce:1a:c1:f7:10:
a7:a4:57:58:ea:b3:9d:46:bd:e8:83:e1:04:8d:72:
b3:0c:ab:7a:76:70:08:90:a7:2a:45:9a:e7:b1:a4:
f3:a7:8f:0a:46:33:10:d8:9b:93:b7:2f:68:22:a8:
c7:b8:b8:9f:e6:51:73:86:00:87:9a:aa:0f:f0:8e:
3e:a3:2a:05:8a:a5:99:53:26:28:75:97:aa:dc:d7:
cc:82:96:5a:7f:31:c9:cc:f5:7d:9d:a3:c0:cf:66:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:04:09:16:3B:51:B9:B9:44:2A:FD:8F:BB:87:00:F0:F9:E9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8f8b343e-0750-3368-bcbb-039169786d12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:56:a2:25:34:c6:05:a8:29:c0:d3:73:c0:9e:09:14:7b:64:
1c:72:bc:f0:21:48:22:01:a2:be:5e:d0:69:4c:c9:39:06:84:
bb:de:03:b0:4c:75:3a:b8:8d:0e:7c:93:1b:68:6b:ab:ec:98:
30:ae:cb:8d:64:16:cc:74:e4:68:ad:03:94:35:16:a5:18:72:
e2:8e:21:c2:68:38:af:dd:7b:d7:0e:f0:5a:a9:4a:2d:19:7f:
24:6a:cb:7a:65:a0:fa:01:07:1d:6f:73:9f:89:09:f4:8f:29:
04:40:64:ec:ef:e1:d5:70:cc:35:3c:ed:13:b2:a5:00:f4:9d:
83:99:d3:32:4e:f7:a4:4c:0b:4f:0b:0a:88:87:cf:cd:54:da:
d0:1b:0f:85:54:65:0c:16:cb:d6:06:aa:91:27:cc:82:45:10:
75:b7:0f:44:2e:e1:47:d3:15:50:31:1c:98:49:5a:ff:45:83:
45:60:f3:f0:37:b9:5b:8c:55:b9:5d:35:04:d6:cf:29:d1:35:
91:86:f3:70:04:a9:80:f6:9a:30:37:42:47:a0:65:f1:8a:ca:
ec:4e:eb:95:65:9f:c9:f2:e0:fb:e2:fe:da:2f:f8:a8:7b:91:
eb:f0:c1:87:7e:db:e7:ec:f4:09:62:bf:0c:e0:d9:a5:2f:35:
02:77:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:52 2025 by rpki-client