
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0f87845-17e9-37e6-a63e-bbaa645920c3.roa
File: e0f87845-17e9-37e6-a63e-bbaa645920c3.roa (raw, json)
Hash identifier: zcdVipckfWEevkj7plgZkwT9ToSfykT1A4VBHV/oQT8=
Subject key identifier: 1E:3D:D5:C8:4F:6C:05:7B:4D:B5:95:42:3F:C2:24:1E:51:28:8F:AA
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BBE40617351CA3045C279CA80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0f87845-17e9-37e6-a63e-bbaa645920c3.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 152.67.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:61:73:51:ca:30:45:c2:79:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=f6d9bae3-dcbd-4535-96b7-320ce5bb17d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:44:65:82:28:f2:5e:01:85:7d:82:d9:c5:
56:69:37:6f:bb:a8:db:e8:d1:2b:7a:89:a8:d7:ed:
8d:4c:ba:ea:23:bc:59:7c:e5:8b:d2:50:40:35:a2:
34:e3:03:f3:b9:e5:a7:6b:13:b0:ab:a8:ba:39:0f:
cd:45:35:d7:77:4f:14:6c:70:35:91:ea:69:91:7d:
e0:ee:63:14:dd:da:12:93:87:f0:1d:90:27:45:31:
20:64:ea:ed:67:f7:fc:31:68:a6:06:b7:53:1f:26:
01:e2:bd:84:cf:76:f9:0c:b6:b3:61:91:90:74:7a:
66:5c:44:15:d7:48:f6:f4:f4:0f:b6:46:d7:06:6b:
0d:98:7d:c7:4d:76:b8:75:f9:73:18:a2:2c:59:e6:
87:cc:c1:d7:33:c9:4e:93:e4:0d:eb:ae:b1:18:26:
13:08:e8:a3:ae:45:d4:a8:ea:61:76:b3:af:ac:97:
42:d8:69:7e:f5:89:67:e8:34:42:38:2a:ab:89:a8:
14:d7:6e:8d:5f:c8:c7:71:64:82:6c:4c:3d:96:b0:
64:e7:b4:bc:37:8a:ce:a4:bb:8a:f6:32:fc:72:c7:
88:99:42:8e:48:29:a6:12:8d:ca:71:99:98:a0:cb:
43:57:74:5c:14:5b:7a:56:b2:83:22:06:4c:a6:75:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:D5:C8:4F:6C:05:7B:4D:B5:95:42:3F:C2:24:1E:51:28:8F:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0f87845-17e9-37e6-a63e-bbaa645920c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
152.67.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:24:80:d8:76:91:ca:4f:db:2b:a2:27:43:b4:af:aa:c4:cd:
31:77:ed:1b:b3:09:d7:ff:e7:a3:16:9d:76:59:23:91:c3:a4:
e2:e6:62:fa:c5:ed:26:13:2d:9d:6f:25:51:4d:0c:8f:a0:96:
4a:7c:37:98:93:63:b5:f7:17:3e:4b:47:55:80:73:f9:73:d9:
22:78:83:b0:c9:b7:ad:75:6b:69:95:dd:07:d9:3a:5f:8f:fd:
09:54:f7:c3:78:23:d8:27:df:e2:c2:8f:0e:5f:e2:c6:31:59:
8c:18:ac:be:de:2e:46:30:a5:50:11:dd:36:8a:e2:bf:fa:26:
f4:27:f8:8d:57:4f:ef:6c:ec:89:b9:ea:b1:ac:f1:f9:d7:89:
ef:cd:ff:ba:1d:60:cb:e4:f1:7f:7d:f3:2d:47:39:2f:77:86:
92:c9:6d:48:60:99:08:4e:40:aa:1f:f7:3b:70:55:8e:e4:4d:
4c:bf:41:fd:e7:71:da:bb:ec:ef:6d:ff:54:0f:e6:ce:23:7b:
7d:1c:f3:99:85:fe:97:8f:82:6e:50:26:03:49:6a:a8:2a:3e:
c6:2c:80:54:57:80:94:60:b8:96:25:0c:01:94:ff:de:3f:c6:
7f:dc:d6:9d:f9:5e:1d:33:d0:75:8e:cd:65:9e:01:a7:f3:1d:
4d:40:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:12:09 2025 by rpki-client