
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
File: f476b183-5352-33da-bcfc-04901b542cfd.roa (raw, json)
Hash identifier: /kR6XUUEO1RV0DC0QHDuAbWJfvscWdp8budSDQa3BsY=
Subject key identifier: 8E:B0:86:CF:85:AD:DB:D3:0B:7C:2E:D3:9E:BB:05:F7:5A:21:C3:71
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CCDB830D65C4647B19EA40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 72.173.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:db:83:0d:65:c4:64:7b:19:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=89ae862d-6996-4c48-b6ce-2460785cb0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:3a:dc:92:8d:4d:b6:2a:69:4d:e5:63:95:
50:d7:e7:0c:1e:2f:8f:e0:c1:5e:4a:ea:fb:8a:1d:
60:4a:66:c4:00:7c:e9:32:d6:70:74:e2:81:fb:75:
73:96:57:fb:c0:e4:d2:21:fc:ad:96:2c:53:19:32:
6d:21:58:3a:a9:39:a9:4f:40:6a:da:0d:c2:b4:c8:
98:4d:dd:01:9e:04:84:e6:42:f5:76:2b:d6:df:b7:
1f:29:f3:6b:28:65:74:04:e3:97:70:b7:08:d5:78:
46:bb:4f:18:56:20:9e:af:46:7e:68:68:c3:4c:74:
e2:a2:a2:c1:9a:d5:a8:a4:bb:75:0e:91:e0:af:8d:
2f:d9:bd:4d:b0:4e:16:69:6a:49:e0:28:04:ec:7c:
54:37:c5:d1:b1:de:3f:2a:5b:12:fa:1c:ae:72:01:
55:73:0c:b8:51:e7:57:f3:fe:4a:ff:8f:22:7f:6a:
e7:b9:c3:87:99:2d:14:ca:66:13:09:5f:80:05:1f:
26:30:42:f2:66:24:ad:1b:b7:05:cc:44:f3:c5:91:
71:fc:0e:1c:dd:21:64:3e:c9:13:59:04:57:21:32:
0f:68:9c:52:bd:88:62:70:98:87:fb:73:2f:11:65:
62:97:b0:c9:ec:53:ad:76:32:b2:dc:da:07:f2:d3:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:86:CF:85:AD:DB:D3:0B:7C:2E:D3:9E:BB:05:F7:5A:21:C3:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ef:b4:4a:b7:9b:33:4f:3a:a6:fa:29:c3:31:53:4e:ea:01:
70:5a:cf:d3:1a:e6:0c:33:82:a2:c1:ef:ff:f0:20:8c:39:8a:
d5:b5:9a:a2:04:f6:d2:db:13:1e:ea:c9:7d:0a:f3:1f:34:fa:
a3:9c:ab:ab:ba:20:d0:c0:3c:ff:9b:b8:fe:05:bc:05:f3:ae:
65:38:21:33:16:6a:cf:92:79:f5:70:92:74:98:67:92:f9:8f:
2f:09:d5:b7:9f:28:47:cf:b5:58:95:53:f8:93:44:05:c0:fd:
7a:34:c9:5f:81:a0:08:b5:65:7f:d8:4b:f7:10:6f:27:36:b9:
53:8e:05:23:18:24:09:83:51:95:fc:2c:b6:72:69:f2:ee:62:
0e:a4:ff:18:d1:6c:dd:8b:41:a5:4a:d9:6a:11:37:48:13:3a:
33:2c:ec:0d:94:2e:6b:c7:ee:d5:21:e5:24:d8:8c:4c:ec:da:
f0:25:cf:af:5b:8c:46:af:34:0a:44:41:78:62:f2:87:2a:52:
33:1c:59:f8:8d:0e:6f:bb:80:8f:e5:00:82:de:7c:c7:d5:be:
e4:fa:df:ff:3c:fe:52:da:bc:d5:9f:6b:ab:79:54:fa:90:fa:
bb:db:86:fe:8e:0e:d5:80:93:8b:95:af:75:2e:09:16:74:89:
23:fe:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:07:31 2025 by rpki-client