
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa
File: 99e556d5-93d1-3e21-bd16-71af71731fec.roa (raw, json)
Hash identifier: LGl5fWFeTNVGzJdfz0WwDhNo7pHx0X6HvmnLIlIEc3w=
Subject key identifier: 2E:F6:EB:95:CE:ED:22:50:28:A4:8F:4C:D0:BA:AF:0A:F9:FF:5F:CF
Certificate issuer: /CN=5d42a494-a697-43ad-93a4-e9456779ed9a
Certificate serial: 010D0C9F4328584AECC2143793259168078D8CC0
Authority key identifier: D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa
Signing time: Thu 21 Aug 2025 01:02:35 +0000
ROA not before: Thu 21 Aug 2025 01:02:35 +0000
ROA not after: Wed 19 Nov 2025 02:02:35 +0000
asID: 32086
IP address blocks: 204.115.254.0/23 maxlen: 24
2620:44:8000::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ec:c2:14:37:93:25:91:68:07:8d:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d42a494-a697-43ad-93a4-e9456779ed9a
Validity
Not Before: Aug 21 01:02:35 2025 GMT
Not After : Nov 19 02:02:35 2025 GMT
Subject: CN=116f6bdc-78dd-4e9f-9953-b819cca89e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:47:25:e9:3c:d9:ed:a1:cb:17:66:11:ea:
2d:e2:bb:07:94:34:7e:c3:ac:09:07:bd:ce:3b:68:
93:2d:b0:4a:87:75:7f:52:bd:b9:af:66:b8:02:26:
8d:02:48:ed:79:ad:f0:10:54:bb:2a:f1:00:8a:b5:
19:7e:a8:35:04:7a:b3:5b:dc:e2:62:94:78:52:b2:
f9:15:85:50:b4:5b:fb:2e:07:6c:b0:7f:e4:9d:db:
56:a5:07:2b:81:ce:6e:00:b2:0f:5c:0c:7f:84:bc:
b5:a2:ad:af:c0:bd:64:87:44:54:4a:08:e1:37:6a:
3b:47:24:50:0a:e1:60:9a:c9:51:e0:b6:5c:3e:ae:
ac:07:ce:71:75:87:1a:96:0a:4e:bb:b5:8e:59:09:
1a:aa:f0:e4:86:28:c9:be:6f:b5:19:d8:f8:94:19:
a8:a9:36:c1:a4:5e:d8:bb:a9:8a:96:6f:e5:f4:6c:
01:8b:f6:d6:78:a4:09:e3:ca:9f:c7:90:33:00:dc:
96:f7:58:b3:0b:eb:b3:e8:d5:e5:02:3d:a9:f8:9a:
e8:36:83:43:c1:9c:72:38:99:d2:ad:ea:45:18:32:
ad:f4:d3:e0:c0:f5:86:af:49:3e:37:67:f2:b5:88:
6c:d5:ea:30:62:74:61:f5:61:69:d4:3a:16:2d:a0:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:EB:95:CE:ED:22:50:28:A4:8F:4C:D0:BA:AF:0A:F9:FF:5F:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl
X509v3 Authority Key Identifier:
keyid:D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.115.254.0/23
IPv6:
2620:44:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:7c:d3:93:92:61:f6:a5:a7:28:52:02:52:4f:ba:15:e4:4a:
17:8c:9b:c9:c4:aa:cb:fe:8a:34:1a:2b:69:73:d5:64:74:ef:
74:4e:61:0c:a0:91:fb:e0:86:de:64:a0:22:56:10:3e:de:e4:
9d:89:08:bf:d8:e0:25:aa:66:bb:b4:b9:11:a8:21:29:e4:c2:
9c:a1:03:4d:09:f1:da:4e:60:10:5d:9e:df:48:c1:91:ae:9c:
77:b5:95:90:75:ab:7f:7b:63:fd:5b:71:6b:18:63:47:08:ea:
71:2e:9a:dd:fc:c9:76:6a:33:31:6d:d1:27:40:c5:e0:09:7b:
2d:cf:c0:96:7e:b1:30:df:20:06:c4:a6:a4:bd:b5:99:e7:11:
da:ae:0e:5d:b9:42:40:7a:01:e7:f1:2f:6d:d8:9e:df:24:ee:
d0:2b:44:7c:a3:7a:6e:d3:99:a9:b8:7d:ed:3a:1e:29:09:61:
a3:06:11:44:51:8e:ea:45:a3:a2:38:b1:14:cd:7d:72:f8:46:
0f:90:f3:2e:7a:c9:e8:d5:03:bf:c4:9e:c9:36:f0:40:72:9c:
f7:17:ad:e2:f8:d6:96:28:84:40:82:b6:2b:6c:b2:d2:5d:74:
df:f3:ff:56:3c:a6:73:f3:b4:68:11:10:0a:7b:8f:c3:cc:3a:
a0:32:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:04:53 2025 by rpki-client