
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
File: d546f647-962b-3c0b-af80-2d78bb80fcac.roa (raw, json)
Hash identifier: 4D82v38yevc2Og9wbH1YkYuyi8+emqy7BwI9oKzIEYg=
Subject key identifier: BD:43:E5:10:73:5C:80:E9:3B:50:3E:2F:36:71:CE:14:5C:72:C7:AA
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BAD628EB84ADA43397395CE40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
Signing time: Wed 29 Oct 2025 01:00:31 +0000
ROA not before: Wed 29 Oct 2025 01:00:31 +0000
ROA not after: Tue 27 Jan 2026 02:00:31 +0000
asID: 31898
IP address blocks: 155.248.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ad:62:8e:b8:4a:da:43:39:73:95:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Oct 29 01:00:31 2025 GMT
Not After : Jan 27 02:00:31 2026 GMT
Subject: CN=9e5e2af5-6a91-4b3d-a344-8ed901aefbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:16:33:0f:d1:d8:ed:cf:62:09:26:0a:f9:
69:7e:e8:8b:65:16:b2:35:cb:c2:37:c1:6f:bb:59:
5a:44:94:bf:09:ac:ab:f2:87:36:a6:de:04:f0:87:
d4:0f:bd:bf:f6:00:97:0b:4e:31:be:d7:9c:64:9b:
fb:9f:5b:ea:c4:f2:d8:fe:b4:4f:b7:ad:84:fe:2b:
3d:2b:25:63:49:10:fd:82:cd:a0:71:4e:2f:5f:28:
79:fd:96:31:c9:14:d0:b0:55:09:df:95:11:27:e7:
69:3b:96:d5:5f:8b:09:68:97:e9:45:ec:f3:52:9c:
d0:54:05:bc:e1:da:b1:61:45:74:90:88:34:8c:02:
fe:4a:19:17:a6:1c:de:18:91:31:d9:d4:ff:56:91:
20:0d:3d:e5:88:cf:61:a1:ed:43:9a:39:6b:20:76:
ac:6f:1d:fe:1a:78:08:c5:d8:90:51:f4:d8:55:f6:
5d:c9:e9:7e:b1:c3:7f:b2:15:77:1d:dd:41:15:a3:
1d:b7:9f:a7:9e:67:51:c5:43:c5:36:8c:41:af:7b:
9d:ca:91:a3:6e:a4:0d:a6:a4:e3:f6:84:ee:d2:2c:
40:d7:cf:49:16:53:eb:90:26:a6:4d:36:84:4b:52:
1e:23:4a:5f:a8:af:db:89:a7:38:fe:4c:10:b5:0e:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:E5:10:73:5C:80:E9:3B:50:3E:2F:36:71:CE:14:5C:72:C7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
155.248.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:7d:a6:15:75:9a:fd:f7:06:9e:01:3b:fa:63:60:04:ed:7a:
f7:ef:1f:a9:8b:c2:5c:fb:a1:00:29:cf:08:4a:1d:de:ea:29:
d7:26:de:e7:32:49:7e:31:d0:c6:62:eb:b8:c2:86:85:5a:b6:
a1:04:c8:4c:e0:4c:21:ab:68:52:bf:d8:33:04:45:12:a6:6e:
58:da:34:86:f8:f0:04:e4:aa:ee:cb:87:da:0d:35:51:c3:eb:
81:2f:29:64:2a:d6:bd:2c:89:50:ff:1d:97:af:a8:0e:29:01:
15:56:a0:9b:82:b4:03:16:ee:ba:c2:0d:bf:76:16:a1:f1:e8:
5f:4a:91:af:5b:81:99:4c:59:67:85:39:c4:b1:c5:b4:52:0c:
f6:7e:03:47:5a:65:2f:de:17:aa:c5:07:95:5a:a3:8e:6f:f7:
f6:31:d6:f7:2a:90:a5:b1:5a:ff:b0:3d:80:6f:bd:27:ba:18:
67:41:da:ce:8c:05:62:dc:20:bc:4a:46:f8:e4:67:f5:8b:32:
56:90:f4:95:7d:7e:ae:82:c9:cc:6f:27:01:bc:59:84:ca:3e:
97:5e:34:56:44:02:1a:f5:4d:65:2c:c7:80:96:2e:0d:36:aa:
b7:33:a5:dd:23:62:db:0c:8c:9e:c1:73:90:d4:88:28:80:55:
42:ea:ff:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:58:27 2025 by rpki-client