
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa
File: bb49121d-7647-3f34-8f02-f8d741546d3f.roa (raw, json)
Hash identifier: KCdlG/rXdrnSmBcS1zKcK73/bO1EzHWYIq2GMTIHmcE=
Subject key identifier: 6C:83:59:B7:71:CC:CE:CF:BB:09:B7:9F:65:15:FC:A5:05:78:61:67
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584AF0150C6007B9D43F23950680
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa
Signing time: Fri 22 Aug 2025 05:37:11 +0000
ROA not before: Fri 22 Aug 2025 05:37:11 +0000
ROA not after: Thu 20 Nov 2025 06:37:11 +0000
asID: 31898
IP address blocks: 144.25.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f0:15:0c:60:07:b9:d4:3f:23:95:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Aug 22 05:37:11 2025 GMT
Not After : Nov 20 06:37:11 2025 GMT
Subject: CN=082f4a15-7c1c-49e3-8a46-55ce62cd66c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:99:28:81:82:34:7c:99:f1:9f:4c:c4:06:
4e:1d:06:4d:6d:f5:fe:8a:a7:da:fa:10:e8:74:ea:
79:dc:a9:24:42:f4:19:6d:bb:da:fc:5b:f1:cb:c9:
41:9c:98:c2:49:75:ef:2f:a8:f2:e6:7b:ea:1e:2b:
1d:6b:48:c7:75:b1:5f:a8:21:4e:e7:bc:d0:53:de:
24:68:ba:df:f9:65:6b:13:7b:4d:00:42:80:94:3c:
ec:0b:85:b2:92:f4:25:84:85:1c:ed:c3:23:b4:a0:
57:c2:b0:87:b5:5b:75:af:21:99:dd:ad:85:4d:2a:
6f:f2:87:41:e6:ff:5c:e0:12:9d:0d:67:c1:3f:80:
57:e5:e2:c9:44:a6:df:a7:9f:22:78:39:e7:08:38:
3f:1e:21:0c:1a:f1:a4:6f:fb:dc:59:15:15:db:f9:
b0:f3:0a:9f:80:a8:98:28:24:2a:93:5f:23:f1:81:
1a:22:9d:16:48:11:45:85:58:af:3f:4b:4e:90:be:
73:d7:e7:05:7e:e0:82:bc:5d:83:06:f6:f7:dc:3f:
e2:78:32:2e:c6:d0:e4:a1:70:7d:e5:1f:91:41:51:
4d:27:58:d6:3d:fd:fa:b1:be:d5:50:55:e0:2c:75:
4d:ca:ad:6c:f0:a4:45:36:08:cf:2a:7d:f2:52:4d:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:59:B7:71:CC:CE:CF:BB:09:B7:9F:65:15:FC:A5:05:78:61:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
144.25.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:4d:82:f8:26:69:f1:66:d6:37:a2:3b:80:69:e0:79:ac:82:
23:a8:31:b5:59:7e:82:a7:60:6f:d1:8c:b5:1b:f5:72:59:61:
3e:cd:6b:9c:cd:c4:fc:0f:b9:fb:51:44:08:65:08:55:ef:71:
20:6c:98:ad:63:9a:9c:d0:7f:3b:e5:bf:a7:49:a6:c7:ec:5e:
6e:c1:c4:3d:80:9b:67:14:fa:e1:68:d8:c3:a1:cf:54:ef:de:
fb:1d:93:46:15:e4:6c:f8:aa:e7:62:eb:77:8e:6b:b6:ad:16:
f3:08:98:73:b1:23:58:a1:93:81:30:50:87:18:3e:a1:32:07:
ab:2e:04:d7:bb:13:d4:df:c4:cf:0f:47:8b:5e:73:e9:cd:00:
06:f3:50:db:44:bb:f6:cd:0f:a7:a0:8c:aa:3e:94:be:ea:dc:
c5:9a:3e:a3:e6:5f:25:79:6d:03:3c:6e:47:20:c2:85:4c:cd:
5b:c2:ea:54:3a:58:03:30:cf:ae:e6:95:76:92:ee:44:d0:86:
79:57:ea:cf:fe:c3:81:eb:d4:ce:44:0f:c2:12:2b:da:61:c4:
78:61:06:b2:d0:90:6f:8c:42:51:21:4b:f9:f6:25:04:5a:28:
b1:53:d3:9e:44:c7:1e:e7:1f:31:21:e3:c9:4b:6c:2f:b6:9d:
b4:7e:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:09:22 2025 by rpki-client