
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/619cc280-cb50-3859-8033-3c2a05942005.roa
File: 619cc280-cb50-3859-8033-3c2a05942005.roa (raw, json)
Hash identifier: I2RKT4u42iFkxEziLvAbcxAJSG/IfY6dp5ekOvzTc2w=
Subject key identifier: 8A:6A:FB:96:1D:F8:FB:07:42:46:60:12:59:C5:62:F6:EB:3F:B3:9E
Certificate issuer: /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial: 010D0C9F4328584BA39CF5BBF2A2CC9F6942BD00
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/619cc280-cb50-3859-8033-3c2a05942005.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 174
IP address blocks: 161.129.184.0/23 maxlen: 23
161.129.184.0/24 maxlen: 24
192.197.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9c:f5:bb:f2:a2:cc:9f:69:42:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=d22fc94a-ef9a-4bf3-ac52-97f3fca24a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:99:2c:8e:6b:56:9f:be:dc:22:64:1a:20:
28:a6:7b:6c:08:fe:51:ac:05:f2:29:84:20:77:90:
1a:64:2f:d8:a6:fd:07:80:1a:3a:17:5e:07:f3:1b:
39:b9:29:28:d6:16:c0:28:74:08:5d:7c:49:a3:f4:
67:f0:ba:ed:53:20:3d:d9:00:9e:38:df:34:68:d5:
6b:6a:c3:06:67:78:d8:5d:05:16:6e:fd:d8:25:3c:
4e:5a:69:68:83:78:a9:8a:e9:64:3c:74:44:0a:a3:
11:40:3c:1c:df:2d:34:14:64:53:06:cb:92:3d:8a:
4f:ab:ed:62:0f:43:5b:81:c2:17:35:b4:80:8a:6a:
13:28:cb:be:36:41:9d:2f:01:77:b6:79:dc:d3:1d:
0d:bc:9d:7f:e5:5a:71:8e:77:f4:a4:95:a8:83:89:
f8:f3:a3:63:ab:be:c5:2f:24:43:aa:a2:e2:16:81:
1a:9c:9e:ee:7d:c7:03:04:42:67:c8:11:9a:77:c9:
94:53:2e:8a:b8:cc:a4:d9:9e:34:25:bb:38:b2:01:
af:c3:bd:1e:81:a1:6e:6f:30:f2:7e:3f:07:e7:81:
ea:d3:e8:07:b9:ec:fb:70:05:62:ab:81:78:75:4b:
9d:6e:a5:1a:ff:eb:72:58:29:a0:bc:4d:0b:14:63:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:FB:96:1D:F8:FB:07:42:46:60:12:59:C5:62:F6:EB:3F:B3:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/619cc280-cb50-3859-8033-3c2a05942005.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
X509v3 Authority Key Identifier:
keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.184.0/23
192.197.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:65:2c:b1:aa:2d:96:22:e7:a5:65:2f:3a:e1:69:23:09:5a:
c4:70:79:6c:ca:a9:fd:59:6d:5e:c6:33:76:c7:b8:cd:bd:02:
0e:db:b1:5c:2a:80:97:38:7a:44:8e:df:b3:1d:fc:68:ae:e1:
dc:bf:b5:98:eb:00:00:5e:bf:c2:91:e3:94:63:90:f0:d3:73:
ea:cf:1d:3a:14:f6:ec:ff:70:5d:72:98:ff:77:ba:d1:e5:90:
d8:0a:5d:ef:94:50:a1:57:71:1d:9e:35:d6:12:ba:54:4f:5d:
cd:c9:10:fb:56:7e:c1:99:94:4f:8d:a7:83:8e:b8:ac:cf:e0:
41:b7:e6:c5:4c:18:87:28:b5:ab:22:cb:ca:b6:2c:e0:3e:b9:
d0:15:9d:85:81:83:c7:ad:be:0e:98:fe:30:13:dd:29:56:8a:
c2:26:c3:3f:0e:c8:67:b9:7a:0d:df:06:9a:94:30:e1:c9:cc:
9d:12:7f:3f:5e:2e:7d:41:7a:b6:b8:54:3a:d1:e2:36:98:ea:
64:26:18:08:9c:72:ab:9e:19:e2:aa:88:f5:9e:29:6b:63:81:
b2:a9:c3:81:07:aa:c7:94:a7:10:91:25:9a:fc:64:c5:45:c7:
39:dc:00:a9:22:cf:f7:6b:9c:f1:8d:46:9c:1e:e7:e1:1c:82:
9d:79:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:41 2025 by rpki-client