
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa
File: 5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa (raw, json)
Hash identifier: AAskGxKY7Rpl9bA7WPSphQtkVtM50XjquKdYt/VxiYk=
Subject key identifier: 9F:10:C5:C9:E9:21:AE:2C:ED:AC:18:D2:03:F4:D3:C1:1C:4D:D8:33
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584B9F6CDE2197E178FD97818D80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa
Signing time: Fri 24 Oct 2025 01:00:30 +0000
ROA not before: Fri 24 Oct 2025 01:00:30 +0000
ROA not after: Thu 22 Jan 2026 02:00:30 +0000
asID: 46558
IP address blocks: 130.35.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9f:6c:de:21:97:e1:78:fd:97:81:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Oct 24 01:00:30 2025 GMT
Not After : Jan 22 02:00:30 2026 GMT
Subject: CN=0d2bda3f-37b7-40eb-b376-a8748789e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:a8:60:80:90:55:4b:12:ba:aa:7a:bd:35:
72:88:b4:d1:a1:eb:d4:82:82:62:07:40:bb:2d:96:
db:df:41:06:91:ad:d8:ee:b2:e8:e5:82:52:80:b2:
3c:21:b5:f3:15:60:bd:12:98:ab:b1:6f:7c:72:40:
82:bc:55:cf:88:c3:4c:43:d5:18:7b:44:d7:7f:d5:
6d:4e:49:be:d8:2f:33:9c:54:7f:bd:46:d8:a2:39:
ee:e8:c1:57:f4:09:62:24:76:4e:32:e0:1c:2f:ea:
ea:18:9b:da:3c:0b:3b:44:ba:a0:ae:76:f4:12:3b:
19:1c:4c:37:62:b1:be:db:38:76:07:d7:8a:e3:51:
82:7e:6e:d2:a3:ec:d0:bf:1b:3e:76:b1:15:c4:83:
66:c8:f3:1c:b5:55:73:f2:9c:68:8d:3d:84:bf:f5:
75:e9:51:3c:95:ce:c0:0d:f2:6a:35:9c:15:2f:f0:
6e:0f:76:64:86:06:11:36:03:3d:5f:14:08:8a:f7:
c8:1a:5c:fe:1f:0e:d1:2d:a2:4a:c0:c4:c1:ec:31:
c7:da:9f:6a:9e:9e:9f:2f:ad:ae:d4:87:be:a4:a0:
26:1a:a9:e1:ee:98:d9:a9:e8:9c:54:d4:0b:45:f3:
4c:e0:fa:85:26:36:54:a3:24:8e:28:67:48:63:4b:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:C5:C9:E9:21:AE:2C:ED:AC:18:D2:03:F4:D3:C1:1C:4D:D8:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:a6:c5:e0:7c:0b:80:61:b6:c5:79:53:ce:c1:72:cc:ed:aa:
d7:08:f2:2a:bb:da:0a:2b:fb:c6:3d:f7:42:73:aa:38:bc:10:
28:f1:52:99:cc:be:47:cb:17:13:2a:30:14:3e:3f:34:26:ee:
bb:78:1c:58:46:df:8c:88:20:21:ef:f4:43:68:ec:db:f9:9e:
17:fd:55:b1:a1:bb:e8:18:e4:9b:61:2e:3e:49:0d:4b:ac:54:
e4:3d:21:13:5c:12:d7:71:b1:0a:b1:b4:de:f8:51:51:13:50:
5a:74:df:1c:c1:09:95:35:54:9f:0f:e3:1c:e9:68:cb:4c:4a:
2c:e5:84:a8:a5:25:ee:8a:dd:3c:2d:4a:ea:24:ab:45:bf:9b:
f9:4a:5c:ff:65:fe:68:f8:9a:6d:ce:72:4a:e6:fe:5d:a3:df:
7d:de:0d:f1:c0:e1:bf:92:80:9f:7a:e0:cc:36:f5:b3:60:03:
5c:ff:c9:32:30:e6:d7:f4:7a:13:2f:23:4d:86:0e:17:f2:52:
3e:ba:b9:56:a4:56:36:2f:fb:7f:b6:c7:bd:60:23:e7:33:0f:
0f:e8:25:80:06:4f:17:d0:a4:6f:ff:5e:b3:a2:48:ac:b2:82:
d3:31:45:60:9a:05:83:5e:d2:11:a1:b9:53:2a:63:1c:7d:43:
37:10:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:52:50 2025 by rpki-client