
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa
File: c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa (raw, json)
Hash identifier: JJTVxhFLb2wHYO96DsRRMQkqOcubMBsv74PYqEbgny4=
Subject key identifier: 52:CC:D1:8A:B8:F4:2D:A5:A4:12:F5:DE:99:4F:03:95:91:2A:D3:34
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584BBE402C60123E5C64042D55C8
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 16509
IP address blocks: 134.224.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:2c:60:12:3e:5c:64:04:2d:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=2bc761f6-d555-489f-a839-ba267390a943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:9d:51:bb:b5:3c:a6:b2:fd:19:c5:03:7a:
de:f6:3f:42:cb:19:98:6f:19:28:06:7a:b1:39:3a:
51:0d:72:f7:2c:cb:99:9e:c0:c9:a6:88:82:80:a4:
32:7a:33:62:9f:2b:61:00:14:18:4f:1b:a2:11:41:
86:a4:6c:26:1c:8e:46:5d:26:ee:b9:e7:45:3e:0f:
cb:fb:b8:35:ea:9c:19:c9:c4:e6:82:27:b4:8a:8b:
ed:0a:1f:51:44:23:b9:51:56:aa:04:66:89:51:8f:
d0:df:fb:2e:c6:62:80:7d:54:50:d4:04:a7:af:0c:
1e:0e:c0:eb:d4:14:31:10:f3:90:b4:47:a0:8d:a2:
60:57:8e:82:72:14:b9:29:58:4f:32:56:48:56:b6:
8e:84:08:61:2f:75:6e:05:90:0f:f9:fc:63:8b:b2:
56:12:2b:64:12:e2:d7:9c:17:74:71:05:2b:d2:0a:
74:03:ce:60:57:b1:55:09:fd:3e:6e:b0:76:89:f4:
00:52:32:c2:33:87:10:7a:1d:e4:d8:a9:47:82:95:
61:28:39:08:b9:23:2e:7f:8e:4b:73:df:6d:e3:7a:
dc:61:e1:d1:d5:ce:f2:2a:d0:ba:1e:a3:b3:c5:a0:
6a:d3:9d:38:43:6d:1c:74:5e:71:84:a2:8d:b0:cc:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:D1:8A:B8:F4:2D:A5:A4:12:F5:DE:99:4F:03:95:91:2A:D3:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
134.224.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f7:53:09:0a:1e:bd:e6:d4:97:75:cf:92:9f:0d:67:a9:c5:
32:83:c1:6f:46:0f:18:e8:0f:e2:03:af:c5:0b:8c:34:fe:39:
ca:21:16:72:f9:98:2d:19:8d:6e:22:d4:fc:fc:a6:d1:f6:dc:
cc:a5:af:63:0f:c9:79:26:2f:40:d9:16:30:0a:fe:8e:b0:4a:
b0:a7:56:ad:ec:18:1d:bc:ee:cc:1f:e9:1f:87:53:ca:13:a7:
d3:94:da:d8:24:a4:74:a4:40:63:00:ce:38:07:ba:72:dc:24:
be:3d:90:10:c7:d7:55:23:4a:71:28:4b:22:f9:e1:16:20:a2:
f8:19:73:f8:9e:47:bf:54:c9:7f:ab:a3:8c:44:aa:24:fb:74:
15:8b:e8:fe:73:9e:0f:d7:9a:78:e5:12:0a:3c:ca:6b:5e:0a:
c0:ba:77:44:e9:24:75:90:df:a9:fd:06:03:7e:83:fe:9c:57:
dc:17:7d:e3:49:38:d3:fc:2e:5d:7f:9a:c2:75:70:44:93:91:
97:5a:aa:cf:0c:f4:56:ce:48:7e:5b:a1:47:c5:01:fa:72:2a:
59:b8:3f:ba:dd:5d:e8:63:d2:23:ef:6e:78:14:44:0d:84:2d:
46:e3:d4:b9:a1:49:04:71:f3:da:97:d3:cf:3e:16:4f:8f:24:
25:97:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:15 2025 by rpki-client