
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
File: fabb8d63-e0ce-3598-a09f-0513068d6941.roa (raw, json)
Hash identifier: Pa0snj3DDSKwmxFSu1LOkNJdfjUCb3C0vP0Nu1kYG9g=
Subject key identifier: ED:E7:26:A4:4C:2F:95:E6:04:40:32:96:4B:79:DD:D9:67:67:6A:36
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584AE69975EAE37D7029526CFF80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
Signing time: Mon 18 Aug 2025 20:05:53 +0000
ROA not before: Mon 18 Aug 2025 20:05:53 +0000
ROA not after: Sun 16 Nov 2025 21:05:53 +0000
asID: 31898
IP address blocks: 150.230.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e6:99:75:ea:e3:7d:70:29:52:6c:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Aug 18 20:05:53 2025 GMT
Not After : Nov 16 21:05:53 2025 GMT
Subject: CN=550f60ea-981e-4abb-bdb9-03b3a51ef3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:67:5c:21:cf:4e:b5:eb:70:f8:53:9e:f9:
60:5f:6e:30:2b:fd:11:2e:e8:4b:2c:84:02:9b:39:
72:34:34:c5:54:fc:9a:1b:ab:ec:0e:35:eb:ed:19:
19:cd:f6:a4:ca:7c:b0:33:15:05:9e:6f:cd:9d:5f:
73:c9:95:26:e6:e9:be:ab:f5:fc:27:f6:b6:dd:49:
ff:4f:67:03:8f:11:c4:5d:3b:03:20:14:53:ab:1c:
4d:6b:24:f3:46:96:07:e0:9b:04:ca:d4:2f:55:d9:
1a:cd:a7:87:7d:e7:06:8b:08:70:91:d7:d8:c7:03:
0d:41:9b:69:f0:58:71:d1:55:18:02:1e:72:8a:72:
6d:e6:20:09:18:b0:98:ef:bf:67:95:f0:f5:27:0e:
ce:0e:11:37:02:ef:92:d0:38:46:99:cf:84:00:cb:
6c:75:7d:be:df:fe:03:3f:40:4c:c0:64:c4:8b:af:
4a:6a:15:52:0d:6b:d7:a5:4b:a3:d1:5d:be:88:42:
de:e4:a6:eb:0f:c3:37:7c:59:7e:3d:a4:fb:15:6a:
99:5b:fb:de:90:e6:5d:76:f4:c3:9a:9e:61:d2:86:
9e:e9:86:16:af:0f:bf:0c:83:e8:0c:ab:00:d1:49:
1b:55:8c:e6:55:ab:c3:89:de:9d:1b:28:89:99:15:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:26:A4:4C:2F:95:E6:04:40:32:96:4B:79:DD:D9:67:67:6A:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
150.230.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:cb:95:d1:ed:9e:b1:17:21:ad:0b:7d:c9:8b:04:43:d6:34:
f6:f4:9f:eb:23:fb:70:c4:71:3c:c0:3f:99:f4:fe:73:b8:8b:
36:8f:46:68:23:08:6d:e8:0f:6c:71:4e:1e:a4:ac:77:e8:f0:
d1:95:8e:35:ae:f7:5d:de:b2:de:c6:a7:5e:2b:4f:6a:02:b7:
2e:56:7f:b4:9a:3e:67:3c:27:93:15:b8:7b:f4:16:06:b0:76:
c8:72:bd:38:d3:b7:8e:df:90:09:70:2e:cd:73:fe:3b:a8:cb:
f2:6d:13:89:66:2e:d9:79:44:fa:56:e3:a0:0a:f3:c8:49:36:
fd:66:0d:de:ac:0f:52:31:c9:0a:30:d6:d2:c2:cf:41:a9:7c:
a4:f6:3f:4e:34:c5:56:59:61:22:f7:c8:ee:5f:89:70:29:4e:
af:45:1a:59:a8:86:02:ed:56:0b:cb:66:15:12:d4:d2:bc:de:
1e:c3:67:ac:21:2f:30:02:8e:ef:e9:c0:d5:bc:88:76:41:16:
c2:b1:41:fa:c1:bc:a2:b8:0f:9e:12:43:67:18:ac:c8:b2:0b:
06:72:af:e0:bb:7d:a8:40:08:ef:6d:ff:36:98:36:19:9e:8d:
78:e5:86:f5:cf:1f:94:cc:40:33:43:b0:0e:81:90:b7:8a:67:
00:47:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:20 2025 by rpki-client