
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/7e99d816-22b1-3e48-9631-581900f6f89f.roa
File: 7e99d816-22b1-3e48-9631-581900f6f89f.roa (raw, json)
Hash identifier: S9ZFo9ZopxL3YQuaTklHjsJF8sMAmXHFbEJ/IMI/eUc=
Subject key identifier: 9B:BF:8E:EA:E3:BF:B9:34:33:25:1B:42:DE:52:CF:DC:59:DD:7F:41
Certificate issuer: /CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Certificate serial: 010D0C9F4328584B970D0302ADFF04923F5BEDC0
Authority key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/7e99d816-22b1-3e48-9631-581900f6f89f.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 32039
IP address blocks: 209.196.248.0/24 maxlen: 24
209.196.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0d:03:02:ad:ff:04:92:3f:5b:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=a501dc7e-8baa-4875-98d0-5b812906071a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:d9:bb:16:69:f4:a0:36:ba:35:a9:d2:da:
8f:5f:1a:41:ca:2e:fd:67:e6:52:39:65:12:37:72:
98:af:9d:0b:21:4f:6b:50:d5:6d:1f:bb:af:fb:86:
d1:f5:bc:2a:9d:24:33:bb:f4:2c:52:a2:a6:dc:b9:
c2:66:ae:41:27:eb:65:4d:74:51:4d:df:2f:d7:8e:
f9:a4:f3:ee:27:14:a9:97:08:b2:7e:b7:e1:cc:1e:
27:2e:8c:da:67:6d:46:bd:62:ce:b0:6b:a1:8a:03:
1f:33:1e:5a:47:87:7b:20:96:e5:33:eb:e5:74:ea:
90:24:bc:45:98:ed:70:30:f2:09:df:ce:ca:d9:98:
fe:fd:0d:94:ea:7d:51:64:6a:54:26:08:dc:47:48:
bc:ae:9a:f1:06:6c:dc:aa:ef:58:e7:f9:80:28:e1:
92:e8:2c:f8:6b:25:ee:94:94:a7:7a:1f:da:e9:6c:
4b:90:92:9b:79:93:62:2b:1a:2e:22:1b:7f:ea:e6:
15:7b:59:da:58:4d:f7:fc:b9:75:61:c0:9d:af:e0:
f8:ad:e5:95:1e:98:79:19:61:9d:5f:d1:f2:3c:d0:
aa:7b:bd:73:88:90:8a:c8:d8:8b:82:28:a0:68:57:
62:d6:7e:bd:a8:29:0b:df:58:39:e2:31:54:05:9c:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:8E:EA:E3:BF:B9:34:33:25:1B:42:DE:52:CF:DC:59:DD:7F:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/7e99d816-22b1-3e48-9631-581900f6f89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
X509v3 Authority Key Identifier:
keyid:08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
sbgp-ipAddrBlock: critical
IPv4:
209.196.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:77:91:1b:85:78:92:97:cf:38:b8:d5:20:69:b4:26:42:9b:
8f:e4:f0:9d:f8:86:5e:6f:4c:7d:4b:12:23:a6:e3:9d:3f:90:
ae:27:23:8b:0b:66:59:a6:f9:17:c9:bc:f8:b7:ed:af:75:6d:
b5:f9:34:07:8d:4a:54:e5:85:e1:0e:ed:4b:e5:be:54:08:89:
4b:8b:29:2c:1f:b5:34:b5:16:a3:63:59:8f:37:07:ad:fe:f9:
36:4c:26:a3:3e:fa:9b:07:f5:9e:46:a4:56:43:55:1a:ae:34:
c5:85:f9:07:db:ec:32:34:8c:7b:ac:00:ad:b2:22:a9:a0:ac:
80:f9:4b:19:da:ac:89:33:f8:9a:7e:bc:36:5e:5e:81:93:ad:
23:26:6b:bb:f9:a2:1a:f5:8f:3f:75:29:c6:ab:68:64:cf:fa:
cb:40:49:e7:dc:55:c9:63:bf:64:97:a6:42:e8:40:e7:f6:4e:
7e:4e:55:40:45:ae:26:cb:ee:f9:1d:2a:8a:4c:a7:c4:57:96:
bb:8b:58:ae:b8:92:38:cc:5b:af:67:23:bd:d0:2d:8e:c0:92:
57:20:81:67:2c:70:ee:0b:38:66:c3:4e:2d:70:9c:7d:69:6d:
d9:da:61:d0:09:c4:82:11:1a:22:e4:0d:f4:d5:b2:0a:b7:d9:
d7:48:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:04 2025 by rpki-client