
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa
File: 4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa (raw, json)
Hash identifier: PcOqd7zGHC+Rxsnz0ukTulKwCR5E8h/K8G4DJQt4PdI=
Subject key identifier: AF:C5:8A:4B:BD:B2:A3:D4:49:1D:E6:34:9B:C5:C1:E4:4D:48:3F:04
Certificate issuer: /CN=45e986ce-813b-4783-89cf-d434e6e641a5
Certificate serial: 010D0C9F4328584B891784ADA8038141E2FDBB40
Authority key identifier: 51:5A:A1:6E:09:6E:3A:E4:38:1C:9C:67:31:3F:8C:E1:C5:C6:39:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa
Signing time: Thu 16 Oct 2025 01:00:30 +0000
ROA not before: Thu 16 Oct 2025 01:00:30 +0000
ROA not after: Wed 14 Jan 2026 02:00:30 +0000
asID: 54566
IP address blocks: 23.138.140.0/24 maxlen: 24
2602:f664::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:89:17:84:ad:a8:03:81:41:e2:fd:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e986ce-813b-4783-89cf-d434e6e641a5
Validity
Not Before: Oct 16 01:00:30 2025 GMT
Not After : Jan 14 02:00:30 2026 GMT
Subject: CN=18b1cb43-0824-45b4-9d05-c26ec88d93ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:ab:d3:61:d8:7e:f0:3b:7a:dc:9e:0f:f2:
65:c6:83:5a:65:db:bb:e6:e6:0f:0a:7b:f4:2e:4d:
74:a4:2d:56:10:b8:c2:99:f4:36:c5:d4:27:a1:4f:
52:4d:ec:2c:58:15:2a:74:be:ed:50:00:cb:90:87:
eb:c7:40:36:c7:09:f5:1f:4c:b0:b6:56:1e:3a:d5:
79:3f:d5:16:92:e1:85:51:b9:ed:c3:ea:50:b7:56:
98:c1:9f:21:43:c2:e1:0a:3e:4d:4d:24:59:8a:8a:
47:dc:9a:91:7b:4d:e9:ea:8b:de:12:b2:70:bb:c8:
0a:ad:5b:ad:f0:e2:0e:c9:7b:f5:7b:82:12:5a:ad:
74:97:c6:ca:bd:94:e9:27:6b:58:a3:99:8c:41:51:
a3:0e:4e:72:4e:b6:64:da:b2:12:44:bf:e0:14:dd:
c7:68:40:4f:40:76:c5:12:79:4e:32:17:bb:07:2d:
29:18:4d:4d:17:3c:a1:11:ea:ed:53:db:ad:39:63:
55:2d:fd:78:28:86:61:33:4f:4d:22:9e:4d:7f:9d:
8f:21:26:1c:69:15:c6:e9:58:77:ea:15:25:be:3c:
ee:30:c9:92:c8:52:1b:f4:84:55:5b:fc:47:71:57:
2e:3f:30:11:d7:3d:d8:b3:5a:21:66:1a:4e:7d:e9:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:8A:4B:BD:B2:A3:D4:49:1D:E6:34:9B:C5:C1:E4:4D:48:3F:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/4a6cb4c0-bb33-36f0-b3a5-4e7bcab32cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5/45e986ce-813b-4783-89cf-d434e6e641a5.crl
X509v3 Authority Key Identifier:
keyid:51:5A:A1:6E:09:6E:3A:E4:38:1C:9C:67:31:3F:8C:E1:C5:C6:39:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45e986ce-813b-4783-89cf-d434e6e641a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.140.0/24
IPv6:
2602:f664::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:7b:ed:44:2b:12:4e:36:d1:c4:35:f9:6f:ac:b5:90:4c:56:
cb:65:e5:eb:d4:67:96:e0:c3:5c:dc:cb:e6:19:9f:fe:e4:ed:
e9:5d:8a:69:c8:ed:2e:a8:47:a5:e3:5e:28:37:bf:11:20:11:
16:3b:5d:0c:bd:8a:20:e6:04:7e:a1:fa:3a:89:03:46:23:08:
ec:bf:2f:82:80:0a:2e:95:11:0d:99:49:41:a4:6f:ee:5b:d9:
c5:8f:df:ac:f6:df:cd:e2:81:4a:59:a4:2a:3a:6f:5a:8f:62:
53:cd:23:fd:77:bf:e7:9f:8a:00:d4:cd:2c:c7:c6:ac:d3:e4:
f6:6b:01:8e:12:94:13:b5:b2:86:92:dd:f5:cb:0f:1d:02:ec:
76:64:75:ef:8c:88:78:bb:25:2d:72:83:4d:bb:d2:4a:15:3f:
ff:65:a6:ed:c6:ef:b5:42:02:97:56:f4:dd:90:3e:a5:c7:75:
e8:78:75:3e:c9:e4:4f:a2:88:34:2a:60:24:a3:91:fc:50:3f:
d5:05:26:0c:20:e3:50:84:1d:5f:4d:65:55:94:94:75:da:dc:
14:0f:e1:9e:a4:6c:11:d5:73:5a:d2:e7:73:bb:d4:2a:44:47:
71:b9:c1:21:10:f0:1c:91:92:b3:cf:04:01:cf:00:18:37:8b:
ae:01:e9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:45:43 2025 by rpki-client