
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa
File: 57540e59-06f8-3554-b0ed-f895e16bdb38.roa (raw, json)
Hash identifier: sTjNDHIGA3h3B4TTV2mVwAhL7M28td98A8NMZ343IUc=
Subject key identifier: F5:90:38:47:0C:34:C7:73:91:1F:F9:00:25:2C:06:AB:94:D6:0E:23
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584BC53AF3D3DD757CD761939100
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 14061
IP address blocks: 159.89.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3a:f3:d3:dd:75:7c:d7:61:93:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=0ad3601e-7761-4c53-b4c3-160112f20c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:79:84:3a:1d:62:c7:49:0f:00:9e:f9:fa:
87:a0:6d:bf:bd:ba:c5:d9:69:29:91:6b:fe:91:7e:
b1:ed:0a:08:fc:84:b5:81:38:7f:c7:59:98:6f:32:
b3:a2:b1:41:42:70:e0:01:7c:89:fe:cd:0f:73:aa:
f7:6e:4e:19:9f:ea:65:60:4e:69:f6:e6:3b:14:0f:
c6:9c:2b:61:be:eb:79:5d:61:4e:1f:aa:98:f1:87:
5f:30:73:a6:81:b8:2d:05:f0:3b:35:c5:c5:ff:9d:
08:3c:c1:b9:34:70:a0:a9:72:db:f0:44:95:ea:66:
4f:12:e3:56:e4:57:96:84:b2:11:b4:80:75:92:bc:
f9:35:d9:01:ad:a1:8e:ce:e6:b3:b6:fe:82:7a:8d:
7d:b4:38:09:53:52:7d:e0:a6:b0:1a:63:f5:86:c8:
99:83:cd:37:c6:36:da:ec:3f:d2:c8:f2:4b:17:47:
84:f0:c0:bc:29:d4:a8:97:8e:96:ea:68:9c:99:b9:
f7:c5:45:ef:76:2c:6c:af:46:5d:5b:47:11:3b:8c:
61:80:b9:e3:84:10:26:5d:6c:44:c3:18:70:97:bd:
33:1b:35:4f:df:13:4a:af:2b:a1:58:23:63:ad:3f:
5a:dd:00:64:f2:75:43:f5:5f:67:da:58:1f:01:3d:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:38:47:0C:34:C7:73:91:1F:F9:00:25:2C:06:AB:94:D6:0E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
159.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:61:7c:e8:f0:c4:33:73:80:e7:d2:73:81:2f:e5:46:bb:2c:
85:3a:12:bc:67:33:37:8e:8b:86:7a:46:7e:b6:55:06:0c:db:
15:5b:07:f1:ea:a9:39:c8:aa:5c:39:b0:c9:b7:ca:40:38:95:
c0:7b:49:db:2b:0b:ef:77:7d:6e:52:15:15:3b:1e:ce:2f:21:
0c:11:a9:c5:f0:8a:24:78:69:f9:bc:89:81:2c:92:2c:31:82:
ed:03:75:5a:81:64:79:84:6f:a6:62:d6:c3:4e:7c:10:4c:75:
ef:69:6b:03:4f:a2:10:b9:a2:66:a7:90:65:e5:39:5f:c6:77:
4d:cd:85:00:d1:24:5e:f6:58:a5:87:d6:ca:3e:2c:8a:14:7e:
a8:19:64:cc:84:12:60:2f:5e:ca:48:e0:21:1a:1a:86:50:f4:
c1:3d:b3:55:39:c7:0a:c3:ff:fa:a4:b4:2f:93:3c:e6:37:6e:
8e:c7:bd:8f:88:43:0c:c6:91:be:3b:f8:84:48:ba:0b:f9:ca:
8f:06:0d:6b:81:f4:9e:7e:fe:27:5d:b5:42:4a:f6:86:8c:93:
b2:5a:36:62:37:49:3a:28:2b:6f:43:8e:b9:ef:ac:ba:60:71:
8f:b5:ef:f2:75:57:57:73:7f:81:12:ee:96:ff:3c:23:b9:2a:
0f:35:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 02:32:52 2025 by rpki-client