
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa
File: 5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa (raw, json)
Hash identifier: GQC6a3PnO98CpYSuM7RjZcHp9meYWPkj3CDWc8HnQfw=
Subject key identifier: 54:26:04:F1:C9:9F:D5:F3:B6:C6:41:D9:A8:7C:C9:D6:12:B2:9A:6B
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584AE6997930FB14C0E0FBAE4EE0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa
Signing time: Mon 18 Aug 2025 20:05:55 +0000
ROA not before: Mon 18 Aug 2025 20:05:55 +0000
ROA not after: Sun 16 Nov 2025 21:05:55 +0000
asID: 31898
IP address blocks: 150.230.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e6:99:79:30:fb:14:c0:e0:fb:ae:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Aug 18 20:05:55 2025 GMT
Not After : Nov 16 21:05:55 2025 GMT
Subject: CN=771ed4f8-f769-409e-bde5-09e2cafdaaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:eb:8f:ec:d8:59:91:ec:81:cf:a3:5c:da:
7f:24:7b:7a:e4:b7:91:20:b5:a8:65:dd:df:5c:78:
85:ed:ee:e3:d0:c7:44:b5:ce:68:50:bf:fc:c8:ed:
cb:4b:48:45:2b:ca:c6:07:32:71:3a:95:ec:33:a8:
35:b1:00:4b:50:b1:79:e3:7c:c9:74:a5:1e:a3:26:
e9:53:12:6c:73:b5:34:ff:10:eb:6a:10:ab:68:75:
74:e9:a5:1a:8b:a6:94:a0:ba:c6:9f:7c:46:dc:03:
a7:af:04:9e:8f:85:2f:de:fd:cf:49:00:9c:ac:1d:
49:3b:c8:4d:4b:f7:c0:7e:62:61:fd:ae:f2:c7:06:
e7:a8:ed:0e:c9:87:4a:2f:cf:67:15:5a:21:7e:72:
9d:4c:08:08:68:3e:6c:26:3e:3c:28:5a:98:7c:bb:
7f:f9:b8:ef:1e:6d:77:3b:0b:8e:f4:ab:51:e7:b5:
e9:d3:68:a7:38:db:c8:4e:df:27:8a:c2:98:05:05:
1b:d5:75:4c:8f:69:de:cc:51:32:cf:8d:32:e9:47:
21:0b:be:a2:4c:b8:6a:04:4c:fb:4f:b9:67:43:4b:
a4:14:70:3b:72:96:15:8f:81:19:49:db:49:1b:fe:
33:04:90:d5:32:35:d3:ad:ad:dd:5a:61:95:ad:4e:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:04:F1:C9:9F:D5:F3:B6:C6:41:D9:A8:7C:C9:D6:12:B2:9A:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
150.230.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:04:70:7f:d8:ad:c8:54:06:fd:4d:3d:a4:af:64:70:90:04:
83:d1:a4:e6:46:f0:b3:31:e6:e3:c5:52:4e:3f:cd:28:f0:d3:
b8:f8:d6:e3:0c:eb:9b:0d:cb:4d:1a:69:91:9f:30:fc:23:13:
73:e1:12:36:0d:a7:85:42:e5:38:53:fd:10:bb:85:09:2e:59:
f9:97:7c:18:49:ff:43:b8:e2:c5:d6:a6:2e:b7:39:4a:ec:69:
ef:1e:7a:bb:d1:a7:e2:c8:7d:37:e8:87:e3:cf:58:ed:77:0e:
98:23:d5:61:71:b7:bb:90:eb:52:96:25:0b:91:ca:af:6a:e3:
3d:17:b4:d0:c4:ca:22:3d:dc:dc:ed:58:51:c9:89:fd:8b:1b:
d5:73:42:2b:38:17:11:cd:7d:dc:36:6f:ee:ec:42:6a:9a:85:
c7:28:73:cc:5d:fa:8f:c3:25:a3:45:0e:d7:13:a5:f6:87:c4:
db:fa:7c:f5:6e:be:72:4f:09:30:ae:00:77:ed:52:25:63:f8:
d7:ce:90:be:e2:df:8f:38:d5:76:e5:27:98:77:b6:0f:db:7d:
31:77:ba:98:1e:86:9c:a8:02:53:27:cc:05:27:f4:1d:c0:f0:
7e:a4:83:ec:f5:d0:25:57:db:80:06:4e:16:c4:cd:6f:16:1a:
4d:bd:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:03 2025 by rpki-client