
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
File: 454a8fab-a8e3-3b41-9727-e0e8d9535738.roa (raw, json)
Hash identifier: ikrgwo3Lm5alnalKeCyEmB64uQXB8Mmiipzoyg6EymI=
Subject key identifier: C0:33:44:B0:3A:14:B0:F8:34:93:98:EB:FF:5F:E1:B2:23:D5:F7:B2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CDE6C035DF3E2F3CC46080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 184.20.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:e6:c0:35:df:3e:2f:3c:c4:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=2f16a0de-3430-49b1-a314-6464434739e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:c9:7a:ca:22:8f:e5:77:37:0a:fb:3d:64:
96:9f:22:88:a4:9a:40:dd:13:c8:b1:b8:20:d8:af:
1b:8d:99:a8:42:b0:ec:5a:9d:55:2c:c8:fb:6f:ab:
24:ef:0b:4b:61:5c:f9:d5:74:f9:ae:78:0a:22:a5:
34:81:80:4e:1d:30:13:d0:e0:95:61:8a:87:1e:1e:
56:17:7a:ec:74:3b:c3:b6:36:28:33:e5:4b:e6:f1:
9e:df:17:44:d7:57:7b:b2:ef:b7:ee:55:ac:4b:d4:
fb:d7:39:0a:79:89:18:80:78:a7:ac:7a:27:0f:ed:
7e:62:db:a9:34:18:84:e3:51:69:ba:f4:ef:fd:10:
29:ca:e6:ae:5b:4c:f0:aa:7b:66:85:dc:48:60:d7:
9a:aa:4b:ad:00:14:ac:f7:bf:d9:4f:78:52:da:f7:
ab:86:74:3e:d2:f0:84:e9:bd:60:c0:ee:4c:3a:9e:
17:da:62:76:22:60:93:8d:d4:34:24:32:95:0d:e0:
60:a9:cc:5d:0a:8b:71:1b:ad:8b:ef:da:25:4e:24:
19:d9:66:2e:29:fe:fd:bd:f7:37:88:77:bf:05:f8:
cb:cf:31:3a:b5:e8:56:a5:f3:62:8a:54:8c:3e:6f:
88:e0:34:5e:6a:2b:a2:70:7b:e1:00:c4:fe:f0:19:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:33:44:B0:3A:14:B0:F8:34:93:98:EB:FF:5F:E1:B2:23:D5:F7:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b5:9d:e7:5c:e3:c5:65:e9:c4:8e:33:15:d7:f1:dc:b4:e0:
84:6d:3e:a3:40:b5:e2:c7:ef:44:8d:d6:52:ab:94:a2:b9:ef:
dd:b8:3d:f1:1a:d8:c3:60:af:60:ff:b7:cd:30:86:f1:59:2b:
c6:e8:c7:be:af:25:db:90:5f:b8:13:d2:79:8d:df:a7:8e:c1:
bf:88:19:39:df:0e:d6:96:8d:98:b9:3c:a6:b0:3f:e9:66:b9:
26:a2:42:fe:f5:ab:85:16:30:4e:1a:a4:0c:e5:a7:0b:0b:42:
c0:68:dd:ed:24:38:53:0e:74:d1:0a:4f:16:96:d3:d2:ac:f7:
7d:91:42:8e:2c:c9:c2:54:1c:ad:03:f8:62:f6:c2:9e:f6:12:
3f:2a:aa:34:c6:cd:91:21:a0:53:0c:cf:fc:81:e8:81:17:92:
6d:89:49:57:58:39:18:08:4d:85:46:14:23:e1:05:5e:03:a2:
1c:d7:de:4b:02:05:8d:36:00:7a:f0:ce:e4:a2:f0:12:08:0c:
04:e0:13:16:47:a7:9e:d0:60:37:bd:c3:79:47:30:a6:f9:17:
50:2f:d4:16:29:36:bf:f6:76:a8:7c:80:e2:f8:50:2d:86:2d:
32:be:04:6f:16:dd:d9:fe:1a:79:9f:5e:6d:74:d5:c9:1e:05:
33:b6:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:07:37 2025 by rpki-client