
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
File: 2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa (raw, json)
Hash identifier: +wHcEQQfywbQ5yJ3OkoqB2atR8vADlio3vH+vI/0q9o=
Subject key identifier: 12:F9:76:45:DD:AB:C3:63:37:4B:14:5E:CF:BD:25:25:60:15:62:EC
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584BC53AFAE5EF2A4B9A03FF9600
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 14061
IP address blocks: 147.182.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3a:fa:e5:ef:2a:4b:9a:03:ff:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=4a6cf94a-2a3c-46a2-8bf4-5af0ff55f9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:bc:4f:97:a8:3a:8e:35:bc:69:07:a3:23:
ca:dd:b9:f8:f6:04:3d:01:85:19:6e:af:9f:91:57:
c9:9b:d4:1b:95:f1:6d:be:23:8d:51:3f:73:10:b7:
65:d5:ca:20:da:b3:15:9b:82:ce:f7:65:03:b2:39:
02:58:a6:b7:bd:66:a8:f1:05:5b:f2:b2:b5:47:be:
b2:28:96:c4:8e:fe:6a:d5:0e:c0:fd:e6:6e:77:8c:
09:3c:97:3d:d3:63:05:0b:f1:61:bf:2e:b4:73:c9:
60:07:9d:75:49:c0:70:51:b1:a4:09:83:1d:d1:3a:
f7:68:0e:f3:11:75:3b:87:12:ef:21:a8:3b:b0:5f:
8c:6c:9d:fc:76:27:c3:e3:72:05:f1:2d:3d:31:e8:
41:21:71:90:d4:f8:28:b6:0c:ce:fe:87:a4:88:7f:
28:bf:a5:ee:b1:11:49:13:b9:56:14:23:3b:69:8c:
ad:e2:7c:85:49:c1:9b:6f:5d:45:13:b2:b6:e0:a9:
3a:09:fb:09:ef:1a:94:6a:58:78:0a:d7:4f:5d:f4:
62:a3:11:17:ff:50:30:76:bb:b0:6b:0a:54:e3:bb:
12:dc:83:fd:84:dd:c5:40:7d:bf:b4:cf:cd:64:ba:
3a:c3:1a:57:84:f4:93:14:86:51:b2:f2:47:24:7f:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:76:45:DD:AB:C3:63:37:4B:14:5E:CF:BD:25:25:60:15:62:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
147.182.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:d6:ec:d5:95:59:f7:da:3f:07:a9:2c:f2:fe:e0:15:a3:7e:
66:90:2e:df:09:d1:e6:b7:ea:84:d3:aa:75:c7:aa:65:62:cf:
25:71:1b:ca:2f:72:3c:31:be:51:07:66:98:61:6d:1b:86:9a:
da:48:ba:9d:29:40:0a:48:fb:e0:35:90:56:a6:36:fd:41:17:
b9:64:15:6a:c5:55:fc:39:02:3c:9c:e8:48:6b:3f:78:f4:c2:
5f:c8:39:6d:d5:90:d3:66:3c:d7:01:2a:00:9c:36:a2:f6:11:
86:01:ec:40:45:d7:98:37:a2:91:88:5a:48:4e:31:7c:ec:a9:
09:e1:97:f2:24:4b:e7:1e:f8:c1:fc:f3:ab:81:46:94:c0:e8:
37:d5:5e:b0:75:c9:eb:40:8e:45:02:31:50:9d:a4:e9:b5:f9:
97:bb:71:92:a3:2c:3f:77:15:41:10:42:4d:19:aa:d1:5c:d4:
3d:be:ad:a7:ea:04:2b:be:f9:04:be:32:5b:bf:89:b5:27:9c:
d0:dd:f8:e4:a5:ad:11:0f:5b:d0:b7:4e:71:3a:a4:52:c2:22:
ff:3f:78:27:4a:89:6e:0d:5f:ee:7d:ad:7c:fa:75:21:09:4e:
08:f9:a6:19:31:95:d2:03:c0:ef:07:a9:1e:f2:46:da:5a:63:
22:db:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 02:28:54 2025 by rpki-client