
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa
File: cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa (raw, json)
Hash identifier: l4g4hRz8BpNimcPM50dNQ8xTH5NQ1Ri9/iny1bDOB9o=
Subject key identifier: BC:03:E2:B3:8A:09:67:98:EF:56:93:3E:81:AA:B9:00:49:5F:4F:6D
Certificate issuer: /CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a
Certificate serial: 010D0C9F4328584AEBD65647AD560793FC983C60
Authority key identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa
Signing time: Wed 20 Aug 2025 17:07:35 +0000
ROA not before: Wed 20 Aug 2025 17:07:35 +0000
ROA not after: Tue 18 Nov 2025 18:07:35 +0000
asID: 399928
IP address blocks: 167.234.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:eb:d6:56:47:ad:56:07:93:fc:98:3c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a
Validity
Not Before: Aug 20 17:07:35 2025 GMT
Not After : Nov 18 18:07:35 2025 GMT
Subject: CN=86f67a57-2dcc-43e5-a34d-dca61c39b0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:56:2a:56:5c:72:76:e8:41:ea:65:05:96:
5e:c2:39:f4:95:34:3e:a8:33:55:ea:3a:db:23:16:
b8:ae:5f:7d:f9:41:41:93:c6:96:de:c2:01:4a:6c:
9e:e4:af:09:18:1e:18:5b:6a:3e:b0:1f:17:b1:8c:
6f:be:bc:d3:f0:86:5e:c7:c4:b8:3e:b4:be:95:be:
b4:7a:3a:f2:b1:a2:69:7c:2a:c9:36:f3:93:a8:b0:
42:4f:c6:e7:87:50:92:e8:a7:2f:25:13:b0:5a:54:
3c:ad:b1:2e:9b:e6:99:8b:81:f6:21:16:29:7c:17:
b2:70:cd:58:80:08:ec:d0:78:93:68:d6:44:4d:72:
27:ba:7c:e0:7c:5f:f2:02:d2:81:ff:9d:ae:37:43:
13:6e:ac:c7:ee:58:b0:a3:10:98:de:27:95:8f:6d:
09:28:37:2a:53:7b:39:fd:46:39:a0:4a:20:eb:dc:
ad:95:13:4a:30:16:45:d2:15:a8:75:e7:6d:39:bf:
6c:dc:d0:71:2f:6e:88:b3:64:64:f8:73:e0:87:9b:
ab:d3:16:83:93:dd:03:66:14:62:28:ee:be:ce:50:
07:5b:c0:ab:80:26:74:43:f8:a8:6c:6d:df:67:30:
51:8f:58:0a:21:6c:b1:d0:37:32:0f:3e:b0:61:bb:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:03:E2:B3:8A:09:67:98:EF:56:93:3E:81:AA:B9:00:49:5F:4F:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl
X509v3 Authority Key Identifier:
keyid:B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.234.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:c3:85:ce:4a:76:54:93:6f:9e:8a:3d:cd:54:b0:3e:ad:98:
2d:df:f0:9f:d5:3b:26:1b:06:86:1b:3d:23:73:de:d9:da:68:
b9:04:a7:2c:95:20:bd:d1:3b:a4:04:ff:7a:ea:74:9c:cf:be:
5d:2e:7e:4c:7a:53:c1:c6:39:43:63:5e:e6:08:40:bc:fa:b6:
24:ef:72:9b:68:c4:62:b8:e4:13:b6:59:5b:66:a5:79:96:c0:
2d:90:ef:9a:36:5b:c3:4c:1e:9d:b6:80:9a:3e:11:86:37:6e:
b2:f5:fe:ba:9e:bb:13:d8:64:0e:8b:22:11:a9:9c:43:22:d5:
a8:92:a6:b8:a8:9b:da:09:34:50:61:51:4a:b9:f6:1a:28:c3:
06:3d:24:07:38:ac:d6:8e:16:b4:8b:15:8b:58:5e:a9:03:dc:
64:d1:a1:67:3e:7b:e2:64:04:19:92:0e:ed:2f:30:e5:bd:d7:
07:60:ca:f2:91:ff:01:52:e5:97:ad:72:16:71:47:aa:d5:15:
72:fd:6b:0e:b1:3a:45:cf:83:39:0c:70:dd:2f:87:92:50:b4:
51:01:31:33:b1:e2:d8:2f:99:d3:1f:08:3c:e1:3f:46:d1:34:
76:da:cb:a0:6e:8d:b6:cb:ba:60:46:65:a0:68:9e:6e:a4:a4:
d4:14:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:19 2025 by rpki-client