
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
File: b141f248-49b7-31ab-b20c-04519496bec3.roa (raw, json)
Hash identifier: jJ8swqUOZL74Jll5YSy4mPWBc/8cK79whheM6qNpGxw=
Subject key identifier: 32:49:8E:CC:1E:4A:29:E4:56:14:55:EE:95:6D:84:C8:32:C6:C4:ED
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584AF8C224B61CAE737C3C0C9BE0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
Signing time: Mon 25 Aug 2025 08:12:24 +0000
ROA not before: Mon 25 Aug 2025 08:12:24 +0000
ROA not after: Sun 23 Nov 2025 09:12:24 +0000
asID: 31898
IP address blocks: 130.35.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f8:c2:24:b6:1c:ae:73:7c:3c:0c:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Aug 25 08:12:24 2025 GMT
Not After : Nov 23 09:12:24 2025 GMT
Subject: CN=135347e3-393a-4fa0-9a79-935288c5764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:87:de:b3:21:6a:b3:bc:f4:06:2a:c7:99:53:
47:70:50:3c:af:86:e5:2f:6c:3f:89:98:5e:4f:f3:
22:22:7d:9e:e9:77:9b:34:ba:06:2c:e9:38:18:76:
c4:81:15:64:e9:f4:40:f8:90:cf:49:66:03:5c:d0:
5d:81:ff:fd:fc:41:08:14:79:0b:09:d9:e6:2e:09:
b7:fe:9f:e1:36:b1:86:6a:c0:c8:ca:ee:7c:c9:bf:
81:ed:74:ed:c1:0d:70:dd:1a:b0:fa:fb:24:0e:59:
a0:9b:a9:4b:41:c0:cb:0a:37:46:e9:bf:02:53:a9:
dd:e8:22:9a:a3:24:b9:51:d0:f1:6c:af:2f:20:68:
b1:f1:3d:71:f5:ae:01:70:22:c6:1b:20:95:c1:8c:
e7:58:0f:51:6f:74:f0:89:19:ee:fe:8d:cc:b2:86:
86:8e:9d:d7:8b:2f:62:08:aa:3b:5e:a1:e9:50:16:
fa:d3:2a:53:4f:1c:d6:35:ec:16:fd:58:43:1f:3e:
34:24:65:7f:5e:ed:61:ae:6c:76:1c:90:0e:93:74:
03:5b:92:56:c5:77:35:b2:18:22:b1:46:c4:04:9d:
c3:c8:30:37:9c:bd:ab:7c:75:1f:ab:27:2f:c5:a3:
ba:47:d4:17:2f:cb:72:39:21:22:1f:e0:42:c4:ee:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:8E:CC:1E:4A:29:E4:56:14:55:EE:95:6D:84:C8:32:C6:C4:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8f:2e:b9:6d:8d:9e:85:b6:9d:b1:9c:43:6f:b4:1f:51:88:
6d:e9:4e:a4:de:ec:36:be:36:91:72:ec:2d:1e:24:c5:11:96:
0f:f8:cb:a0:98:62:85:0a:46:6d:1e:f3:c6:b3:85:76:b9:19:
ec:99:8f:1d:96:d1:d2:c5:48:f2:c8:74:84:68:0e:ce:18:3b:
cb:19:26:7d:9a:9c:56:ff:c3:78:be:d9:71:f1:8e:37:f9:f5:
61:df:e4:20:ff:ec:2b:43:48:5c:fa:26:7b:b8:9b:e1:ef:58:
90:bb:a3:99:bf:eb:76:81:0c:9a:cd:00:f4:04:84:ab:4c:32:
8d:d8:e3:2c:5c:bb:f7:00:8c:97:3f:bc:51:f7:99:88:9e:b5:
a6:4f:cf:e9:23:f0:1d:62:e9:ac:2b:83:c1:13:07:29:c3:1c:
84:57:0a:a5:38:27:ee:0c:da:f3:8b:e7:c6:fe:5a:4b:4a:16:
db:71:8f:da:32:a3:cb:64:d8:d7:fc:c6:80:d7:9d:3b:2b:59:
be:ea:ce:5d:e5:07:4c:ba:53:90:b5:4b:ff:20:8e:bb:85:30:
14:5b:96:db:25:1b:f5:0c:90:3c:d7:1b:39:4d:48:4c:74:39:
d1:5a:89:0e:a0:0a:6e:ab:7e:56:bd:79:49:7c:9f:a9:72:d6:
06:ab:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:49 2025 by rpki-client