
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa
File: 3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa (raw, json)
Hash identifier: kjdbKJGm5ydCcD+Dei4nK2izn7wYTFgLI0Gs8wlAWrk=
Subject key identifier: 43:6A:C7:83:8E:A7:22:57:34:26:BD:81:FC:45:51:2C:B1:2B:73:D4
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584B1C36BE2CC5D6A834C38053B0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa
Signing time: Sun 07 Sep 2025 01:00:33 +0000
ROA not before: Sun 07 Sep 2025 01:00:33 +0000
ROA not after: Sat 06 Dec 2025 02:00:33 +0000
asID: 16509
IP address blocks: 170.114.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1c:36:be:2c:c5:d6:a8:34:c3:80:53:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Dec 6 02:00:33 2025 GMT
Subject: CN=c51e815d-ce09-4e20-b042-c2fa2062b758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:77:7c:df:54:39:b1:ce:c6:77:4a:93:9c:dd:
fa:75:52:bb:a1:43:f5:5f:79:40:f9:36:94:d3:22:
c0:87:3a:c3:6a:36:97:90:18:92:26:53:c7:07:8e:
a1:02:56:97:6c:31:18:25:46:28:7a:4a:92:4e:4e:
ce:4c:81:26:e5:e8:9f:70:38:3e:39:a7:aa:6d:c5:
e9:a9:0e:b6:c1:27:ea:35:29:94:78:0a:6b:67:05:
84:47:04:46:90:59:c4:63:6e:79:de:d9:ff:71:95:
35:15:c1:2d:6a:75:8f:14:a7:5b:05:e2:69:bb:20:
7f:74:8b:f1:8f:f9:49:bc:f7:d2:88:84:66:b0:37:
ee:17:45:82:a3:05:69:8c:16:e0:e3:1e:b4:2f:cf:
30:aa:be:6b:36:6b:39:2a:1b:5b:6c:1b:19:88:8b:
01:01:7b:8c:94:c9:19:2e:66:a1:f4:9a:5b:d5:23:
be:43:b9:30:58:94:35:68:a7:43:6d:a1:46:ce:38:
f4:38:7b:79:d2:ba:06:3a:40:7e:92:a3:9f:91:4d:
ff:dc:7e:3d:b3:0a:f0:5b:f7:e2:31:47:00:b8:c6:
4f:a3:5b:6f:cd:f2:c8:f4:fc:27:55:1e:6c:ed:cf:
a7:67:b9:db:46:54:75:63:49:d6:49:10:43:5b:e2:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:C7:83:8E:A7:22:57:34:26:BD:81:FC:45:51:2C:B1:2B:73:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ac:b4:90:75:83:c8:9f:1c:8b:29:00:13:b1:e8:f3:83:2d:
bc:1a:dd:bf:6d:7e:13:14:19:bc:f3:b0:32:24:a2:c8:ed:2d:
2f:3e:7f:6b:c2:42:0b:2d:25:d5:3e:99:00:fc:db:67:e5:ac:
bb:84:ca:c0:00:8b:6d:3a:12:dc:d3:9e:56:ab:be:5b:d9:05:
3e:6c:e8:35:46:e6:46:9d:9a:b2:df:98:40:b2:3a:ad:49:13:
e9:9c:a7:db:77:de:a3:74:af:aa:ae:8c:e6:4e:d6:b6:34:3d:
dd:85:47:a4:ac:76:e3:15:0a:68:2c:d0:c0:51:2f:c4:25:d6:
6a:f4:39:aa:0d:25:55:73:54:18:4e:e1:f4:28:b3:0c:c2:95:
e7:6a:2a:30:35:0b:52:b9:86:48:b4:79:a3:98:1c:3f:8d:80:
dc:ae:86:c7:8d:d3:42:4a:35:0a:4f:39:cd:c8:18:c2:f9:fa:
b7:e8:93:df:f6:6e:5e:3e:ff:9c:17:d8:91:a4:cd:9d:46:6b:
01:c8:c9:38:31:89:2e:e1:b7:aa:10:b8:50:47:a0:45:05:26:
b8:19:12:94:1f:dd:ee:4f:98:00:2a:5d:34:74:72:a0:d7:b8:
13:e2:d6:81:71:bc:30:35:65:10:8f:d5:0f:b8:f6:43:e0:a2:
4e:f0:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:47 2025 by rpki-client