
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa
File: 53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa (raw, json)
Hash identifier: q/rXO1/sB3ihePCDmzRlRjI3I9Rwg/i+x+L0/k1/4co=
Subject key identifier: C1:68:7C:82:CD:30:A0:91:1B:AE:A3:8E:D9:45:B4:2D:6D:DA:79:B1
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F4328584B821CD575294C8A8994E6F680
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa
Signing time: Mon 13 Oct 2025 13:00:36 +0000
ROA not before: Mon 13 Oct 2025 13:00:36 +0000
ROA not after: Sun 11 Jan 2026 14:00:36 +0000
asID: 46253
IP address blocks: 64.145.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:82:1c:d5:75:29:4c:8a:89:94:e6:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Oct 13 13:00:36 2025 GMT
Not After : Jan 11 14:00:36 2026 GMT
Subject: CN=dff76465-6e08-4d5c-8d9b-6d067276863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:76:3b:5f:a3:12:22:13:13:3d:2f:fa:bd:
86:cb:d2:da:a4:ef:1c:7e:44:d7:fe:7e:43:02:a5:
69:08:2d:8e:9b:ec:59:bd:a3:65:78:f6:00:ff:2a:
02:dd:5a:9e:1f:57:c8:eb:a2:4a:8c:9b:ec:69:1a:
23:b4:a7:c3:dd:21:f2:91:af:38:f1:b4:7a:cd:9e:
65:7b:d4:cf:6c:fc:04:7d:94:2d:d0:e5:0d:5e:06:
d2:a9:eb:38:4e:23:2b:e6:9f:42:56:74:90:f2:81:
89:93:cc:c1:61:b7:a5:1e:45:f7:d4:1b:fb:ee:28:
c8:06:14:eb:a0:5f:bd:3b:2d:eb:65:87:d0:cb:ad:
d1:44:3a:26:a7:89:88:b2:c9:01:0a:41:7c:74:1f:
4b:19:b0:25:c5:e5:31:64:e1:2f:8f:dd:16:1d:f9:
0d:e6:dd:ef:97:f6:48:e7:37:79:5a:c4:9e:54:77:
3a:13:f0:55:a8:26:01:6e:56:9d:01:37:5c:48:0b:
ea:b2:2f:89:e4:ea:ca:6d:ae:e7:a1:a1:29:d3:74:
71:1f:0a:a9:38:34:61:0c:bf:0a:a5:94:18:4d:ef:
79:33:45:57:54:c9:34:f5:5d:56:5f:50:f5:6c:21:
c7:f1:b5:9c:18:90:36:33:f3:14:af:d2:c5:87:a7:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:7C:82:CD:30:A0:91:1B:AE:A3:8E:D9:45:B4:2D:6D:DA:79:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/53125d6e-133f-34b6-9ec8-0f1b3a808dee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.145.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:d0:57:d2:7f:e5:c6:c1:80:12:13:05:52:e0:ad:b8:c8:f2:
00:96:ae:c6:fb:69:13:ce:15:d2:b9:95:47:1d:d2:9a:ed:5d:
eb:14:c6:ab:64:f7:cc:51:31:3c:88:31:c1:60:eb:21:c0:96:
72:fd:88:83:ed:fb:e6:3a:be:ce:f6:cb:5c:6b:cb:62:0f:01:
c4:58:1a:dd:83:02:c2:d1:db:38:b9:4a:2a:79:d6:38:f4:4e:
14:e4:20:05:cd:be:f4:9b:0d:33:9e:49:9a:2c:4f:ca:0c:67:
96:97:44:fc:be:06:e5:de:08:d6:8a:fc:2a:ce:86:94:ff:6e:
53:3b:71:85:b5:e0:8e:2b:3e:19:31:ea:79:1d:06:15:a6:6a:
e2:a2:07:42:7a:9a:f7:e7:c9:d9:db:7e:83:f8:45:7d:91:79:
a8:42:5f:68:8e:a8:c4:64:5f:43:db:16:ae:eb:3f:d8:6c:67:
0d:35:e5:fe:3c:7e:05:8b:68:2f:83:a2:2a:0e:21:f8:43:fb:
7c:f0:e8:8c:72:5e:cd:27:0b:cc:82:fa:86:06:ba:c3:f1:2d:
19:02:b9:30:c0:01:34:ca:0c:1b:bc:ec:31:69:ab:f7:4b:48:
79:80:7e:2f:70:96:3e:12:aa:3c:f4:cd:77:5e:d8:01:55:8f:
6a:67:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 01:05:01 2025 by rpki-client