
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb457af1-a3cd-34fc-a443-481bdae41bc0.roa
File: fb457af1-a3cd-34fc-a443-481bdae41bc0.roa (raw, json)
Hash identifier: lirnttCMHenT8RzLNQtwuVM2z/ffXbacVzz4u2ff+18=
Subject key identifier: 9F:45:80:C3:2A:7D:C0:73:98:6A:FF:31:E9:AE:E9:70:D5:EF:E6:AF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CD06579A54B6EC80282FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb457af1-a3cd-34fc-a443-481bdae41bc0.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 99.197.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:06:57:9a:54:b6:ec:80:28:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=94b3d8d1-5a8a-4f74-b952-5fc4cc4e54ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:8f:28:d9:01:3a:9a:af:14:17:bd:a6:b7:
44:08:07:05:ad:f8:82:7f:7e:79:0f:b5:41:9f:89:
51:3f:02:5e:ac:52:ee:8b:56:e1:56:9b:87:06:aa:
af:f1:54:66:d5:ee:52:00:a3:d4:79:e1:30:bd:45:
3e:3c:da:b2:3d:ec:68:fc:cd:71:e5:2a:48:32:0e:
c6:8e:c6:fd:3a:82:65:97:5d:42:51:1f:d2:71:95:
2e:3b:39:be:32:8c:2d:b4:c0:f7:4f:b8:8e:24:ce:
57:3d:1e:3c:3b:3a:90:59:ad:2b:f0:19:34:2b:6f:
5b:cd:10:d5:73:82:00:3b:ea:44:c2:a4:f1:bf:fa:
66:7a:f8:4b:ea:29:69:eb:17:f7:d2:e3:95:d3:43:
e8:bd:94:ad:11:28:f0:3a:da:db:99:10:8f:5c:a2:
15:f1:72:da:ef:26:1f:d4:6f:8b:7b:dc:42:12:b4:
6e:ac:d7:e0:79:c6:84:b5:b7:30:8d:e2:c7:ee:86:
11:40:7b:6d:ac:e0:df:2a:85:07:76:4c:da:ca:ff:
8e:e6:02:4b:38:97:35:6d:c8:09:14:af:49:be:b1:
32:80:07:8b:2e:3c:ad:7c:13:f6:d6:83:b1:e7:8a:
51:3e:b1:61:2e:58:f1:e0:d4:e9:b1:d8:e8:87:20:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:80:C3:2A:7D:C0:73:98:6A:FF:31:E9:AE:E9:70:D5:EF:E6:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb457af1-a3cd-34fc-a443-481bdae41bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7e:51:a4:d2:57:61:b8:cb:5f:4c:16:7a:3f:30:49:dc:c9:
70:af:e8:e0:16:5a:41:64:0b:c1:a0:b1:6a:0b:a7:48:e3:7a:
3f:35:56:07:db:57:1f:0f:e4:b4:f5:b4:d2:8f:46:a5:e4:8b:
4e:f1:31:b3:c5:28:e3:ae:8c:86:04:09:b6:2a:40:b1:35:e1:
96:bb:5e:ff:6e:a8:e4:79:e4:38:12:d7:bb:ad:e7:24:af:55:
39:a8:26:ea:d7:6c:a7:d2:84:75:e4:a9:a2:e5:1f:80:90:04:
38:79:be:7e:3a:43:57:6b:6b:b2:0b:fc:c9:4b:a9:5d:79:cd:
0c:d2:c5:ea:ac:45:7c:97:ea:e6:55:8c:bb:3f:5e:04:77:4a:
d6:39:1e:9b:dd:7e:29:0b:34:5a:7f:42:9e:fa:40:72:33:1f:
e5:7e:f4:35:1a:85:07:70:ad:68:59:87:8d:6f:5e:d5:70:3c:
2e:fd:80:5a:62:dc:ff:ef:ac:41:c2:5e:52:6e:ae:b7:fb:55:
51:bb:a0:a3:3c:f9:fa:5a:90:5e:8d:e7:51:d1:8a:9d:98:ef:
1b:b6:e6:1b:70:e6:6d:ee:65:df:ea:55:11:6e:b1:29:02:87:
af:55:d8:45:96:28:c8:4b:4d:56:31:25:0a:ca:0c:ec:7b:08:
8b:c1:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:00:17 2025 by rpki-client