
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa
File: f1428052-35e1-39f6-a7a4-5464e85eb554.roa (raw, json)
Hash identifier: gSpvbmYHnYoM7O8jSJH732EOmkaBLKLRvQktq2c31CA=
Subject key identifier: 23:57:2B:DF:9B:FB:51:F5:35:4C:DF:A6:FC:61:EB:42:5E:34:81:12
Certificate issuer: /CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7
Certificate serial: 010D0C9F4328584B77EAB882122ACEAAC2B9DCC0
Authority key identifier: 4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa
Signing time: Wed 08 Oct 2025 19:07:49 +0000
ROA not before: Wed 08 Oct 2025 19:07:49 +0000
ROA not after: Tue 06 Jan 2026 20:07:49 +0000
asID: 402069
IP address blocks: 23.147.12.0/24 maxlen: 24
2602:f525::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:77:ea:b8:82:12:2a:ce:aa:c2:b9:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7
Validity
Not Before: Oct 8 19:07:49 2025 GMT
Not After : Jan 6 20:07:49 2026 GMT
Subject: CN=b2ebb9b5-2523-4790-9cb9-f315303f14e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:c6:44:66:3d:65:ee:4d:20:a6:74:5c:34:
9b:b5:9d:a1:13:2e:5e:ca:62:70:6f:e5:ea:03:66:
e6:b5:c8:34:2e:8f:29:91:1e:4a:23:e3:65:0e:6d:
df:32:9d:82:f2:e0:13:14:0d:1e:2d:77:7f:be:a6:
ba:e7:10:79:af:c2:a2:93:af:97:fd:39:5a:66:d6:
a2:c6:fc:ef:5f:56:06:5f:e5:50:ba:7d:4c:5b:31:
6c:7d:e4:bc:1e:14:48:b3:14:71:c9:d1:3a:4d:c2:
7e:a5:1e:f8:bf:39:c7:cf:3c:d8:98:c1:f2:9d:8d:
c9:4e:bd:fc:81:9f:a4:62:cc:03:64:46:7e:f0:d5:
c4:9a:1f:21:28:c8:60:0e:7a:f6:ca:14:6c:84:a3:
10:2d:01:41:2d:10:ed:fa:35:ae:56:42:7d:1a:94:
d2:29:20:4b:0e:45:35:f5:37:b1:96:de:2f:d0:71:
c1:88:37:0a:fa:66:4d:48:d0:94:fd:19:e2:76:1b:
e7:58:d1:2d:b1:48:74:25:d8:a5:b1:b8:96:40:a1:
1e:bf:60:a8:99:9c:e2:6c:cb:02:1a:31:6c:3e:51:
cb:fb:33:0a:c1:49:9a:8f:33:66:d4:a0:89:0f:fb:
2c:ce:80:a0:da:e7:9e:9e:3c:0c:0e:10:25:3a:ca:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:2B:DF:9B:FB:51:F5:35:4C:DF:A6:FC:61:EB:42:5E:34:81:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl
X509v3 Authority Key Identifier:
keyid:4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.12.0/24
IPv6:
2602:f525::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:00:a5:00:db:c7:c4:77:bc:91:07:2a:c5:34:5c:88:3a:c1:
4b:9e:5c:67:06:71:97:d3:f1:94:5e:4d:20:78:9b:88:ae:51:
bd:ea:3f:6c:67:34:d5:66:c3:d7:5f:61:1a:ba:32:09:b7:71:
55:c2:52:2e:f6:b6:f8:c8:87:c8:63:83:38:97:68:f9:2a:99:
91:bb:2a:80:5a:62:c7:8c:c4:a3:bc:04:b6:da:7e:4e:5e:cd:
ca:e5:49:23:74:4f:e0:17:96:11:10:0b:ec:ee:d2:33:75:3d:
70:9d:e1:b6:a3:21:ed:56:70:7c:65:69:df:ef:c6:18:c9:34:
d4:3d:87:91:58:13:3b:9f:0e:8a:8c:04:1c:a8:df:1d:cd:2e:
9d:38:40:62:4a:2c:42:60:03:50:2e:89:22:a4:05:1d:0f:30:
c3:5b:11:51:2b:8d:7b:2a:c5:af:bd:50:e0:30:68:7c:b8:d2:
86:6a:1d:14:9e:45:de:d6:2e:03:68:ae:f4:0d:87:ba:c7:42:
db:b0:06:6b:ba:d8:fc:22:89:ce:7c:8a:13:b0:2c:05:f8:80:
7c:dc:1f:ac:e8:dd:61:3e:da:52:dd:fb:bc:07:10:b6:71:6f:
a8:17:70:62:9b:f0:4e:5b:c8:f8:78:5b:26:1a:f2:e2:d6:70:
2d:99:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:48:23 2025 by rpki-client